ACFE CFE-Investigation Exam Questions Instant Access

Question 1

Which of the following data is the MOST DIFFICULT to recover during a digital forensic examination?

ATime and date information about files

BWebsites visited

CFiles that have been overwritten

DCommunications sent via instant messenger

Answer : C

''Deleted files are recoverable until they are overwritten because data is not erased until it is overwritten... Deleted files that have been overwritten generally are not recoverable''.

Other data such as time/date stamps, websites, or chats can often be retrieved.

Question 2

Marilyn, a Certified Fraud Examiner (CFE). is reasonably sure that Shelly, her primary suspect, committed the fraud in question Before scheduling an admission-seeking interview with Shelly. Marilyn should be reasonably sure of all of the following EXCEPT:

AThat all reasonable investigative steps have been taken

BThat the interview's time and location can be controlled

CThat no other person was involved in the fraud in question

DThat the interview's subject matter can be controlled

Answer : C

The Fraud Examiners Manual specifies that admission-seeking interviews should only be conducted when:

''There is a reasonable probability that the respondent has committed the act in question.

All other reasonable investigative steps have been completed.

The interviewer can reasonably control the place, time, and subject matter of the interview.''

There is no requirement that the examiner must be sure no one else was involved. Therefore, C is correct.

Question 3

Assuming that a jurisdiction has prohibited pretexting with financial institutes, which of the following actions would constitute illegal pretexting?

AWithdrawing another person's funds using a stolen bank account number and PIN

BDigging through a person's trash to obtain their bank account information

CMaking purchases with a credit card account under a fictitious identity

DFalsely claiming to be the spouse of an account holder to access bank records

Answer : D

Explanation with Extracts = Pretexting is:

''The act of impersonating someone else or making false or misleading statements to obtain information from financial institutions. Several jurisdictions have prohibited pretexting against financial institutions''.Thus, falsely claiming to be the spouse constitutes illegal pretexting.

Question 4

A fraud examiner contacts a witness for an interview regarding a bribery case, but the witness says that they are too busy to be interviewed. It is MOST APPROPRIATE for the fraud examiner to respond by:

ATelling the witness that they will be disciplined if they do not agree to meet that day.

BSuggesting that the witness choose a time and location that is more convenient.

CAsking the witness to detail what they are busy doing for reporting purposes.

DEmphasizing to the witness that their help is needed and it will not take long.

Answer : D

When a witness resists an interview with ''I'm too busy,'' CFE interview guidance treats this as a common barrier that may conceal other causes---reluctance, discomfort, ego concerns, or simply a desire to avoid involvement. The recommended approach is to reduce resistance by emphasizing cooperation, importance, and minimal burden: communicate that the witness's help is needed, the interview will be brief, and it will not be difficult. Option D directly reflects these recommended diffusion techniques by stressing both the importance of the witness's assistance and the short duration of the meeting, which lowers the perceived cost of participation. Option A is inappropriate and potentially coercive, may exceed the examiner's authority, and can create hostility or claims of intimidation---undermining credibility and reliability of information obtained. Option C is confrontational and escalates resistance without advancing the interview. Option B can be helpful as a scheduling accommodation, but CFE guidance for this specific resistance phrase prioritizes overcoming the objection by reassuring brevity and importance, making D the best answer among the options.

Question 5

Boyd, a Certified Fraud Examiner (CFE). was hired to trace Lottie's financial transactions. During his investigation. Boyd obtains records of electronic payments that Lottie made during the past five years. Which of the following are these records MOST LIKELY to reveal?

AThe market value of any real property Lottie owns

BThe assets that Lottie has purchased

CThe division and distribution of Lottie's assets

DIf Lottie is skimming her employer's funds

Answer : B

''Electronic payment records can be valuable in tracing investigations... they can reveal, among other things, assets the subject has purchased''.

They can also reveal loans, real estate taxes, and business locations, but not directly whether Lottie is ''skimming'' funds.

Question 6

Janet suspects that a local restaurant is being used as a front business for a criminal operation. Which of the following types of records would be the MOST LIKELY to help Janet discover who owns the restaurant building?

ACommercial filings

BBuilding permit records

CLocal court records

DVoter registration records

Answer : B

The Fraud Examiners Manual states:

''If a business or individual constructs a new building or makes improvements to an existing building, there should be a building permit on file with the local building authority. In many cases, the person applying for permits will be the owner or someone traceable to the owner.''

CFE Prep supports this:

''Building permit records... are often required before most businesses can open... and often list the owner or someone traceable to the owner.''

Thus, building permit records are most likely to help identify the restaurant's owner.

Question 7

Which of the following is a best practice for obtaining a signed statement?

AMake sure that everything is included in the signed statement and that no addendum are made

BHave the suspect write out the entire statement in their own handwriting

CHave two individuals witness the signing of the document when possible.

DInclude all of the subject's offenses, whether related or not, in a angle document.

Answer : C

Best practice for signed statements:

Fraud examiners should prepare the statement, keep it concise, and ensure voluntariness and intent are clear.

While not legally required, it is recommended that two individuals witness the signing. Answer: C. Have two individuals witness the signing of the document when possible

ACFE Certified Fraud Examiner - Investigation CFE-Investigation Exam Questions