ACFE CFE-Investigation Exam Practice Test Instant Access

Question 1

Which of the following is the MOST ACCURATE statement regarding the analysis phase in digital forensic investigations?

AThe analysis phase of digital forensic investigations should not commence unless it is verified that the suspect devices do not contain relevant data.

BDuring the analysis phase, it is best to use a combination of the various forensic tools that can assist h identifying, extracting, and collecting digital evidence

CWhen analyzing data for evidence, fraud examiners should look for exculpatory evidence but not exculpatory evidence

DThe primary concern when analyzing digital evidence is to protect the collected information from seizure

Answer : B

Question 2

Which of the following is the MOST ACCURATE statement about how fraud examiners shook! approach fraud examinations?

AFraud examinations should begin with general information that is known, starting at the periphery, and then move to the more specific details.

BWhen conducting fraud examinations, fraud examiners should adhere to the means-and-ends approach

CWhen conducting fraud examinations, fraud examiners should operate under the assumption that the subjects are guilty

DIn most examinations, fraud examiners should interview those who are more involved in the matters at issue before interviewing those who are less involved.

Answer : A

Question 3

John, a fraud investigator, is interviewing Mary, who he suspects has been embezzling company funds. Which of the following is the recommended approach John should use to ask Mary questions?

AStart with questions about unknown information and work toward known information

BAsk questions in random order to keep Mary from guessing the next question

CStart with specific questions and move toward general questions

DSeek general information before seeking specific details

Answer : D

Question 4

Which of the following is TRUE of a well-written fraud examination report?

AThe details of witness interviews should be reported in a separate memorandum.

BThe report should discuss only the evidence that substantiates the fraud allegation

CAll information provided by witnesses, regardless of relevance, should be included in the report.

DTechnical terms should be included whenever possible to convey professionalism.

Answer : B

Question 5

Thea is conducting a fraud examination for a company and suspects one of the company's vendors (a one-person operation) of fraudulent billing. Thea wants to obtain a copy of the suspect individual's credit report and personal data from a third-party information broker. If Thea works in a jurisdiction that regulates the distribution of personal credit information, she cannot obtain the suspect's personal credit data under any circumstances.

ATrue

BFalse

Answer : B

Question 6

Which of the following situations would MOST LIKELY require access to nonpublic records to develop evidence?

AFinding out where a person lives

BReviewing an individual's personal mobile phone records

CObtaining a company's business filings

DDetermining who owns a piece of real estate

Answer : C

Question 7

Sarah is conducting an admission-seeking interview of a suspect. Throughout the interview, the suspect makes little eye contact with Sarah. Based on this information atone, can Sarah conclude that the suspect is being deceptive?

AYes, because it is safe to assume that suspects who avoid eye contact are most likely being deceptive.

BYes, because avoiding eye contact is a sign of deceptive.

CNo, because this is not enough information to conclude that the suspect is being deceptive

DNo, because avoiding eye contact is not directly linked to deception.

Answer : C

ACFE Certified Fraud Examiner - Investigation Exam Practice Test