CFE-Fraud-Investigations-and-Legal-Issues Questions and Answers

The records are digital evidence because Myra discovered them during a review of records stored on a computer hard drive. Digital evidence consists of information stored or transmitted in electronic form and can include documents, logs, spreadsheets, emails, databases, metadata, and other computer-based files. Although the content might function like a document, its form and preservation issues make it digital evidence. This distinction matters because digital evidence is more volatile than traditional paper documents and must be collected, preserved, imaged, and analyzed using proper forensic procedures. Analog evidence is not the correct term, and “virtual evidence” is not the standard classification used in the CFE materials. Therefore, the best answer is digital evidence.

“Even when a victim refers a fraud case for criminal prosecution, the government will usually not disclose the contents of nonpublic records with the victim during the investigation”.

Thus, option D is most accurate.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to administrative, the question asks about BEST.

The correct answer is C: Debarment.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to insider trading, the question asks about to publicly announce a new joint venture project in China, so he buys shares of Waccamaw stock Assuming that his conduct was illegal m the jurisdiction in which he works and resides, what type of crime did Davis MOST LIKELY commit, MOST LIKELY.

The correct answer is C: Insider trading.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

Best practices emphasize separation:

“Interviews should be conducted one-on-one to reduce the possibility of collusion, contamination, or intimidation of witnesses” (Fraud Examiners Manual – Interviewing Guidelines).This ensures independent and uncontaminated statements.

Admission-seeking questions are used when the examiner has a reasonable basis to believe the subject committed the act and wants to obtain a legal admission of wrongdoing. The most effective question is one that assumes the conduct occurred and encourages the subject to explain it, rather than merely deny it. Option D is strongest because it directly focuses on Harsha’s conduct and is phrased as though the personal purchases have already been established. Options A and C are informational questions, not admission-seeking questions. Option B is a closed yes-or-no question and uses accusatory wording that can encourage a denial. In admission-seeking interviews, the examiner should use disciplined phrasing designed to move the subject toward explanation and admission.

A key principle in fraud examinations is confidentiality. Fraud examiners must avoid tipping off the suspect, which could lead to destruction of evidence or flight. Measures include limiting discussions, informing only those with a legitimate need-to-know, and investigating discreetly.

Before conducting surveillance, a memorandum should document the basis for the covert operation, including: (1) the information the operation is based on, (2) expected information to be gained, (3) identities of suspects (subjects) if known, and (4) operatives under the examiner’s control. Confidential sources should not be identified by name but referred to symbolically.

The litigation privilege protects communications and documents prepared for the purpose of litigation once litigation is reasonably anticipated. It is similar to the U.S. attorney work-product doctrine and may extend to work performed by third-party agents, such as consultants, forensic accountants, and fraud examiners, when they are assisting legal professionals in preparation for litigation. Option A is too narrow because the privilege is not limited to documents intended to be used as evidence. Option B is incorrect because materials created before litigation was contemplated are generally not protected merely because they later become relevant. Option C is also too narrow because third-party agents can fall within the protection when properly engaged for litigation purposes. Therefore, option D is the most accurate statement.

Explanation with Extracts = The 2014 Fraud Examiners Manual states:

“The EU Data Protection Directive … regulates the processing, using, and transferring of personal data within the European Union, and it places limits on transmitting personal data to non-EU countries”.

Therefore, a U.S.-based examiner handling HR data of an EU employee must comply with EU GDPR requirements.

The 2014 International Fraud Examiners Manual states:

“The information contained on a wire transfer generally will include the following items:

• The amount of the transfer

• The date of the transfer

• The name of the sender or originator

• The routing number of the originating bank or financial institution.”

Therefore, the correct answer is C.

The best response is to accommodate the witness’s schedule by offering to conduct the interview after work hours. Fraud examiners should seek cooperation without threats, coercion, or unnecessary pressure. Threatening to document a refusal in a personnel file can create resentment and might raise employment or legal concerns. Assuring the witness that the interview will not take long or will not be difficult might be misleading because the examiner cannot always know how long the interview will take. Mentioning coworkers’ cooperation can be manipulative and might unnecessarily disclose information about the investigation. Offering a reasonable scheduling accommodation maintains goodwill, encourages cooperation, and supports a professional interview environment while preserving the examiner’s ability to obtain relevant information.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is C: The investment is in a common enterprise..

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, the question asks about UN, ICCPR.

The correct answer is D: Right of the accused to be informed of criminal charges.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, common law, the question asks about MOST ACCURATE, fact finders in criminal trials in common law jurisdictions is MOST ACCURATE.

The correct answer is C: A judge is typically responsible for factual findings.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The Fraud Examiners Manual lists required steps before seizing evidence:

Obtain legal authority.

Review privacy issues.

Ensure software/hardware are validated.

Document surroundings, inspect for traps, image drives, etc.

There is no requirement to assemble a team exclusively of outside experts.

Before seizing evidence in a digital forensic investigation, the 2014 International Fraud Examiners Manual outlines several critical steps:

Obtain legal authority / review orders:

“Before obtaining evidence, ensure that there is legal authority to seize evidence and review the data associated with the evidence. This might require obtaining a warrant in a criminal matter or ensuring that internal policies authorise seizure for an internal investigation.”

Determine privacy issues:

“Before the fraud examiner can seize evidence, he must take certain steps to help ensure that the evidence will be admissible: He must determine whether there are any privacy interests in the item(s) to be searched… In every case where it becomes necessary to seize a computer or other device capable of storing digital evidence, the investigator should consult with legal counsel.”

Use only trained professionals/software:

“It is important to allow a trained examiner to conduct a proper seizure and examination of digital evidence to help ensure that the information can be used in a legal proceeding.”

✅ These are all valid required steps.

In contrast, the idea that the team must be composed only of outside digital forensic experts is NOT a required step. The Manual stresses flexibility in team composition:

“Some organisations have their own in-house personnel… while others might prefer the use of an outside examiner. Sometimes retrieving digital data is as easy as searching the target computer’s hard drive, but other times retrieval requires a thorough knowledge of computers.”

Thus, requiring only outside experts is not a standard step, since investigations may use internal, external, or a mix of specialists depending on the situation.

Observing signs of wealth (sports car, home remodeling) may raise suspicion, but by itself it does not provide sufficient predication to accuse or notify management of fraud. The proper next step is to conduct discreet inquiries to determine if further evidence exists before escalating.

Fraud examiners should remain objective and approach the matter from both perspectives: that fraud might have occurred and that it might not have occurred. This reflects professional skepticism and helps prevent confirmation bias. A fraud examination is not designed merely to prove a predetermined allegation; it is a systematic process for resolving signs or allegations of fraud through evidence. The examiner should gather facts that support or refute the allegation and should preserve fairness throughout the engagement. Option C is inconsistent with good interview and investigation sequencing because examiners often begin broadly and move toward specifics. Option D is also incorrect because interviews usually proceed from neutral or less involved witnesses toward more involved individuals and suspects.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to mail fraud, wire fraud, the question asks about US, MOST LIKELY.

The correct answer is A: Mail fraud.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about large cash transactions with customers which of the following transactions would require a report to be Wed with the government, FATF.

The correct answer is D: A lump-sum cash deposit to a bank above the jurisdiction ' s designated threshold.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The 2014 International Fraud Examiners Manual and CFE Prep - Investigations explicitly state:

“Like some printers, copiers and other multifunction machines might have internal storage devices that store relevant data. In fact, almost every copier built since 2002 has a hard drive that stores images of documents the machines have copied, scanned, or emailed. Some copiers store user access records and a history of copies made. … when seizing a computer for forensic analysis, it is generally necessary to seize any copiers and scanners connected to it.”

Thus, the correct answer is C.

When preparing to interview subjects across jurisdictions, fraud examiners must consider both legal rights and cultural differences. The Manual advises examiners to:

Research local laws governing the right to counsel during interviews.

Understand cultural norms (e.g., greetings, eye contact).Failing to observe these can damage credibility. Thus, it is most accurate that an examiner must determine whether the subject can legally insist on a lawyer’s presence .

According to the ACFE Fraud Examiners Manual, Law Section, particularly in the Money Laundering chapter discussing International Anti-Money Laundering Efforts and the FATF Recommendations , financial institutions are required to file suspicious transaction reports STRs when they suspect that funds are the proceeds of criminal activity or are related to money laundering or terrorist financing.

The conduct described—purchasing bearer instruments with cash in amounts just below mandatory reporting thresholds—is commonly known as structuring. Structuring is a recognized money laundering technique designed to evade currency transaction reporting requirements. Under the FATF Recommendations, financial institutions must not rely solely on monetary thresholds to trigger reporting obligations. Instead, they are required to file a suspicious transaction report whenever there is reasonable suspicion of illicit activity, regardless of the amount involved.

A cash transaction report is typically triggered by transactions exceeding a specific monetary threshold, but structuring to avoid that threshold does not eliminate the reporting obligation. If employees suspect money laundering, the bank is obligated to file a suspicious transaction report with the appropriate authorities.

Therefore, the correct answer is that the bank is required to file a report of suspicious transactions because the employees suspect money laundering violations.

“Once a denial is uttered, it becomes extremely difficult for the accused to change his response, because doing so would be an admission that he lied. Therefore, the interviewer must prevent an outright denial, thereby making it easier for the subject to confess”.

“One of the most effective techniques to stop or interrupt a denial is through a delaying tactic… the interviewer should attempt to delay the outright denial; he should not argue with the accused”.

Thus, Charles should interrupt with a delaying tactic.

A custodial arrest does not occur simply because a suspect is being questioned by a law enforcement officer. Under the CFE Law topics, the controlling issue is whether the person is in custody, not whether questioning has started. The Manual distinguishes between ordinary questioning and custodial interrogation. It explains that custodial interrogation refers to guilt-seeking questioning initiated by law enforcement officers after a person has been taken into custody or otherwise deprived of freedom in a significant way. A person is considered in custody when the individual is under arrest or is not free to leave.

This means that questioning alone does not automatically create a custodial arrest. For example, if officers ask questions during a noncustodial interview and the person is free to end the encounter, that situation is generally not treated as custodial arrest. In fraud examinations, this distinction is important because constitutional safeguards associated with custody apply only when the legal threshold for custody has been met. Therefore, the statement is false because it incorrectly equates being questioned with being in custody or under arrest, which are not the same under CFE Law principles.

Guidance on reports:

“A fraud examination report should be accurate, clear, and impartial. The fraud examiner should avoid technical jargon where possible and write in plain language so that readers without specialized knowledge can understand”.

Reports should only include relevant, factual findings—not every detail or opinion.

So, the most accurate statement is that jargon should be avoided.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about IBC.

The correct answer is A: True.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, cooperate, privacy, the question asks about MOST ACCURATE, CFE.

The correct answer is C: Burton likely has a duty to cooperate with the investigation as part of the employer-employee relationship.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The correct answer is B. The CFE Manual states that under the ICCPR, everyone accused of a crime shall be presumed innocent until proven guilty according to law. This is one of the core due-process protections recognized in the criminal justice section of the Law materials.

Option A is incorrect because the ICCPR protects the right to a fair and public hearing, not a trial without public disclosure of the results. Option C is also incorrect because the Manual states that the ICCPR gives a convicted person the right to have the conviction and sentence reviewed by a higher tribunal, but it does not provide for unlimited appeals. Option D is too broad because release pending trial is not presented as an automatic right in the way presumption of innocence is. For CFE purposes, the key takeaway is that criminal defendants under the ICCPR are entitled to several important safeguards, and one of the most fundamental is that they must be treated as innocent unless and until guilt is proven according to law. Therefore, B is the correct answer.

The CFE Prep – Investigations explains:

“Metadata is a type of computer-generated data that can be helpful in a fraud investigation. Metadata information can help determine who wrote a document; who received, opened, copied, edited, moved, or printed the document; and when these events occurred” .

Thus, metadata is the most useful for identifying who created a document.

Trade-based money laundering uses international trade transactions to disguise the movement or source of illicit funds. A common method is for an importer and exporter to collude by issuing invoices that deliberately misrepresent the value, quantity, or type of goods being shipped. The amount laundered is hidden in the difference between the real value of the goods and the misstated invoice amount. Option A fits this definition because it involves international shipping and false invoices that understate the quantity of goods. Option B describes laundering through a cash-intensive business. Option C describes smurfing or structuring. Option D describes a loan-back arrangement. Therefore, option A is the trade-based money laundering example.

The correct answer is D. Obstruction of justice. Obstruction-of-justice offenses commonly include conduct intended to impede, obstruct, influence, or interfere with an investigation or proceeding, including the destruction of records and documents after a defendant learns of the government’s case. The Department of Justice has repeatedly treated destruction of incriminating records during an investigation or pending proceeding as obstruction. In one recent case, DOJ stated that knowingly destroying records to impede a federal investigation constituted obstruction; in another, a former DOJ attorney admitted that destroying documents after release from custody was part of an effort to obstruct the ongoing investigation and proceedings against him.

The other options do not fit the facts. Fraudulent misrepresentation involves false statements or deceptive representations. Misappropriation of evidence is not the standard offense label here. Conspiracy to influence the court would require an agreement with others and does not match the single act described. Angel’s conduct is best understood as an effort to destroy incriminating evidence after being charged, which directly interferes with the justice process. Accordingly, the most likely additional charge would be obstruction of justice.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about the core concepts in this area.

The correct answer is A: An importer and an exporter conspire to conceal illicit funds by creating invoices that understate the quantity of goods shipped internationally.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes. Money laundering typically involves three stages: placement (introducing illegal funds into the financial system), layering (creating complex transactions to hide the source), and integration (returning the funds to the launderer in an apparently legitimate form).

The correct answer is D. The CFE Manual states that a person can be qualified as an expert based on special training or experience. It also explains that there is no standard educational requirement for expert testimony and that even a witness with no formal education may still be qualified if the witness has sufficient training or experience in the relevant field.

This is why option A is incorrect: educational accomplishments can help, but they are not the primary or exclusive basis for qualification. Option B is also incorrect because expert qualification is determined by the judge, not by unanimous party approval. Option C is inaccurate because the Manual specifically lists licensing or certification as one of the factors that may be considered in deciding whether a witness is qualified, even though certification alone is not required.

In adversarial jurisdictions, the central question is whether the proposed expert has enough relevant knowledge to assist the trier of fact on the issue in dispute. Because the Manual expressly says an expert may be qualified through special training or experience, D is the most accurate statement.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is D: The agents working at the entity have criminal records..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

If a computer is running, it might be appropriate for a trained digital forensic examiner to conduct live evidence collection when the needed evidence exists only as volatile data. Volatile data, such as information in RAM, active network connections, running processes, or encryption keys, can disappear when the system is powered down. However, live collection should be performed carefully because interacting with the system can alter evidence. Option A is wrong because a computer that is off generally should be left off. Option C is too broad because a graceful shutdown can alter files and destroy volatile evidence. Option D is also incorrect because turning on an off computer can change evidence. Therefore, option B is the most accurate statement.

This question tests your knowledge of Uncategorized.

the question asks about alternative remittance systems is INCORRECT, INCORRECT.

The correct answer is A: The systems are not necessarily illegal..

This question tests your understanding of key fraud examination concepts and legal principles.

“The failure to preserve the integrity of digital evidence could result in evidence being deemed inadmissible in a legal proceeding, or, even if admitted, it might not be given much weight because evidence of questionable authenticity does not provide reliable proof.”

Therefore, D is the most accurate statement.

The Manual says admission-seeking interviews should be conducted only when:

There is reasonable probability the subject committed the act,

All other reasonable investigative steps are complete, and

“The interviewer can reasonably control the place, time, and subject matter of the interview.”.Therefore, Erica must ensure control of time, place, and content before scheduling.

The Fraud Examiners Manual explains that before obtaining or cleansing data, the first step in using data analysis is the planning phase. This includes understanding the data, articulating objectives, and building a profile of potential frauds. Without this, examiners risk inefficient analysis and overlooking key fraud risks.

✅ Answer: C. Build a profile of potential frauds

The Fraud Examiners Manual explains:

“Each transaction on a blockchain ledger is recorded with a cryptographic address… by analyzing these addresses, fraud examiners can sometimes establish patterns and connections that identify users or link them to criminal activity”.

The correct answer is D. Civil law system. A civil law system is generally characterized by reliance on codified statutes and written legal codes as the primary source of law. In these systems, courts apply legislative codes to the facts of each case, and judicial decisions from prior cases usually do not bind future courts in the same way that precedent operates in common law systems. This description matches the facts given in the question exactly.

Option B, the common law system, is incorrect because common law jurisdictions place much greater weight on judicial precedent, meaning earlier court decisions can be binding on later cases involving similar legal issues. Options A and C sound plausible, but they are not the standard legal-system labels used in comparative law. For CFE purposes, the recognized contrast is generally between civil law and common law systems. Understanding this distinction is important in fraud examinations because legal procedure, evidentiary practices, court structure, and the investigator’s interaction with attorneys and judges can differ significantly depending on the type of legal system involved. Since the question emphasizes codified law and the absence of binding precedent, civil law system is the most accurate answer.

The correct answer is C. Whether an employee is covered by a union contract can significantly affect the employee’s rights during an internal investigation because unionized employees may have representation rights during investigatory interviews. In the United States, the National Labor Relations Board explains that employees in unionized workplaces can have Weingarten rights, meaning they may request union representation during an interview the employee reasonably believes could lead to discipline.

That makes a union or collective bargaining agreement far more relevant to investigation rights than the other choices. Option A, the employee’s length of service, might matter in some human-resources settings but does not usually determine the employee’s legal investigation rights. Option B, a noncompetition agreement, concerns post-employment competition restrictions rather than representation, questioning, or procedural protections during an internal inquiry. Option D, the likelihood of guilt or innocence, is likewise not what determines the employee’s rights; legal protections apply based on the governing employment relationship and applicable labor law, not the employer’s suspicion level. For fraud examiners, this distinction matters because interview procedures can change depending on whether the employee is unionized or otherwise contractually protected. Therefore, the factor most likely to affect the employee’s rights is whether the employee has signed a union contract.

Complex questions:

“consist of a series of interrelated questions… too complicated to be easily understood, cover more than one subject, or require more than one answer”.

The question asked by Delta (“Were you aware that the signature was forged, and why didn’t you tell anyone earlier?”) covers two issues, making it complex.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is C: Prejudgment attachment.

This question tests your understanding of key fraud examination concepts and legal principles.

The Fraud Examiners Manual and CFE Prep emphasize:

“Generally, documentary evidence, including digital evidence, will not be admitted in a legal proceeding unless it is established as authentic… Consequently, fraud examiners who collect evidence from social media must capture, download, and preserve any useful information as soon as they discover it, and they must memorialize each step of the collection process”.

Thus, preservation for authenticity is the key.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, preserve evidence, the question asks about MOST LIKELY.

The correct answer is A: An employee intentionally destroys a relevant document prior to the company announcing the possibility of litigation..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about EXCEPT.

The correct answer is B: The taxpayer has filed for bankruptcy..

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

Conspiracy generally requires proof that the defendant entered into an agreement with at least one other person to commit an illegal act, knew the purpose of the agreement, intentionally joined it, and that at least one conspirator committed an overt act in furtherance of the conspiracy. Option A states one of the core elements. Option B is incorrect because the government generally does not have to prove that each conspirator knew every objective or the identity of every participant. Option C is too broad because not every conspirator must personally commit the overt act; at least one conspirator must do so. Option D is incorrect because a conspiracy agreement does not have to be documented in writing or electronically.

The correct answer is A. In common law systems, authentication is the process of showing that an item of evidence is what the proponent claims it is. Federal Rule of Evidence 901 states that to satisfy the authentication requirement, the party offering the evidence must produce enough proof to support a finding that the item is what that party claims. This is the core purpose of authentication.

Option B is incorrect because records, including many digital records, can often be authenticated through testimony or certification from a person with knowledge, such as a custodian of records, depending on the applicable rule and context. Option C is wrong because authentication is not something that must be “reviewed and voted on” by a jury as a prerequisite; it is an evidentiary foundation issue generally handled by the court. Option D is also incorrect because even properly authenticated evidence must still be relevant to be admissible. Authentication and relevance are separate requirements, and satisfying one does not eliminate the need for the other. For CFE purposes, the essential idea is that authentication establishes genuineness and identity, so A is the correct answer.

The Fraud Examiners Manual defines double-negative questions as those containing two forms of negation in a single clause. They are confusing and “often suggest an answer opposite to the correct one.” The example given is almost identical to the question here:

“Didn’t you suspect that something wasn’t right?”.

Thus, Sylvia’s question is a double-negative question, which should be avoided.

CFE interview guidance identifies verbal behaviors that often appear when an interviewee is being deceptive. A strong indicator is answering with a question rather than providing a direct denial. When asked directly about misconduct, truthful respondents commonly give a straightforward “no” and may add clarifying facts. Deceptive respondents sometimes deflect, buy time, or attempt to regain control by replying with a question such as, “Why would I do something like that?” This response avoids the substance of the allegation and shifts the burden back to the interviewer, potentially probing how much evidence the interviewer has. While Options A, B, and D are denials (and any denial could be untrue), the CFE materials specifically flag “answering with a question” as a frequent deceptive tactic because it functions as diversion and can indicate discomfort with issuing a clear denial. Therefore, among the choices presented, Option C is most consistent with a deceptive verbal response pattern described in CFE interview methodology.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about the core concepts in this area.

The correct answer is B: False.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATE, the circumstances under which a conflict of interest claim would be actionable against an agent.

The correct answer is B: The agent must have had an undisclosed interest m a matter that could influence their professional role.

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about the core concepts in this area.

The correct answer is B: The defendant gave or received a thing of value..

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to front business, the question asks about MOST ACCURATE, using front businesses as a method of laundering money is MOST ACCURATE.

The correct answer is D: A front business that conducts legitimate business can provide cover for delivery and transportation related to illegal activity..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

In civil law criminal proceedings, judges usually play a more active role than they do in common law adversarial systems, and a judge often serves as the primary fact finder. However, it is inaccurate to say that judges serve as the fact finder in every criminal case in every civil law jurisdiction. Some civil law jurisdictions use mixed panels made up of professional judges and laypersons, or other forms of lay participation, especially in more serious matters. Option B reverses the general pattern by stating that juries typically serve as fact finders. Options C and D are too absolute because fact-finding structures vary by jurisdiction. Therefore, option A is the most accurate statement.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about the core concepts in this area.

The correct answer is D: Mya will assist the fact finder by providing specialized knowledge that will help them understand evidence..

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

“To locate people using online records… First, when searching for an individual, the fraud examiner should obtain a past address of the subject, and search activities should begin with that information”.

This aligns with the Prep guide: “Obtaining a past address of the subject should be the first step in trying to locate a subject using online records”.

Thus, B is correct.

The Fraud Examiners Manual states:

“The expenditures method works best when the subject spends illicit income on consumables (e.g., travel and entertainment), because when the subject spends the illicit income, it will not cause an increase in net worth.”

CFE Prep confirms:

“The expenditures method … is best used when the subject spends illicit income on consumables (such as travel and entertainment) that would not cause an increase in net worth.”

Thus, the correct answer is A.

This question tests your knowledge of Uncategorized.

the question asks about NOT.

The correct answer is B: Profits derived solely from the investor ' s management activity.

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about the core concepts in this area.

The correct answer is A: Reorganization bankruptcy.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, whistleblower, the question asks about Allison is CORRECT, CORRECT.

The correct answer is C: Alison cannot be fired for informing the government of her employee’s fraud.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The CFE Prep Guide clarifies:

“A fraud response plan outlines the actions… when suspicions of fraud have arisen. Because every fraud is different, the response plan should not outline how a fraud examination should be conducted. Instead, response plans should help organizations manage their responses and create environments to minimize risk and maximize the potential for success”.

Thus, statement D is false.

 “As a general rule, questioning should proceed from the general to the specific; it is best to seek general information before details. A variation… is to begin with known information and work towards unknown areas”【9:2014 International Fraud Examiners Manual.pdf†L39-L51】.

 Random order is not recommended and breaks the logical flow.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, anti-money laundering, FATF, the question asks about FATF.

The correct answer is A: Use a risk-based approach when creating and establishing their anti-money laundering policies..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about MOST LIKELY.

The correct answer is B: The existence of a collective bargaining agreement..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is A: Overstating revenues.

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Uncategorized.

the question asks about NOT.

The correct answer is D: The defendant made a false statement in a court of law..

This question tests your understanding of key fraud examination concepts and legal principles.

The correct answer is C. Debarment. In fraud, corruption, and procurement-related enforcement, debarment is the administrative penalty that bars a person or company from participating in government contracting for a specified period. The key fact in this question is that the vendor is prohibited from bidding on government contracts for three years. That is the classic effect of a debarment order.

This differs from license suspension or license revocation, which relate to permission to engage in a regulated activity or profession, not specifically to eligibility for public contracting. Delisting is also not the most accurate term here because it usually refers more generally to removal from an approved list or roster, while debarment specifically denotes exclusion from government contracts or procurement opportunities. The CFE Law materials discuss debarment as a significant administrative consequence in anti-corruption enforcement contexts, particularly where misconduct affects public contracting and business with government entities. A time-limited ban on bidding is therefore best described as debarment, not a licensing action. Because the question directly describes exclusion from government contract bidding for a stated period, C is the most accurate answer.

Alternative dispute resolution commonly includes mediation and arbitration. In mediation, an impartial third person helps the parties reach a mutually agreeable resolution, but the mediator does not decide who wins. If the parties reach a mediation agreement, it is generally enforceable as a binding contract, making option C correct. Option A describes mediation, not arbitration. In arbitration, the dispute is submitted to an impartial third person who decides the outcome. Option B is incorrect because arbitration can be binding or nonbinding depending on the agreement and applicable rules. Option D is wrong because a mediator facilitates settlement rather than deciding the merits. Understanding these distinctions is important in civil fraud matters because many disputes are resolved outside trial.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about XYZ, BEST.

The correct answer is A: Public disclosure of private facts.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about COD, FATF.

The correct answer is A: True.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to insider trading, the question asks about MOST LIKELY.

The correct answer is B: Insider trading.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

Best practice for signed statements:

Fraud examiners should prepare the statement, keep it concise, and ensure voluntariness and intent are clear.

While not legally required, it is recommended that two individuals witness the signing.✅ Answer: C. Have two individuals witness the signing of the document when possible

The correct answer is C. Structuring scheme. The CFE Manual explains that structuring occurs when a person breaks up money into smaller transactions specifically designed to avoid regulatory reporting requirements or internal financial-institution controls. It notes that many countries require reporting of currency transactions above a certain threshold, such as more than $10,000, and that a common red flag is a customer making many deposits just under the reporting threshold.

That is exactly what Tammy is doing. Her repeated deposits of $9,000 to $9,900 over several weeks strongly suggest that she is intentionally keeping each transaction below the reporting threshold to avoid government scrutiny. Option D, integration, refers to a later laundering phase in which illicit money is reintroduced into the economy as apparently legitimate funds. Options A and B do not match this conduct. In money laundering cases, fraud examiners are trained to identify transaction patterns that appear deliberately calibrated to evade mandatory reporting rules. Repeated cash deposits just below a legal threshold are one of the clearest examples. Therefore, Tammy is most likely engaged in a structuring scheme, making C the correct answer.

Tree maps are a data visualization technique that display hierarchical data using rectangles divided into smaller regions. The size, color, or placement of each rectangle can help communicate relative volume, grouping, or importance within the hierarchy. Option A is incorrect because keyword size and frequency are associated more closely with word clouds, not geospatial analysis. Geospatial analysis concerns location-based data. Option C is incorrect because color-coding and compatibility may improve visual communication, but they are not the core objectives of data visualization. Option D confuses link analysis with geospatial mapping; link analysis is used to show relationships among people, entities, transactions, accounts, or events. Therefore, the statement about tree maps is the accurate description.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about civil lawsuits in most jurisdictions is CORRECT, CORRECT.

The correct answer is B: Civil lawsuits begin with the filing of a pleading, usually in the jurisdiction in which the defendant resides or where the claim arose.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

For publicly traded companies, the best source for information on officers and directors is regulatory securities records. These records typically include “identification of officers and directors, financial statements, significant owners, and accountants and attorneys”.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about BEST.

The correct answer is B: Liquidation bankruptcy.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to inquisitorial, the question asks about the qualifications of expert witnesses in most inquisitorial jurisdictions is CORRECT, CORRECT.

The correct answer is D: The qualification of an expert is generally based on standardized requirements.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

Isaiah is using a rationalization theme based on empathy for perceived unfair treatment. In an admission-seeking interview, the examiner develops a theme that gives the suspect a psychologically acceptable reason to confess. Here, Isaiah suggests that Ruben acted because he was mistreated by his supervisor and denied a raise. By saying he would “probably feel the same,” Isaiah reduces emotional resistance and frames the conduct as understandable, though not justified. Option B would apply if Isaiah suggested Ruben acted to help others. Option C would apply if the misconduct were presented as a one-time mistake. Option D would involve minimizing the seriousness of the offense. The statement primarily empathizes with Ruben’s perceived unfair treatment.

Authentication is the process of showing that evidence is what its proponent claims it to be. In common law evidence systems, digital records may be authenticated through testimony from a witness with personal knowledge, circumstantial evidence showing distinctive characteristics, or certified business-record procedures. A witness might authenticate digital records by explaining how the records were created, obtained, maintained, and preserved. Option A is incorrect because certification by a court clerk is not the universal requirement for authentication. Option C is wrong because unauthenticated exhibits are generally inadmissible regardless of whether they are direct or circumstantial evidence. Option D confuses authentication with relevance; authentication concerns genuineness, not whether the evidence tends to prove a material issue.

During direct examination, the attorney who calls the witness generally asks nonconfrontational questions designed to present the witness’s background, procedures, findings, and opinions clearly to the fact finder. For expert witnesses, the Fraud Examiners Manual explains that direct examination commonly uses open questions, such as asking the expert to explain the background of the case or the procedures performed. Two-part or compound questions generally should not be used because they can confuse the witness and the fact finder. Leading questions are generally not allowed during direct examination because they suggest the desired answer. Assessment questions are interview questions used to evaluate credibility, not direct-examination questions. Therefore, open questions are the most likely type of questions Esme will be asked.

The Fraud Examiners Manual explains that recommendations in a report are optional, not mandatory. When included, they should cover remedial measures such as control reviews or increased security.

“Finally, the fraud examiner might decide to include a section for recommendations. The recommendations section should contain remedial measures or specific recommendations for follow-up actions … This section is optional”.

Therefore, C is correct. Options A and D are incorrect because recommendations are not required in every report, and B misstates its purpose.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about BEST.

The correct answer is D: The courts are bound by codified principles or statures but are not bound by previous court decisions.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Fraud examiners must not opine on guilt, innocence, intent, or disposition. Reports should focus on facts and expert conclusions within their field. The Manual stresses:

“The fraud examiner should refrain from expressing opinions as to the guilt or innocence of any person or entity. Such conclusions are reserved for the trier of fact” (Fraud Examiners Manual, Reporting section).

Options A, B, and D relate to accounting and internal control assessments, which fall within an accounting expert’s scope. Only C is improper because it speculates about the suspect’s character or intent, which is outside the CFE’s role.

The correct answer is C. The CFE Manual explains that in adversarial systems, one of the most common methods of impeachment is to show that the witness made prior inconsistent statements. Impeachment is used to attack a witness’s credibility, reliability, or truthfulness. If a witness previously said something materially different from what the witness now says at trial, opposing counsel can use that inconsistency to suggest that the testimony is unreliable or false.

The other options do not describe impeachment. Option A, testifying from personal knowledge, generally supports credibility rather than undermines it. Option B, having a reputation for truthfulness, also strengthens credibility and is the opposite of impeachment. Option D, possessing a strong ability to observe, similarly suggests reliability rather than weakness. The Manual lists several common impeachment methods, including showing bias, impaired ability to observe, felony convictions, a reputation for untruthfulness, and prior inconsistent statements. Among the choices provided, only C matches one of those recognized impeachment techniques. Therefore, in an adversarial process, an attorney may impeach an opposing witness by proving that the witness previously made inconsistent statements, making C the correct answer.

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to privilege, the question asks about the core concepts in this area.

The correct answer is C: Fidelity insurance.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

Perjury generally involves knowingly making a false statement under oath or affirmation about a material or relevant matter in an official proceeding. The best answer is C because the false statement must be relevant or material to the proceeding. Option A is too broad because statements to opposing counsel are not automatically perjury unless made under oath in an authorized proceeding, such as a deposition, and satisfy the other elements. Option B is incomplete because not every false statement in court establishes perjury; the statement must be made knowingly, under oath, and concern a relevant or material matter. Option D is incorrect because statements to one’s attorney before litigation are not perjury. Therefore, relevance to the proceeding is a required element.

The Internet archives (e.g., the Wayback Machine at archive.org) allow fraud examiners to retrieve prior versions of web pages, including deleted content such as company statements.

✅ Answer: C. The internet archives

Fraud examination is the process or methodology of resolving allegations or signs of fraud from inception to disposition. The ACFE materials describe fraud examination as a structured, legal, evidence-based process that moves from general information to specific conclusions. It includes obtaining evidence, reporting findings, testifying when necessary, and assisting in fraud prevention and detection. Fraud response is broader organizational action after suspected fraud arises. Fraud deterrence focuses on discouraging fraud through controls, ethics, governance, and consequences. Fraud management is not the precise term used for this investigative methodology. Because the question asks for the methodology that resolves fraud allegations from beginning to end and also assists with prevention and detection, the correct answer is fraud examination.

The Fraud Examiners Manual notes:

“Fraud examiners are often tasked with tracing illicit transactions… For example, a victim of fraud might want a tracing search to facilitate the recovery of criminal proceeds”.

When a suspect becomes withdrawn or emotional after alibis are diffused:

“The interviewer should not remain silent or discourage the accused from showing emotion. Such reactions often indicate consideration of confession. At this point, the interviewer should present an alternative question and continue reinforcing guilt with evidence”.

Thus, Scarlett should continue presenting evidence.

The 2014 International Fraud Examiners Manual provides:

“Fraud examiners can use a correlation analysis to determine the relationships between different variables in raw data… For example, there should be a strong correlation between the independent and dependent variables because there is a direct relationship between them. Hotel costs should increase as the number of days travelled increases.”

CFE Prep – Investigations echoes this:

“Using the correlation analysis function, fraud examiners can determine the relationships between different variables in the raw data. For example… Hotel costs should increase as the number of days travelled increases.”

Thus, the most useful analysis is Correlation analysis.

The Fraud Examiners Manual specifies:

“Fraud examinations should proceed from the general to the specific. That is, they should begin with general information that is known and then move to more specific details.”

Therefore, statement B is false, making it the correct answer.

This question tests your knowledge of Domain 9.

In the context of Civil Actions, specifically relating to trial, the question asks about CFE.

The correct answer is C: Establish a clear chain of custody to show that the evidence has not been altered..

This question focuses on civil action processes. The correct answer accurately describes civil litigation procedures, evidence preservation, or remedies available to fraud victims. Civil recovery is often an important component of fraud resolution.

The best practice is to explain that the informant must be willing to sign a receipt to be paid. The ACFE materials state that if a fraud examiner pays an informant or source, the examiner should obtain a receipt, and if the informant refuses to sign one, the examiner should not pay them. A receipt helps prevent later disputes about whether payment occurred or how much was paid. Option A is poor practice because informant identities should be protected as much as possible. Option C is too broad because relevant informant information might need to be documented. Option D is improper because using a third party to hide the payment trail weakens accountability and can create legal and ethical issues.

“The locations of the subject’s residences and businesses (e.g., through analysing the payments of utility bills)… The cities and countries in which the subject conducts business (e.g., through analysing the payments for carrier services to deliver packages)”【6:2014 International Fraud Examiners Manual.pdf†L57-L77】.

They do not directly prove skimming or show market values of real estate.

This question tests your knowledge of Domain 6.

In the context of Tax Fraud, specifically relating to tax evasion, the question asks about NOT.

The correct answer is A: True.

This question focuses on tax fraud concepts. The correct answer distinguishes between legal tax avoidance and illegal tax evasion, or identifies specific tax evasion schemes. Tax fraud investigations require specialized knowledge of tax laws and common evasion techniques.

The correct answer is D. Official bribery concerns the corruption of a public official in connection with an official act of government. A core element is that the defendant gave, offered, solicited, or received something of value in exchange for influencing official action. ACFE materials describe official bribery as the corruption of a public official to influence an official act, and federal bribery law likewise centers on a thing of value being corruptly given or received in connection with official action.

Option A is incorrect because proof that the government suffered measurable damages is not generally required to establish the offense. The wrong lies in corruptly influencing official action, not in proving a completed financial loss. Option B is incorrect because bribery is not a negligence-based offense; it requires corrupt intent, not mere carelessness. Option C is also incorrect because failure to exercise due care is associated with negligence concepts, not bribery. The defining feature of bribery is the corrupt exchange itself. Therefore, among the choices, the legal element that must be shown is that the defendant gave or received something of value, making D the most accurate answer.

Textual analytics is described as:

“a method of using software to extract usable information from unstructured text data… to reveal patterns, sentiments, and relationships indicative of fraud… Textual analytics provides the ability to uncover additional warning signs of rogue employee behavior”.

Its purpose is not to find direct admissions but to identify indicators and patterns.

“Signs of stress do not always mean that a subject is lying… While lying and deception do cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

The Prep guide confirms: “While lying and deception do indeed cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

Therefore, Carlos should not automatically conclude deception from stress behaviors.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, the question asks about the core concepts in this area.

The correct answer is A: True.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

Fraud examination reports are not written only for internal use. The 2014 International Fraud Examiners Manual clearly emphasizes:

“When drafting a report, fraud examiners must consider who might end up reading it. Fraud examiners should keep in mind that the fraud examination report will be read by the general public and adverse parties. Under no circumstances should the fraud examiner prepare a communication with the idea that the information will not be disclosed to adverse third parties. Fraud examiners should draft their reports with this caveat in mind.”

The manual further specifies the wide range of potential readers:

*“There are many individuals and groups that might end up reading a fraud examination report, including the following parties:

Company insiders (managers, board of directors, owners, investors, etc.)

Attorneys (legal counsel, prosecutors, regulators, and defense counsel)

Defendants and witnesses

Press and media outlets

Judges or juries”*

This aligns with the CFE Prep - Investigations study guide, which also confirms:

“There are many parties that might read a fraud examination report, including company insiders, attorneys, defendants and witnesses, press and media outlets, and judges or juries.”

???? Interpretation:

The media may access the report through litigation disclosures or leaks.

Opposing legal counsel will review the report during discovery or trial.

Investors and owners (company insiders) are primary stakeholders.

Thus, the only correct choice is D. All of the above, because fraud examination reports must be written with all possible audiences in mind, ensuring accuracy, clarity, impartiality, and professionalism to withstand scrutiny from multiple directions.

The most accurate answer is A. Under the CFE Law materials, the litigation privilege in common law jurisdictions such as the United Kingdom and Canada is described as roughly comparable to the U.S. attorney work-product doctrine. It protects communications made and documents prepared for the purpose of litigation, and it arises once litigation is reasonably anticipated. That means protection is not limited only to materials created after a lawsuit has formally begun; it can attach earlier, as long as litigation was contemplated when the material was created.

Option B is incorrect because the privilege is not restricted to the period after litigation formally commences. Option C is incorrect because the Manual states that the privilege may extend to communications and documents created by third-party agents, including consultants or fraud examiners, in preparation for litigation. Option D describes the purpose of attorney-client, legal advice, or solicitor-client privilege, which protects confidential legal communications—not litigation privilege. Therefore, among the choices provided, A is the best and most accurate statement, even though the privilege can also cover certain communications in addition to documents and materials.

The correct answer is B. The CFE Manual states that authenticity is supported by establishing a chain of custody, which is both a process and a document showing who had possession of an item and what was done with it. The chain of custody is important because it helps prove that the evidence has not been materially altered or changed from the time it was collected until it is produced in court. That is exactly the concern raised in this question.

The Manual further explains that establishing chain of custody generally involves documenting each person who had control of the evidence, when and how it was received, how it was stored, whether any changes occurred while it was in that person’s possession, and how it left that person’s custody. It is therefore the primary method for preserving and proving authenticity.

The other options do not address authenticity as directly. Limiting release only to a judge is not the standard legal requirement. Requiring court orders from opposing parties may relate to access disputes, not authenticity. Preventing all others from ever handling the evidence is also unrealistic and unnecessary if possession is properly documented. For CFE purposes, the best practice is to maintain a clear, documented chain of custody, so B is the correct answer.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, privacy, surveillance, workplace, the question asks about MOST LIKELY.

The correct answer is A: A backpack brought from home.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The Fraud Examiners Manual states:

“If a business or individual constructs a new building or makes improvements to an existing building, there should be a building permit on file with the local building authority. In many cases, the person applying for permits will be the owner or someone traceable to the owner.”

CFE Prep supports this:

“Building permit records… are often required before most businesses can open… and often list the owner or someone traceable to the owner.”

Thus, building permit records are most likely to help identify the restaurant’s owner.

Asset hiders often prefer financial products that make it difficult to connect illicit proceeds to their final location, owner, or use. A product that obscures the link between initial receipt and final disposition helps conceal the trail of funds. The goal of tracing illicit transactions is to follow the movement of assets from source to destination, identify hidden ownership, and locate recoverable property. Products that create opacity, layers, nominees, or unclear ownership histories are attractive to individuals attempting to hide fraud proceeds. Option A is not necessarily correct because complexity alone is not the core appeal. Option C describes illiquid products, which might be unattractive. Option D is the opposite of what asset hiders want. Therefore, option B is correct.

Digital evidence is more volatile than tangible evidence because electronic data can be altered, overwritten, deleted, or destroyed very easily. Even ordinary system activity can change metadata, access logs, temporary files, or other important information. This is why fraud examiners must preserve digital evidence carefully, often by using forensic imaging, write-blocking tools, and validated procedures. Option A is incorrect because once integrity is compromised, the evidence usually cannot simply be restored to its original evidentiary condition. Option B is wrong because digital evidence is also subject to spoliation concerns. Option D is false because failure to preserve integrity can affect admissibility or weight in legal proceedings. Therefore, option C is the most accurate statement.

In civil law jurisdictions, the standard of proof in civil trials is often described as the inner conviction of the judge, also called the conviction intime standard. This standard generally requires stronger evidence than the common law preponderance of the evidence standard but less than the common law beyond a reasonable doubt standard. Option A describes the common law civil standard. Option B describes a criminal standard used in many common law systems. Option D describes an intermediate evidentiary burden used in some jurisdictions for selected matters, but it is not the general civil law standard described in the CFE materials. Therefore, option C most accurately describes the burden of proof for civil trials in civil law jurisdictions.

The Fraud Examiners Manual and CFE Prep Guide explain that tracing loan proceeds is a key investigative tool, but its scope is limited. Specifically, it helps determine:

if proceeds were deposited into hidden accounts,

if hidden accounts were used for loan payments, and

if loans were secured by hidden assets or unknown witnesses.

However, the manuals do not state that tracing loan proceeds can identify internal control weaknesses. That is a different aspect of fraud examination, often addressed through audit procedures or control assessments.

Thus, option D is NOT true.

An injunction is an equitable remedy that requires a party to do something or stop doing something. Here, the court orders the company to remove the chemical waste and prevents it from storing waste in that location. This is not damages because the remedy is not a money award. It is not declaratory relief because the court is not merely declaring the parties’ rights. It is also not punitive relief because the order is designed to prevent or correct harm rather than punish the defendant through an additional penalty. In civil justice, equitable remedies are commonly used when monetary compensation alone would be inadequate. Because the court imposed conduct-based restrictions and required corrective action, the remedy is best classified as an injunction.

The Fraud Examiners Manual explains that rather than drafting an exhaustive list of questions, the interviewer should:

“formulate a brief outline of key points to discuss during the interview”.

This helps organize thoughts while allowing flexibility.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to GDPR, the question asks about EU, GDPR, NOT.

The correct answer is B: An organization must have a documented lawful basis for collecting or processing personal data..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to GDPR, the question asks about EU, GDPR.

The correct answer is A: An organization must obtain a data subject ' s consent before collecting or processing personal data about that individual..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The manual explains:

“Link analysis is very effective for identifying indirect relationships… and is particularly useful when conducting a money laundering investigation because it can track the placement, layering, and integration of money” .

Therefore, statement A is false, making it the correct choice.

Marla cannot conclude that the suspect is being deceptive based solely on foot tapping. The ACFE materials warn that no single behavior proves anything. Behavioral observations must be evaluated against the individual’s baseline and interpreted in clusters, not in isolation. Restless behavior might indicate nervousness, discomfort, cultural habits, stress, physical conditions, or other innocent explanations. Although such behavior might be considered during an interview, it cannot safely support a conclusion of deception by itself. Option B is too absolute because restlessness can sometimes be considered a possible behavioral cue. Options C and D are incorrect because they overstate the reliability of nonverbal behavior. Therefore, the proper conclusion is that Marla should not isolate the behavior to infer dishonesty.

Limitations of online public record searches include:

Need to search multiple jurisdictions.

Records are often only abstracts.

Information must be verified for accuracy.There is no mention that online record vendors are “difficult to find.” In fact, many such vendors exist.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, privacy, the question asks about CFE, MOST LIKELY, ABC.

The correct answer is B: Intrusion into Green ' s private matters.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Civil and criminal proceedings can sometimes move forward at the same time, depending on the jurisdiction and case circumstances. A company that suffers losses from employee misconduct might refer the matter to law enforcement for possible criminal prosecution while also pursuing civil remedies to recover losses. The criminal case focuses on punishment and public enforcement, while the civil case focuses on compensation, recovery, or equitable relief. Option B is incorrect because referral to law enforcement does not automatically eliminate the victim organization’s civil remedies. Option C is also wrong because a civil action does not necessarily depend on law enforcement declining prosecution. Option D is incorrect because there is no universal rule requiring the civil case to be filed first. The correct answer is A.

Explanation with Extracts = Pretexting is:

“The act of impersonating someone else or making false or misleading statements to obtain information from financial institutions. Several jurisdictions have prohibited pretexting against financial institutions”.Thus, falsely claiming to be the spouse constitutes illegal pretexting.

The attorney is using a bias attack. In cross-examination, opposing counsel might try to show that an expert witness’s work, report, or opinion is not independent, but instead was influenced by the party that hired or paid the expert. Suggesting that Llewellyn was directed to reach a particular conclusion attacks impartiality and implies that the testimony was purchased or shaped to favor the hiring party. Contradiction focuses on inconsistent statements or conflicts with prior testimony or documents. Myopic vision focuses on excessive attention to one area while ignoring another. A sounding board technique attempts to use the witness to support the opposing side’s theory. Because the question attacks Llewellyn’s neutrality, answer A is correct.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATE, judgments involving parties that are in multiple jurisdictions is MOST ACCURATE.

The correct answer is D: Whether a foreign judgment is enforceable might depend on whether the two jurisdictions have an enforcement treaty..

This question tests your understanding of key fraud examination concepts and legal principles.

According to the ACFE Fraud Examiners Manual, Law Section, under The Criminal Justice System and The Law Related to Fraud , obstruction of justice occurs when a person corruptly interferes with the administration of law or the proper functioning of the judicial process. This includes attempting to improperly influence, intimidate, or tamper with witnesses in a pending proceeding.

Offering money to witnesses in exchange for changing their testimony constitutes witness tampering, which is a classic form of obstruction of justice. The essence of obstruction is not merely the success of the interference but the corrupt attempt to impede the due administration of justice. The legal system depends on truthful testimony, and any effort to alter or influence witness statements through bribery undermines the integrity of judicial proceedings.

“Conspiracy to influence the court” is not a standard standalone criminal charge in this context, and fraudulent misrepresentation typically relates to deception for financial or property gain, not interference with judicial proceedings. Judicial extortion involves coercion under color of official authority, which does not apply here.

Therefore, Monique’s conduct—offering payment to alter testimony—would most likely result in additional charges for obstruction of justice because she is attempting to corruptly interfere with the criminal trial process.

In civil law jurisdictions, the duty to take affirmative steps to preserve evidence is generally narrower than in common law jurisdictions. The Fraud Examiners Manual explains that civil law systems often rely on the court to determine what evidence must be preserved and produced. This differs from common law systems, where the preservation duty commonly arises when litigation is reasonably anticipated. Here, because the question specifically states that XYZ Company operates in a civil law jurisdiction, the company’s duty would begin when trial proceedings commence and the court instructs the parties to retain items. The earlier events might be relevant facts, but they do not automatically trigger the civil law preservation duty described in the CFE materials.

Debarment is an administrative penalty that excludes a person or business from participating in government programs, contracts, or procurement opportunities for a specified period or until conditions are met. The facts state that the business was placed on a government roster that excludes members from government programs after fraudulent misconduct. That is the classic meaning of debarment. License revocation and license suspension concern the removal or temporary restriction of a professional or business license, not exclusion from government programs. Disallowance generally refers to rejecting or refusing a claimed cost, deduction, or item, not barring a party from government participation. In fraud and procurement contexts, debarment is a powerful administrative remedy used to protect public programs from dishonest contractors. Therefore, option C is correct.

Best practices when working with confidential informants include documenting payments and identities in ways that protect anonymity but avoid risks. The Fraud Examiners Manual and CFE Prep emphasize avoiding cash payments because they reduce transparency and create audit trail problems. Paying in cash is therefore NOT considered a best practice, whereas using initials, obtaining receipts, and documenting informant information in reports can be acceptable methods.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about OECD.

The correct answer is B: Laws and regulations related to public subsidies licenses, and contract procurement.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about the core concepts in this area.

The correct answer is B: Placement.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes. Money laundering typically involves three stages: placement (introducing illegal funds into the financial system), layering (creating complex transactions to hide the source), and integration (returning the funds to the launderer in an apparently legitimate form).

The Fraud Examiners Manual specifies that admission-seeking interviews should only be conducted when:

“There is a reasonable probability that the respondent has committed the act in question.

All other reasonable investigative steps have been completed.

The interviewer can reasonably control the place, time, and subject matter of the interview.”

There is no requirement that the examiner must be sure no one else was involved. Therefore, C is correct.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is C: Structuring.

This question tests your understanding of key fraud examination concepts and legal principles.

Body language alone (e.g., avoiding eye contact) cannot be taken as proof of deception. The Manual warns against drawing conclusions from a single behavioral cue:

“Avoiding eye contact is not directly linked to deception. Such behavior could stem from cultural norms, nervousness, or personality traits. Examiners should consider clusters of behavior, context, and corroborating evidence before concluding deception”.

Therefore, C is correct.

The correct answer is A. The CFE Manual explains that to recover for intentional infliction of emotional distress, the plaintiff must prove that the defendant engaged in extreme and outrageous conduct, that the defendant acted intentionally or recklessly, and that the victim actually suffered emotional or mental distress as a result of the defendant’s conduct. These core elements match options B, C, and D.

There is no general requirement that the distress must have lasted for at least two years. That time-based condition is not one of the recognized elements listed in the CFE Law section. The Manual instead focuses on the nature of the conduct and the causal connection between that conduct and the victim’s injury. It also notes that the conduct must be sufficiently outrageous to exceed the bounds tolerated by civilized society and that mere insults or ordinary upset are not enough. Additionally, the Manual emphasizes that actionable claims require proof of serious, visible, and provable harm. Still, none of those requirements impose a fixed minimum duration such as two years. Accordingly, A is the only choice that is not a required element of this common law tort.

In inquisitorial criminal justice systems, discovery generally occurs through the investigative and examining phases rather than through party-driven requests like those used in adversarial systems. Judges, prosecutors, or examining magistrates often play a central role in developing the evidentiary dossier. This differs from adversarial systems, where the parties commonly request, exchange, and challenge evidence through formal discovery procedures. Option A is incorrect because the parties do not primarily create the evidentiary record in the same manner as adversarial litigation. Option C is also incorrect because inquisitorial proceedings are usually not party-driven. Option D is wrong because discovery does not typically begin after the trial starts. Therefore, the most accurate statement is that discovery primarily occurs during the investigative and examining phases.

The manual emphasizes that interviews—especially with subjects in other jurisdictions—pose legal and cultural considerations. Fraud examiners must consider cultural norms (such as personal space, body language, and eye contact) and jurisdiction-specific laws governing the use of information from interviews. In particular, some jurisdictions limit how interview information can later be used. Therefore, the most accurate statement is that the examiner should verify such limitations before proceeding.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about cross-border transfers of currency recommend that countries do which of the following, FATF.

The correct answer is C: Establish reporting thresholds for physically carrying currency or currency equivalents into or out of a country..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about money services businesses (MSBs) is INCORRECT, INCORRECT.

The correct answer is B: MSBs are generally less strictly regulated than traditional financial institutions..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The correct answer is D. The CFE Manual explains that in most common law jurisdictions, the jury is typically responsible for finding the facts in criminal cases, while the judge applies the law and rules on evidence. However, this is not always the case. The Manual also states that for some criminal matters, usually minor offenses, a jury trial might not be available, and in many jurisdictions the defendant may also waive the right to a jury trial. When no jury is present, the judge serves as the fact finder.

This is why A and B are both too absolute; neither judges nor juries serve as fact finders in all criminal cases. Option C reverses the usual pattern by suggesting that judges typically serve as fact finders, which is inconsistent with the Manual’s explanation of common law criminal proceedings. The more accurate statement is that juries usually serve as fact finders, but judges may do so in bench trials, waiver situations, or cases where jury trials are unavailable. Therefore, D is the best and most precise answer under the CFE Law topics.

The correct answer is C. The CFE Manual states that the UK Bribery Act has a broader application than the FCPA because it reaches commercial bribery, meaning bribery in the private sector, not just bribery involving foreign public officials. The Manual specifically explains that, unlike the FCPA, the UK Bribery Act includes a general commercial bribery offense and also creates a corporate offense for failure to prevent bribery.

Option A is incorrect because the UK Bribery Act does not contain the same kind of explicit exception for facilitating payments associated with the FCPA framework. Option B is also incorrect because the Manual expressly notes that an anti-corruption program sufficient for FCPA compliance might still be insufficient for UK Bribery Act compliance due to the broader scope of the UK law. Option D is incorrect because both the FCPA and the UK Bribery Act criminalize bribery of foreign public officials in connection with international business transactions; that is not a point of difference. Therefore, the most accurate statement is C, because the UK Bribery Act goes further by criminalizing bribery in the private sector as well.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, concealment of assets, the question asks about the core concepts in this area.

The correct answer is A: Bankruptcy fraud.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

The correct answer is D. Banking and accounting requirements and practices. Under the CFE Law topics addressing anti-bribery and corruption, the OECD Recommendation focuses heavily on strengthening the systems that help detect, prevent, and document improper payments to foreign public officials. A core part of that framework is the improvement of banking transparency, accounting standards, recordkeeping, internal controls, and audit-related practices. These areas are critical because bribery is often concealed through false entries, off-the-books accounts, sham invoices, disguised consulting fees, or misleading payment descriptions.

This emphasis is consistent with the fraud examiner’s role in identifying how corrupt payments move through an organization’s financial systems. By improving accounting and banking requirements, member states make it harder for individuals and entities to hide bribes and easier for investigators to trace suspicious transactions. The other choices are not the primary focus of the Recommendation in this context. Public safety and public health are unrelated to the OECD’s principal anti-bribery infrastructure goals, and although criminal laws are important, the Recommendation is especially known for encouraging stronger financial reporting and accounting controls as anti-corruption tools. Therefore, D is the most accurate choice.

Under the ACFE Fraud Examiners Manual, Law Section, specifically in The Law Related to Fraud and International Initiatives Against Fraud and Corruption , the OECD Recommendation on Combating Bribery of Foreign Public Officials in International Business Transactions emphasizes strengthening the legal infrastructure of member states.

The Recommendation calls on countries to adopt and enforce effective criminal laws that prohibit the bribery of foreign public officials. It also encourages the enhancement of civil, commercial, and administrative frameworks to support enforcement. This includes corporate liability provisions, adequate sanctions, proper accounting and auditing standards, whistleblower protections, and mechanisms for international cooperation. The goal is to ensure that bribery is clearly defined as a criminal offense and that enforcement mechanisms are robust, coordinated, and effective.

The focus is not on data protection, e-commerce regulations, or general public health and safety laws. Instead, it centers on harmonizing and strengthening anti-bribery statutes and related legal systems to ensure transparency, accountability, and deterrence in international business transactions.

Therefore, the primary area member states are encouraged to improve is their criminal, civil, commercial, and administrative laws, making option B the correct answer.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, common law, the question asks about EXCEPT.

The correct answer is C: Injunctions.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about TRUE, ABC.

The correct answer is B: Marcia must have failed to disclose that she had a personal or economic interest in a matter that could influence her professional role..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Uncategorized.

the question asks about willfully ' , NOT.

The correct answer is A: True.

This question tests your understanding of key fraud examination concepts and legal principles.