ACFE CFE-Investigation Exam Questions Instant Access

Question 1

Which of the following is NOT true about observing the reactions of interview subjects?

AThe interpretation of an interview subject's reactions requires specific skills on the part of the interviewer.

BThe observation of a subjects body language is often just as important as the observation of the words used by the subject.

CEmotive words should be used early in the interview to observe the respondents emotional reaction.

DTo effectively observe reactions, an interviewer should move from less sensitive to more sensitive questions as the interview progresses.

Answer : C

The Fraud Examiners Manual states:

''Interviewers are encouraged to formulate their questions in a way that will not bring about a strong emotional reaction... emotive words of all types should be avoided during the introductory phase. Such words put people on the defensive''.

Thus, statement C is NOT true.

Question 2

Which of the following is the MOST APPROPRIATE way to document information obtained from social media sites?

ASave links of the social media postings and pages in a web browser.

BRequest a copy of the information from the social media platforms.

CConduct a forensic shutdown of a computer to preserve the metadata from the social media sites and profiles visited.

DDownload and preserve the information from the social media sites so that it can be established as authentic if used in court.

Answer : D

Social media content is dynamic---posts can be edited, deleted, or moved---so fraud examiners must preserve relevant information promptly and in a manner that supports authenticity and admissibility. CFE investigative guidance emphasizes that documentary (including digital) evidence carries limited value in legal proceedings unless it can be shown to be authentic and in substantially the same condition as when collected. Simply saving a link (Option A) is weak because the underlying content can change, and a link does not preserve what was actually observed. Requesting a copy from the platform (Option B) is often impractical as a routine step and may require legal process; it also does not replace contemporaneous preservation by the examiner. A ''forensic shutdown'' (Option C) is not an appropriate method for preserving web-based social media content because the key evidence exists on external servers, not solely on the examiner's machine. Proper practice is to download/capture and preserve what was observed while documenting the collection steps and maintaining a defensible chain of custody so authenticity can be established if needed in court.

Question 3

Beta, a Certified Fraud Examiner (CFE). is conducting an admission-seeking interview of Delta, a fraud suspect. In establishing a rationalization. Beta says to Delta. "I know you didn't do this for yourself: it was for your family." This technique seeks to establish rationalization by:

AReducing Delta's stress about possibly being fired

BClaiming Delta's action was for altruistic reasons

CReducing Delta's perception of the legal seriousness of the matter

DEstablishing that Delta's family was being treated unfairly

Answer : B

During admission-seeking interviews, fraud examiners often employ rationalization techniques to help the suspect justify their misconduct and make it easier to confess. One of these rationalizations is the altruistic appeal.

From the 2014 International Fraud Examiners Manual:

''Facilitators of communication are those socio-psychological forces that make conversations, including interviews, easier to accomplish. These facilitators require a basic understanding of what motivates people. The facilitators are: fulfilling expectations, recognition, altruistic appeals, sympathetic understanding, new experience, catharsis, need for meaning, and extrinsic rewards.''

From the CFE Prep - Investigations study guide:

''Facilitators of communication... include fulfilling expectations, recognition, altruistic appeals, sympathetic understanding, new experience, catharsis, need for meaning, and extrinsic rewards.''

Application to Scenario:

Beta says: ''I know you didn't do this for yourself; it was for your family.''

This is a classic altruistic appeal --- reframing the suspect's motive as selfless or for the benefit of others, rather than selfish wrongdoing.

The purpose is to reduce internal resistance to confessing by allowing the suspect to rationalize the act as being for a noble reason.

Question 4

Steve, a Certified Fraud Examiner (CFE). was interviewing Michelle, a fraud suspect. Dunng the first part of the interview. Michelle was attentive. However, when he asked her more direct questions about the fraud, she suddenly seemed unconcerned, alternately chewing on her pen cap and picking at a loose piece of fabric on the arm of her chair. From this conduct. Steve is likely to conclude that Michelle

AIs feeling bored by the interview process

BIs being deceptive

CDoes not know the answers to Steve's questions

DIs telling the truth

Answer : B

Nonverbal deception cues include feigned unconcern, slouching, chewing objects, and manipulating clothing. Michelle's conduct (chewing pen cap, picking at fabric, appearing unconcerned) matches these signs of deception.

Question 5

Which of the following data is the MOST DIFFICULT to recover during a digital forensic examination?

ATime and date information about files

BWebsites visited

CFiles that have been overwritten

DCommunications sent via instant messenger

Answer : C

''Deleted files are recoverable until they are overwritten because data is not erased until it is overwritten... Deleted files that have been overwritten generally are not recoverable''.

Other data such as time/date stamps, websites, or chats can often be retrieved.

Question 6

Marcus is trying to locate the financial statements of Acme Airlines, a multinational publicly traded corporation. Which of the following sources would be MOST EFFECTIVE for finding this information?

ACommercial filings

BCivil litigation records

COrganizational filings

DRegulatory securities records

Answer : D

''Securities regulators... require disclosures that typically include: corporate financial statements, identification of officers and directors, identification of significant owners... and a history of the business''10:2014 International Fraud Examiners Manual.pdfL73-L95.

Thus, regulatory securities records are the best source for financial statements.

Question 7

Sylvia, a novice interviewer, asks Adam, the respondent, the following question: "Didn't you know that something wasn't right?" This kind of question is called a_____________question.

ADouble-negative

BFree narrative

CControlled answer

DComplex

Answer : A

The Fraud Examiners Manual defines double-negative questions as those containing two forms of negation in a single clause. They are confusing and ''often suggest an answer opposite to the correct one.'' The example given is almost identical to the question here:

''Didn't you suspect that something wasn't right?''.

Thus, Sylvia's question is a double-negative question, which should be avoided.

ACFE Certified Fraud Examiner - Investigation CFE-Investigation Exam Questions