CFE-INVESTIGATION Online Practice Questions and Answers

In response to an accusation made during an admission-seeking interview the subject Begins to voice a denial to the charge. How should the interviewer react to the first indication of a sublets denial'

A. Remind the subject of the laws against perjury

B. Interrupt the denial by using a delaying tactic

C. Argue the point directly with the subject until a confession is obtained

D. Allow the subject to continue denying the charge

Which of the following is an example of a dosed question?

A. "What are the dairy responsibilities for your current position''"

B. 'How do you feel about your supervisor?"

C. "How many years have you been with the company?'

D. "Why did you stay late at work that day?"

Caroline a fraud examiner is conducting an admission-seeking interview with John an employee suspected of stealing cash. Which of the following is the MOST effective phrasing for Caroline to use when posing an admission-seeking question to John?

A. ''Why did you take the money?"

B. "Did you steal the money?''

C. Do you know who look the money?"

D. "What do you know about the stolen money'"

Misty, a fraud investigator is interviewing Larry, who she suspects has been embezzling company funds. Which of the following is NOT a recommended sequence in which Misty should ask Larry question?

A. Ask questions in random order to prevent Larry from knowing what question comes next

B. Ask questions seeking general information before seeking details

C. Stat with questions about known information and work toward unknown information

D. Start with general questions and move toward specific questions

II you are seizing a computer for forensic analysis why is it generally necessary to seize any copiers connected to it?

A. Most copters today are nonimpact copiers meaning that they store copied mages indefinitely

B. Most copiers store, process and transmit data In a cloud environment

C. Many copiers connect via parallel cables, which store and transmit copy job data.

D. Many copiers have Internal hard drives that right contain Information relevant to a fraud examination.

Which of the following is NOT a function of a fraud examination report?

A. To convey all the evidence necessary for other parties to thoroughly evaluate the case

B. To add credibility to the fraud examiner`s work

C. To communicate the fraud examiner s qualifications for providing opinions about the case

D. To corroborate previously known facts

Talia has been hired by SBS Inc, to implement a new data analysis program to search for warning signs of potential fraud within the company. Which of the following steps should Talia conduct first to most effectively use data analysis techniques for such an initiative?

A. Build a profile of potential frauds.

B. Monitor the data.

C. Cleanse and normalize the data.

D. Identify the relevant data

Tom, a Certified Fraud Examiner (CFE) was hired to trace Keeley's assets, To trace the assets, Tom uses Keeley's Books and records to analyze the relationship between the receipt and subsequent disposition of funds or assets. Which tracing method did Tom use?

A. The direct method

B. The comparative assets method

C. The indirect method

D. The asset method

Which of the following is the LEAST accurate statement about seeing a computer for examination?

A. When taking a computer for examination it the computer is off should remain off when It is removed.

B. When seizing a computer that is running, it is acceptable to review the files contained on the machine prior to seizing it.

C. When seizing a computer for examination the seizing party should look around the area for passwords because many people leave passwords near their computers.

D. Before removing a computer system from a scene for further analysis. It is important to document, the system's setup with photographs or diagrams

Lisa a fraud examinee at a private company receives an anonymous call from a potential whistIeblower. The whistleblower s hesitant to reveal their identity but will do so if it can be kept fully confidential Which of the following statements is most accurate?

A. Lisa should explain that she will try her best to keep the whisneblower's identity confidential

B. Lisa should state that she will not be able to keep the whistleblower s identity confidential because all information must be disclosed to management

C. Lisa may offer the whistleblower full confidentially because they are not a suspect.

D. Lisa may promise the whistieblower full confidentiality even if she knows net statement is untrue, because the lie is ultimately beneficial to her employer.