CFE-Investigation Practice Exam Questions and Answers

A.  

Accessibility

B.  

Transparency

C.  

Exclusivity

D.  

Traceability

A.  

"Did you steal the money?"

B.  

'What did you do with the money?"

C.  

"Why did you take the money?"

D.  

"How much of the money do you have left?"

A.  

Ashley should explain that Antonio may have qualified confidentiality but that she cannot make any absolute assurances

B.  

Ashley should promise Antonio unqualified confidentiality over all information provided

C.  

Ashley should explain that all information must be disclosed to management so nothing Antonio says will be confidential

D.  

Ashley should promise Antonio that his identity will not become known.

A.  

Link analysis visually displays financial ratio analysis

B.  

Link analysis is an affective tool to demonstrate complex networks

C.  

Link analysis helps identify indirect relationships with several degrees of separation.

D.  

Link analysis allows the investigator to discover patterns in data.

A.  

Once a criminal case is filed, all records obtained by the government are considered public records

B.  

Nonpublic records cannot be obtained by subpoena or legal order in a civil action

C.  

In most junsdictions. banks are allowed to turn over a suspect's account information directly to a fraud victim when there is adequate evidence of wrongdoing.

D.  

The government usually will not share nonpublic records with a fraud victim during an investigation into the underlying fraud.

A.  

"Hello, my name is Scarlett, and I'm with the ABC Company."

B.  

"Hello, my name is Scarlett. I'm an auditor with the ABC Company."

C.  

"Hello, my name is Scarlett. I'm a Certified Fraud Examiner and an auditor with the ABC Company."

D.  

"Hello, my name is Scarlett. I'm a Certified Fraud Examiner with the ABC Company."

A.  

Covertly record all interviews with potential suspects.

B.  

Note impressions regarding the subject's guilt or innocence.

C.  

Err on the side of taking too few notes rather than too many.

D.  

Write down verbatim all the information that the subject provides

A.  

True

B.  

False

A.  

Time and date information about files

B.  

Websites visited

C.  

Files that have been overwritten

D.  

Communications sent via instant messenger

A.  

Online public records searches are limited in the jurisdictions they cover.

B.  

Public records database companies are difficult to find.

C.  

Online coverage of public records varies widely from jurisdiction to jurisdiction

D.  

The timeliness and accuracy of information in online databases must be validated

A.  

True

B.  

False

A.  

Conduct discreet inquiries into Jones's responsibilities as an accounts payable clerk

B.  

Notify management of the possibility that Jones has committed fraudulent acts.

C.  

Search Jones's mobile phone for evidence of misconduct

D.  

Accuse Jones directly of having committed fraud.

A.  

If Lucas's computer is running. Nobles may retrieve data from the computer directly via its normal interface 4 the evidence that he needs exists only in the form of volatile data

B.  

If Lucas's computer is off and Nobles needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer's normal interlace.

C.  

If Lucas's computer is off. Nobles should not turn it on unless he plans to use an encryption device that can guarantee that the system's hard drive will not be accessed during startup.

D.  

If Lucas's computer is running. Nobles should perform a graceful shutdown by turning it off using the normal shutdown process

A.  

True

B.  

False

A.  

Duplicate search

B.  

Benford's Law analysis

C.  

Correlation analysis

D.  

Linear regression

A.  

Allow the subject 1o continue denying the charge

B.  

Argue the point directly with the subject until a confession is obtained

C.  

Remind the subject of the laws against perjury.

D.  

Interrupt the denial by using a delaying tactic.

A.  

The invisible archives

B.  

The free web

C.  

The internet archives

D.  

The deep web

A.  

Employee identification numbers

B.  

Telephone numbers

C.  

A listing of payment amounts

D.  

Vendor addresses

A.  

Suspend all employees involved in the investigation pending the investigation's outcome.

B.  

Ensure that the investigation is conducted at the direction of, or under the supervision of. a government official

C.  

Avoid using email or other electronic means to transmit confidential case information

D.  

Implement a blanket policy prohibiting all employees from discussing anything related to employee investigations

A.  

Withdrawing another person's funds using a stolen bank account number and PIN

B.  

Digging through a person's trash to obtain their bank account information

C.  

Making purchases with a credit card account under a fictitious identity

D.  

Falsely claiming to be the spouse of an account holder to access bank records

A.  

That all reasonable investigative steps have been taken

B.  

That the interview's time and location can be controlled

C.  

That no other person was involved in the fraud in question

D.  

That the interview's subject matter can be controlled

A.  

Conduct admission-seeking interviews only when time is not a factor.

B.  

Ensure that accusations are made under conditions of privacy to avoid potential liability

C.  

Minimize empathy while emphasizing the perception of moral wrongdoing

D.  

Present a morally acceptable reason for the subject's behavior

A.  

Displaying evidence that specifically contradicts Beth's alibis

B.  

Discussing some of Beth's prior deceptions

C.  

Discussing the testimony of other witnesses

D.  

Displaying all the evidence she has against Beth at once

A.  

Counter the denial by arguing with George until further denials are futile

B.  

Use a delaying tactic to interrupt the denial

C.  

Remind George he has to tell the truth or face perjury.

D.  

Allow George to continue denying the charge.

A.  

"Did you commit any misconduct against the company?"

B.  

"Do you know what the punishment is for violations like this'5"

C.  

"Do you know who might have defrauded the company?"

D.  

"How many jobs have you had before this one?’