ACFE CFE-Investigation Exam Practice Test Instant Access

Question 1

Steve, a Certified Fraud Examiner (CFE). was interviewing Michelle, a fraud suspect. Dunng the first part of the interview. Michelle was attentive. However, when he asked her more direct questions about the fraud, she suddenly seemed unconcerned, alternately chewing on her pen cap and picking at a loose piece of fabric on the arm of her chair. From this conduct. Steve is likely to conclude that Michelle

AIs feeling bored by the interview process

BIs being deceptive

CDoes not know the answers to Steve's questions

DIs telling the truth

Answer : B

Question 2

Which of the following is NOT a step a fraud examiner must take before seizing evidence in a digital forensic investigation?

AObtain and become familiar with any legal orders that apply to the investigation

BAssemble an investigation team comprised only of outside digital forensic experts

CEnsure that only trained professionals employ any software used in a forensic capacity

DDetermine whether there are privacy issues related to the item(s) to be searched.

Answer : A

Question 3

Jackson, a digital forensic examiner for a government agency, is conducting a criminal investigation into the alleged embezzlement of funds from the government's Welfare Department (WD). Ginny. a WD employee, is the prime suspect. Jackson obtains a court order authorizing him to seize Ginny's personal computer for forensic examination. Which of the following is the MOST ACCURATE statement?

AIf Ginny's computer is running. Jackson should perform a graceful shutdown by turning it off using the normal shutdown process

BIf Ginny's computer is off and Jackson needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer's normal interface.

CIf Ginny's computer is off. Jackson should not turn it on unless he plans to use an encryption device that can guarantee that the system's hard drive will not be accessed during startup.

DIf Ginny's computer is running. Jackson may retrieve data from the computer directly via its normal interface if the evidence that he needs exists only in the form of volatile data

Answer : D

Question 4

Which of the following types of information would LEAST LIKELY be found when searching external sources without the subject's consent or a legal order?

AA witness's address

BAssets owned by a subject

CA subject's employee personnel file

DA competitor's ownership information

Answer : D

Question 5

Susan, a Certified Fraud Examiner (CFE). is conducting an ad mission-seeking interview of Beth, a fraud suspect. After Susan gave Beth a suitable rationalization for her conduct. Beth continued her denials, giving various alibis. Which of the following would be the LEAST EFFECTIVE technique for Susan to use in this situation?

ADisplaying evidence that specifically contradicts Beth's alibis

BDiscussing some of Beth's prior deceptions

CDiscussing the testimony of other witnesses

DDisplaying all the evidence she has against Beth at once

Answer : D

Question 6

Jason is an investigator who is conducting an interview with Din

a. a fraud suspect. After introducing himself. Jason attempts to be amiable by asking about Dina's favorite sports team and complimenting her eyeglass frames. Jason is attempting to:

AEstablish the interview theme.

BEstablish rapport.

CCalibrate the witness.

DExhibit passive listening

Answer : B

Question 7

Which of the following is a purpose of an admission-seeking interview?

ATo establish that the confessor regrets committing the act

BTo obtain a valid confession from a culpable individual

CTo verify that the accused mistakenly committed the act

DTo determine whether the subject's responses are credible

Answer : B

ACFE CFE-Investigation Certified Fraud Examiner - Investigation Exam Practice Test