Certified Fraud Examiner (CFE) - Investigation Questions and Answers
An investigator is preparing to administer what is likely to be an intense and extended interview with a fraud suspect. To organize their thoughts prior to the interview, the fraud examiner should:
Which of the following would be most useful in determining when a specific document file was created?
Beta, a Certified Fraud Examiner (CFE). is conducting an admission-seeking interview of Delta, a fraud suspect. In establishing a rationalization. Beta says to Delta. "I know you didn't do this for yourself: it was for your family." This technique seeks to establish rationalization by:
Why do fraud examiners perform analysis on unstructured, or textual, data?
Boyd, a Certified Fraud Examiner (CFE). was hired to trace Lottie's financial transactions. During his investigation. Boyd obtains records of electronic payments that Lottie made during the past five years. Which of the following are these records MOST LIKELY to reveal?
When reporting the results of a fraud examination, it is BEST to include copies (not originals) of important documents in the formal report.
Which of the following is TRUE of a follow-up/recommendations section in a written fraud examination report?
Lmdsey, a Certified Fraud Examiner (CFE). has been retained to investigate allegations of bribery and kickbacks allegedly committed by a member of an organization's procurement department. Lindsey conducts an interview during which one of the accused's colleagues states that they overheard the accused discussing a free tnp received from one of the organization's vendors. Which type of evidence would the interviewee's statement be considered?
If an important witness becomes hostile and argumentative during an interview, the interviewer should generally.
Which of the following is considered a best practice for preserving the confidentiality of a fraud investigation?
Which of the following is a unique challenge of cloud forensics that is not encountered in traditional forensic practices?
The term_____________refers to a process of resolving allegations of fraud from inception to disposition.
Thea is conducting a fraud examination for a company and suspects one of the company's vendors (a one-person operation) of fraudulent billing. Thea wants to obtain a copy of the suspect individual's credit report and personal data from a third-party information broker. If Thea works in a jurisdiction that regulates the distribution of personal credit information, she cannot obtain the suspect's personal credit data under any circumstances.
Due to risks of illicit transactions, most jurisdictions require financial institutions to obtain information about which of the following from an institution with which they have a foreign correspondent relationship?
Louis, a Certified Fraud Examiner (CFE). is investigating a potential internal fraud case originating from a whistteblower tip about embezzlement. He discovers that the organization purportedly affected by the embezzlement recorded the tip in a memorandum. Which type of evidence would the memorandum be considered?
Which of the following would be MOST USEFUL m determining who created a specrfic document file?
Which of the following data is the MOST DIFFICULT to recover during a digital forensic examination?
Sylvia, a novice interviewer, asks Adam, the respondent, the following question: "Didn't you know that something wasn't right?" This kind of question is called a_____________question.
Which of the following terms refers to a process of resolving allegations of fraud from inception to disposition?
Which of the following types of files is the most difficult to recover during a digital forensic examination?
Eugene is conducting an admission-seeking interview of a suspect. During the interview, the suspect frequently looks away from Eugene while responding to questions. Eugene can safely conclude that the suspect is dishonest due to his failure to maintain eye contact.
Which of the following is a common characteristic that asset hiders look for in the financial vehicles they use to conceal their assets?
Gilbert is preparing to conduct a covert investigation. Before acting, he wants to wnte a memorandum documenting his plan. Which of the following pieces of information should he include in this memorandum?
If the following statements were included in a fraud examination report of a qualified expert, which of them would be IMPROPER?
Assuming that a jurisdiction has prohibited pretexting with financial institutes, which of the following actions would constitute illegal pretexting?