Certification Topics of CFE-Investigation Exam PDF Recently Updated Questions
CFE-Investigation Exam Prep Guide: Prep guide for the CFE-Investigation Exam
NEW QUESTION # 74
Sarah is conducting an admission-seeking interview of a suspect. Throughout the interview, the suspect makes little eye contact with Sarah. Based on this information atone, can Sarah conclude that the suspect is being deceptive?
- A. No, because this is not enough information to conclude that the suspect is being deceptive
- B. Yes, because avoiding eye contact is a sign of deceptive.
- C. No, because avoiding eye contact is not directly linked to deception.
- D. Yes, because it is safe to assume that suspects who avoid eye contact are most likely being deceptive.
Answer: A
NEW QUESTION # 75
When documenting interviews, it is best practice for the interviewer to.
- A. Write down verbatim all the information that the subject provides
- B. Note impressions regarding the subject's guilt or innocence.
- C. Err on the side of taking too few notes rather than too many.
- D. Covertly record all interviews with potential suspects.
Answer: C
Explanation:
TheFraud Examiners Manualadvises:
"Do not slow down the interview process for note-taking. Instead, jot down key words ... In general, it is better to err on the side of taking too few notes rather than too many." Therefore, the best practice isC.
NEW QUESTION # 76
Which of the following is a recommended strategy when conducting admission-seeking interviews?
- A. Emphasize a lack of morality in the subject's actions to induce them into confessing.
- B. Increase sympathy while downplaying implications of wrongdoing.
- C. Ensure that accusations are made in the presence of a third party to avoid potential liability
- D. Use time constraints as a means to pressure the subject into making a confession.
Answer: B
NEW QUESTION # 77
Which of the following is NOT a best practice for obtaining a signed statement?
- A. Have two individuals witness the signing of the document when possible.
- B. Prepare separate statements for unrelated offenses.
- C. Have the suspect write out the entire statement in their own handwriting
- D. Add subsequent facts to the statement as an addendum
Answer: C
NEW QUESTION # 78
When reporting the results of a fraud examination, it is BEST to include copies (not originals) of important documents in the formal report.
- A. False
- B. True
Answer: A
NEW QUESTION # 79
Rachel, a fraud suspect, has decided to confess to Linda, a Certified Fraud Examiner (CFE). In obtaining a verbal confession from Rachel. Linda should obtain all of the following items of information EXCEPT:
- A. The approximate beginning and end dates of the fraud
- B. Rachel's motive for the offense
- C. A general estimate of the amount of money involved
- D. A statement from Rachel that her conduct was an accident
Answer: D
Explanation:
TheCFE Prep - Investigationsstates:
"If a fraud examiner gets a verbal confession from the fraudster, it does not matter whether the fraudster claims his conduct was an accident. The following items of information should be obtained ... admission that the accused knew the conduct was wrong, facts known only to the confessor, the accused's motive, approximate dates, involvement of others, physical evidence, and disposition of illicit income." Thus, the examiner doesnotneed a statement about accident.
NEW QUESTION # 80
Which of the following is the LEAST ACCURATE statement about seizing a computer for examination?
- A. Before removing a computer system from a scene for further analysis, it is important to document the system's setup with photographs or diagrams.
- B. When taking a computer for examination, if the computer is off. it should remain off when it is removed.
- C. When seizing a computer that is running, it is acceptable for a fraud examiner to review the files contained on the machine prior to seizing it.
- D. When seizing a computer for examination, the seizing party should took around the area for passwords because many people leave passwords near their computers
Answer: C
NEW QUESTION # 81
Which of the following statements concerning access to nonpublic records it MOST ACCURATE?
- A. Thai government usually will not share nonpublic records with a fraud victim during an Investigation Into the underlying fraud.
- B. Once a criminal case is filed all records obtained by the government are considered public records
- C. In most jurisdictions, banks are allowed to turn over a suspects account information directly to a fraud victim when there is adequate evidence of wrongdoing.
- D. Nonpublic records cannot be obtained by subpoena or legal order in a civil action
Answer: C
NEW QUESTION # 82
Which of the following is the MOST ACCURATE statement about trying to locate a subject using online records?
- A. The first step in locating someone using online records is to obtain a list of past employers
- B. Online records are generally not useful in locating subjects whose address is unknown
- C. Obtaining a past address of the subject should be the first step in trying to locate a subject using online records
- D. Most public records services do not maintain a list of past addresses
Answer: C
NEW QUESTION # 83
Cynthia is preparing to conduct a covert investigation. Prior to conducting surveillance of her subject, she creates a memorandum outlining the basis for her operation Which of the following pieces of information should she include in her memorandum?
- A. Her first impression regarding the subject's culpability
- B. All of the above
- C. The name of the subject she will be observing
- D. The identities of any confidential sources to be used in the operation
Answer: C
NEW QUESTION # 84
Boyd, a Certified Fraud Examiner (CFE). was hired to trace Lottie's financial transactions. During his investigation. Boyd obtains records of electronic payments that Lottie made during the past five years. Which of the following are these records MOST LIKELY to reveal?
- A. If Lottie is skimming her employer's funds
- B. The market value of any real property Lottie owns
- C. The division and distribution of Lottie's assets
- D. The assets that Lottie has purchased
Answer: D
Explanation:
"Electronic payment records can be valuable in tracing investigations... they can reveal, among other things, assets the subject has purchased".
They can also reveal loans, real estate taxes, and business locations, but not directly whether Lottie is
"skimming" funds.
NEW QUESTION # 85
Which of the following is usually considered the most useful source of financial information available to fraud examiners in tracing a subject's assets?
- A. Financial institution records
- B. Paystubs
- C. Service bills
- D. Credit card statements
Answer: A
NEW QUESTION # 86
Tyson a fraud examiner a planning an interview with Brianna, the girlfriend of the central suspect in Tyson s investigation. Previous interviews with others have revealed that Brianna lends to be very protective of her boyfriend. How should Tyson approach the Interview with Brianna?
- A. Ask Brianna when she would prefer to be interviewed in an effort to provoke cooperation.
- B. Avoid interviewing Brianna if possible due to Brianna's potential volatility
- C. Conduct the interview with as little notice as possible so Brianna will be unprepared
- D. Provide Brianne with advance notice prior to the interview to inhibit resentment
Answer: B
NEW QUESTION # 87
Which of the following would be MOST USEFUL m determining who created a specrfic document file?
- A. The document's metadata
- B. The system log
- C. Operating system partition
- D. Internet activity data
Answer: B
NEW QUESTION # 88
Which of the following types of files is the most difficult to recover during a digital forensic examination?
- A. Hidden files
- B. Deleted link (shortcut) files
- C. Overwritten files
- D. Deleted until
Answer: C
Explanation:
Both the Manual and CFE Prep guides emphasize thatdeleted files are recoverable until overwritten. Once overwritten, the original data cannot be retrieved:
"Deleted files are recoverable until they are overwritten because data is not erased... until overwritten. So, deleted files that have been overwritten generally arenot recoverable." Other file types (deleted shortcuts, hidden files, etc.) can often be recovered, butoverwritten files are lost permanently.
NEW QUESTION # 89
Jade, a Certrfied Fraud Examiner (CFE). is conducting an internal investigation in which an employee is suspected of stealing inventory and selling it through a possible shell company called Hidden Finds. LLC. When Jade tries to check Hidden Finds' website, a message appears that redirects customers to a web address that ends with onion To view the website's content. Jade will need to install a specialized web browser that enables her to access which of the following?
- A. The dark web
- B. The internet archives
- C. The deep archives
- D. The free web
Answer: B
NEW QUESTION # 90
Which of the following is the MOST ACCURATE statement regarding the analysis phase in digital forensic investigations?
- A. The primary concern when analyzing digital evidence is to protect the collected information from seizure
- B. The analysis phase of digital forensic investigations should not commence unless it is verified that the suspect devices do not contain relevant data.
- C. When analyzing data for evidence, fraud examiners should look for exculpatory evidence but not exculpatory evidence
- D. During the analysis phase, it is best to use a combination of the various forensic tools that can assist h identifying, extracting, and collecting digital evidence
Answer: D
NEW QUESTION # 91
Vishal, a Certified Fraud Examiner (CFE). has just initiated an interview with Steve, a fraud suspect. After a short introduction. Vishal jokes about the fact that he and Steve are wearing the same tie and then proceeds to ask Steve about the previous night's major sporting event Vishal is attempting to
- A. Condition the witness.
- B. Exhibit passive listening.
- C. Establish rapport
- D. Establish the interview theme
Answer: C
Explanation:
"Introductory questions should be designed to establish rapport... the interviewer must establish some common ground with the respondent before he begins the fact-gathering portion of the interview. Interviewers usually establish rapport by spending a few minutes with the respondent in an informal dialogue".
Thus, Vishal's small talk about ties and sports is rapport-building.
NEW QUESTION # 92
Baker, a Certified Fraud Examiner (CFE). is getting prepared to conduct a lengthy and complex interview. To prepare himself. Baker should:
- A. Take only the documents he wishes to go over
- B. Write down key points to go over with the respondent
- C. Writs down a detailed list of questions in advance
- D. Avoid bringing any notes with him to the interview
Answer: B
NEW QUESTION # 93
Marcus is trying to locate the financial statements of Acme Airlines, a multinational publicly traded corporation. Which of the following sources would be MOST EFFECTIVE for finding this information?
- A. Civil litigation records
- B. Commercial filings
- C. Regulatory securities records
- D. Organizational filings
Answer: B
NEW QUESTION # 94
......
2026 New Preparation Guide of ACFE CFE-Investigation Exam: https://exams4sure.pdftorrent.com/CFE-Investigation-latest-dumps.html