Free and Premium ACFE CFE- Fraud-Investigations-and-Legal-Issues Dumps Questions Answers

During direct examination, the attorney who calls the witness generally asks nonconfrontational questions designed to present the witness’s background, procedures, findings, and opinions clearly to the fact finder. For expert witnesses, the Fraud Examiners Manual explains that direct examination commonly uses open questions, such as asking the expert to explain the background of the case or the procedures performed. Two-part or compound questions generally should not be used because they can confuse the witness and the fact finder. Leading questions are generally not allowed during direct examination because they suggest the desired answer. Assessment questions are interview questions used to evaluate credibility, not direct-examination questions. Therefore, open questions are the most likely type of questions Esme will be asked.

Websites ending in “.onion” are only accessible via specialized browsers (e.g., Tor). The Fraud Examiner prep materials note:

“.onion sites are part of the dark web, which is distinct from the surface web and deep web. Accessing requires specialized browsers” (CFE Prep – Investigations).Thus, Jade must use a dark web browser.

According to the ACFE Fraud Examiners Manual, Law Section, particularly in discussions related to public corruption and remedies in criminal and administrative proceedings , debarment is an administrative sanction that prohibits an individual or entity from participating in government contracts or programs for a specified period of time. Debarment is commonly imposed after convictions involving fraud, bribery, collusion, or other misconduct affecting the integrity of the procurement process.

In this case, Freya was convicted of colluding to manipulate the competitive bidding process. As a result, she was placed on a list prohibiting her from bidding on government contracts for five years. This exclusion from government contracting is the defining characteristic of debarment. The purpose of debarment is not merely punitive but also protective—it safeguards public funds and ensures that only responsible and ethical contractors conduct business with the government.

License revocation or suspension would involve withdrawing or temporarily removing a professional or business license. Disenfranchisement refers to the loss of voting rights. Neither accurately describes exclusion from government contracting opportunities.

Therefore, the administrative penalty imposed on Freya is best described as debarment.

Debarment is an administrative penalty that excludes a person or business from participating in government programs, contracts, or procurement opportunities for a specified period or until conditions are met. The facts state that the business was placed on a government roster that excludes members from government programs after fraudulent misconduct. That is the classic meaning of debarment. License revocation and license suspension concern the removal or temporary restriction of a professional or business license, not exclusion from government programs. Disallowance generally refers to rejecting or refusing a claimed cost, deduction, or item, not barring a party from government participation. In fraud and procurement contexts, debarment is a powerful administrative remedy used to protect public programs from dishonest contractors. Therefore, option C is correct.

The Fraud Examiners Manual states that admission-seeking interviews should avoid yes/no questions like “Did you steal the money?” because they encourage denials. Instead, the question should be phrased as if guilt has already been established. The Manual explicitly warns:

“The accusation should be made in the form of a statement; it should not be made in the form of a question… Avoid emotive words such as steal, fraud, and crime… Example: ‘It is not so much a question of what you did, but why you did it.’”

Thus, the most effective admission-seeking phrasing is: “Why did you take the money?” because it presumes involvement and encourages explanation rather than denial.

The manual notes:

“Records subpoenaed in a criminal case usually are available only to the government during the investigation, and perhaps thereafter if not disclosed at trial”.

Thus, statement D is false.

The best practice is to explain that the informant must be willing to sign a receipt to be paid. The ACFE materials state that if a fraud examiner pays an informant or source, the examiner should obtain a receipt, and if the informant refuses to sign one, the examiner should not pay them. A receipt helps prevent later disputes about whether payment occurred or how much was paid. Option A is poor practice because informant identities should be protected as much as possible. Option C is too broad because relevant informant information might need to be documented. Option D is improper because using a third party to hide the payment trail weakens accountability and can create legal and ethical issues.

Complex questions:

“consist of a series of interrelated questions… too complicated to be easily understood, cover more than one subject, or require more than one answer”.

The question asked by Delta (“Were you aware that the signature was forged, and why didn’t you tell anyone earlier?”) covers two issues, making it complex.

According to the Fraud Examiners Manual:

“Credit card records are important in tracing assets… information on credit card charges might provide leads to identifying hidden assets. For example, if a fraud examiner notices that the subject used his credit card to purchase items at a marina, the fraud examiner should investigate further to determine if the subject owns a boat”.

Therefore, A is correct.

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

Explanation with Extracts = Predication requires sufficient circumstances to suggest fraud. The CFE Prep Guide explains:

“Fraud examiners should not investigate beyond the available predication… There is insufficient predication to confront Wallace or to make any direct allegations about fraud, but Carter does have adequate predication to make discreet inquiries”.Similarly, Arnold may discreetly inquire but not accuse or search property without further evidence.

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to circumstantial evidence, the question asks about the core concepts in this area.

The correct answer is D: Relevant evidence.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

The correct answer is B. The CFE Manual states that under the ICCPR, everyone accused of a crime shall be presumed innocent until proven guilty according to law. This is one of the core due-process protections recognized in the criminal justice section of the Law materials.

Option A is incorrect because the ICCPR protects the right to a fair and public hearing, not a trial without public disclosure of the results. Option C is also incorrect because the Manual states that the ICCPR gives a convicted person the right to have the conviction and sentence reviewed by a higher tribunal, but it does not provide for unlimited appeals. Option D is too broad because release pending trial is not presented as an automatic right in the way presumption of innocence is. For CFE purposes, the key takeaway is that criminal defendants under the ICCPR are entitled to several important safeguards, and one of the most fundamental is that they must be treated as innocent unless and until guilt is proven according to law. Therefore, B is the correct answer.

Fraud examiners should generally avoid allowing unnecessary observers in interviews. Additional observers can affect the interviewee’s responses, create confidentiality concerns, increase the chance of later disputes, and potentially expose the organization or examiner to legal claims. The Fraud Examiners Manual emphasizes that interviews should be controlled and that the interviewer should avoid unnecessary third-party participation unless the law, a collective bargaining agreement, language needs, or similar requirements make an observer necessary. The HR manager’s desire to observe is not, by itself, a sufficient reason to permit attendance. Option D is still risky because silent presence can influence the interview. Option A is based on comfort rather than investigative control. Therefore, if the law permits, Ana should not allow the HR manager to witness the interview.

Admission-seeking interviews should be carefully planned so the examiner can control the place, time, and subject matter. The Fraud Examiners Manual states that no observers other than the subject and up to two fraud examiners should usually be present because outsiders can interfere with obtaining a confession and can create legal issues. However, exceptions can exist when law, regulation, union rights, attorney rights, or practical needs such as language interpretation require another person’s presence. Option A is weak because friends or relatives are not ideal interpreters due to bias and confidentiality concerns. Option B is incorrect because chairs should generally be four to six feet apart, not within two feet. Option D is not a best practice.

“When searching for an individual, the fraud examiner should obtain a past address of the subject, and search activities should begin with that information”.

Therefore, saying a past address is “of no help” is incorrect.

When introducing themselves, fraud examiners should avoid titles like investigator or Certified Fraud Examiner that might raise suspicion or defensiveness. The Manual recommends using neutral titles such as auditor because it is less threatening and more acceptable in an organizational setting.

According to CFE Prep – Investigations:

“In most jurisdictions, income tax records are not public records and cannot be accessed for pre-employment purposes”.

Common public sources include court, property, licensing, and utility records.Thus, searching income tax filings is not a common use of public sources.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, bustout, the question asks about the core concepts in this area.

The correct answer is C: Uses credit to purchase a considerable amount of goods.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

“The locations of the subject’s residences and businesses (e.g., through analysing the payments of utility bills)… The cities and countries in which the subject conducts business (e.g., through analysing the payments for carrier services to deliver packages)”【6:2014 International Fraud Examiners Manual.pdf†L57-L77】.

They do not directly prove skimming or show market values of real estate.

Wire fraud is the most likely basis because Noah used electronic communications and interstate transmissions to carry out a scheme to obtain money. Phishing emails, remote account access, and electronic transfers of funds are classic uses of wires or electronic communications in furtherance of fraud. Mail fraud would require use of the postal system or covered mail services, which is not described. “Communications fraud” and “interstate fraud” are not the standard charge that best fits the facts. The key facts are that Noah targeted companies across multiple states, used phishing emails to obtain credentials, and transferred funds electronically. In U.S. fraud-law analysis, schemes involving electronic communications and fund transfers are generally prosecuted as wire fraud when the statutory elements are met.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, the question asks about UN, ICCPR.

The correct answer is D: Right of the accused to be informed of criminal charges.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about MOST ACCURATE, the litigation privilege in common law jurisdictions.

The correct answer is A: The primary purpose of the litigation privilege is to protect confidential communications between a client and the client ' s legal representative.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This is a double-negative question because it contains two forms of negation: “Didn’t” and “wasn’t.” Double-negative questions are poor interview questions because they confuse the respondent and can suggest an answer opposite to the intended meaning. Fraud examiners should avoid them because they reduce clarity and can make the resulting answer unreliable or difficult to interpret. Option A is not the best description because the issue is not the order of the words, but the presence of two negatives. Option B is incorrect because the question does not merely control the answer; it creates confusion. Option D is less precise because a complex question usually combines multiple issues, while this question is specifically defective due to double negation.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, bustout, the question asks about CEO, MOST LIKELY.

The correct answer is D: A concealed transfer.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

When obtaining a verbal confession, the fraud examiner should secure details such as: admission of wrongdoing, number of instances, amount involved, dates, involvement of others, residual assets, and motive. However, it does not matter whether the suspect claims the conduct was an accident; that is not necessary to record.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to insider trading, the question asks about MOST LIKELY.

The correct answer is B: Insider trading.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

The correct answer is C because it is the best example of circumstantial evidence. Circumstantial evidence does not directly prove the ultimate fact in dispute. Instead, it establishes surrounding facts from which a judge or jury may reasonably infer the conclusion. Here, proof that the cashier deposited $900 into a personal bank account the day after $900 was stolen does not directly show the cashier taking the money, but it strongly suggests involvement in the theft. That is precisely how circumstantial evidence works in fraud and theft cases.

Option A is direct evidence, not circumstantial evidence, because an eyewitness claims to have actually seen the cashier remove money from the register. Option B is merely demonstrative or illustrative evidence showing store layout; by itself, it does not tend to prove that the cashier committed the theft. Option D also does not prove the act of theft; it only explains a workplace rule or standard. In fraud examinations, circumstantial evidence is often very important because many fraudulent acts occur in secret, requiring investigators to prove wrongdoing through patterns, financial links, timing, and conduct rather than direct observation alone. Therefore, C is the strongest circumstantial-evidence choice.

The 2014 International Fraud Examiners Manual defines:

“Fraud examination is a methodology of resolving signs or allegations of fraud from inception to disposition. The fraud examination methodology establishes a uniform, legal process for resolving signs or allegations of fraud on a timely basis.”

Similarly, CFE Prep – Investigations confirms:

“The term fraud examination refers to a process of resolving allegations of fraud from inception to disposition, and it is the primary function of the anti-fraud professional.”

Thus, the correct answer is D.

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to privilege, the question asks about MOST ACCURATE.

The correct answer is B: Bob might have waived the privilege because he transmitted the protected information to a third party who has no need to know the information.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

The Fraud Examiners Manual defines compliance verification as:

“Compliance verification determines whether company policies are met by employee transactions. For example, when employees are out of town, do they adhere to the company policy of not spending more than $30 a day for meals?” .

Thus, the correct function is compliance verification.

This question tests your knowledge of Uncategorized.

the question asks about US, FCPA.

The correct answer is C: A private U S company transfers $45,000 to a foreign official to influence the award of a public construction contract..

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to adversarial, inquisitorial, the question asks about MOST ACCURATE, the selection of expert witnesses during trial is MOST ACCURATE.

The correct answer is B: Generally, the parties select the expert witnesses in both inquisitorial and adversarial jurisdictions..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

The best practices for signed statements include:

Adding omitted facts as an addendum.

Preparing separate statements for unrelated offenses.

Having witnesses to the signing.

But:

“The signed statement should be reduced to a short and concise written statement. The interviewer should prepare the statement and present it to the confessor for his signature” .

Thus, requiring the suspect to handwrite the entire statement is not a best practice.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, administrator, the question asks about MOST ACCURATE, Slater ' s role as bankruptcy administrator is MOST ACCURATE.

The correct answer is C: Slater may collect, preserve, and dispose of the debtor ' s property..

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is A: True.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Before pursuing litigation, fraud examiners are advised to consider whether nonlegal remedies (e.g., restitution agreements, settlements, insurance recovery) are possible, since legal actions can be costly, slow, and uncertain. Statutes of limitation and guilt are legal issues for attorneys and courts, but examiners must weigh recovery options first.

“Fraud examinations should proceed from the general to the specific. That is, they should begin with general information that is known, starting at the periphery, and then move to the more specific details”.

This method avoids premature assumptions and ensures systematic evidence development.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, common law, the question asks about the core concepts in this area.

The correct answer is D: Affidavits of documents.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

In most adversarial jurisdictions, a person can qualify as an expert based on education, training, skill, knowledge, or experience. Therefore, experience alone may be sufficient if it gives the witness specialized knowledge that will help the fact finder understand evidence or determine a disputed fact. A professional certification can strengthen an expert’s qualifications, but it is not always required. The agreement of all parties is also not required; the judge decides whether the witness is qualified and whether the testimony is relevant and reliable. Education is important, but it is not the sole or primary basis in every case. Fraud examiners can qualify as experts when their practical experience and specialized knowledge meet the court’s standard.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to inquisitorial, the question asks about the qualifications of expert witnesses in most inquisitorial jurisdictions is CORRECT, CORRECT.

The correct answer is D: The qualification of an expert is generally based on standardized requirements.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to conspiracy, the question asks about the core concepts in this area.

The correct answer is C: The defendant knew all the details or objectives of the conspiracy.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The correct answer is B. The CFE Manual explains that although legal professional privilege generally applies to confidential communications between a lawyer and the client, in most jurisdictions the protection extends to communications with third-party consultants hired to help provide legal advice, including fraud examiners, accountants, bankers, and other experts. Therefore, when an attorney shares privileged material with a fraud examiner who has been retained to assist in the case, that disclosure does not automatically waive the privilege.

Option A is incomplete and therefore not the most accurate. While the client does hold the privilege, the Manual also states that the privilege can be waived by the client’s attorney or a third party in some circumstances. Option C is incorrect because not every disclosure to a third party causes waiver; disclosure to a consultant working within the legal team may remain protected. Option D is also incorrect because the use of email itself does not create waiver. The more important question is whether the communication remained within the privileged relationship and was shared only with those assisting counsel. Since the fraud examiner was hired to work on the case, B is the most accurate answer.

The Fraud Examiners Manual advises:

“Do not slow down the interview process for note-taking. Instead, jot down key words … In general, it is better to err on the side of taking too few notes rather than too many.”

Therefore, the best practice is C.

“To locate people using online records… First, when searching for an individual, the fraud examiner should obtain a past address of the subject, and search activities should begin with that information”.

This aligns with the Prep guide: “Obtaining a past address of the subject should be the first step in trying to locate a subject using online records”.

Thus, B is correct.

The correct answer is D. Civil law system. A civil law system is generally characterized by reliance on codified statutes and written legal codes as the primary source of law. In these systems, courts apply legislative codes to the facts of each case, and judicial decisions from prior cases usually do not bind future courts in the same way that precedent operates in common law systems. This description matches the facts given in the question exactly.

Option B, the common law system, is incorrect because common law jurisdictions place much greater weight on judicial precedent, meaning earlier court decisions can be binding on later cases involving similar legal issues. Options A and C sound plausible, but they are not the standard legal-system labels used in comparative law. For CFE purposes, the recognized contrast is generally between civil law and common law systems. Understanding this distinction is important in fraud examinations because legal procedure, evidentiary practices, court structure, and the investigator’s interaction with attorneys and judges can differ significantly depending on the type of legal system involved. Since the question emphasizes codified law and the absence of binding precedent, civil law system is the most accurate answer.

Social media content is dynamic—posts can be edited, deleted, or moved—so fraud examiners must preserve relevant information promptly and in a manner that supports authenticity and admissibility. CFE investigative guidance emphasizes that documentary (including digital) evidence carries limited value in legal proceedings unless it can be shown to be authentic and in substantially the same condition as when collected. Simply saving a link (Option A) is weak because the underlying content can change, and a link does not preserve what was actually observed. Requesting a copy from the platform (Option B) is often impractical as a routine step and may require legal process; it also does not replace contemporaneous preservation by the examiner. A “forensic shutdown” (Option C) is not an appropriate method for preserving web-based social media content because the key evidence exists on external servers, not solely on the examiner’s machine. Proper practice is to download/capture and preserve what was observed while documenting the collection steps and maintaining a defensible chain of custody so authenticity can be established if needed in court.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about cross-border transfers of currency recommend that countries do which of the following, FATF.

The correct answer is C: Establish reporting thresholds for physically carrying currency or currency equivalents into or out of a country..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Pretexting is defined as impersonating someone else or making false/misleading statements to obtain information. Many jurisdictions specifically prohibit pretexting against financial institutions, which includes pretending to be a customer to access their bank account information.

Beth’s strongest claim is public disclosure of private facts. The Fraud Examiners Manual explains that this civil wrong occurs when someone publicizes private facts about another person’s life that are not of public concern and would be highly offensive to a reasonable person. Medical information about surgery and a chronic illness is private, and Eric disclosed it to coworkers who were not involved in the investigation. Defamation and slander require false statements that harm reputation, but the facts here state that Eric disclosed true information. Negligent misrepresentation involves false information supplied carelessly, usually in a business or transactional setting. Because liability can arise even when private facts are true, option B is the best answer.

The best answer is C. Raul must have breached the duty of fidelity that he owed to XYZ Org. In the CFE framework, a conflict of interest becomes legally actionable when the employee’s undisclosed or improper self-interest results in a breach of the duty owed to the employer. Employees are expected to act in the organization’s best interests when performing their job responsibilities. When an employee allows a personal or economic interest to interfere with that duty, the issue is no longer just an appearance problem; it can become a legal wrong.

Option B describes a common way a conflict of interest arises—failure to disclose a personal or economic interest—but that fact alone is not always the full legal basis of an actionable claim. The central legal problem is the breach of loyalty or fidelity to the employer. Option A is incorrect because disclosure to the organization generally weakens, rather than establishes, a concealed conflict-of-interest claim. Option D is also incorrect because a direct financial benefit is not always required; the actionable issue is the employee’s divided loyalty and breach of duty, not necessarily proof of a specific direct payment. Therefore, the legally necessary condition that makes the claim actionable is the breach of the duty of fidelity, making C the strongest answer.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, cross-examination, the question asks about MOST LIKELY.

The correct answer is B: Direct exam Ml mi.

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

The Manual says admission-seeking interviews should be conducted only when:

There is reasonable probability the subject committed the act,

All other reasonable investigative steps are complete, and

“The interviewer can reasonably control the place, time, and subject matter of the interview.”.Therefore, Erica must ensure control of time, place, and content before scheduling.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about EXCEPT.

The correct answer is B: The taxpayer has filed for bankruptcy..

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

Both the Manual and CFE Prep guides emphasize that deleted files are recoverable until overwritten. Once overwritten, the original data cannot be retrieved:

“Deleted files are recoverable until they are overwritten because data is not erased… until overwritten. So, deleted files that have been overwritten generally are not recoverable.”

Other file types (deleted shortcuts, hidden files, etc.) can often be recovered, but overwritten files are lost permanently.

The Fraud Examiners Manual stresses that fraud examiners must never promise unconditional confidentiality, because findings often must be disclosed to management, auditors, or authorities. They can only offer “qualified confidentiality” (best efforts to protect identity, but with necessary limits). Therefore, option A is the most appropriate response.

Search-warrant requirements generally apply to government authorities, not private parties acting independently. The Fraud Examiners Manual explains that search warrants grant government authorities the right to search premises or property for evidence. It also states that investigations by private parties may be conducted without special authority when the examiner acts prudently, lawfully, and in good faith. Because Beau is a private-company investigator and is not acting as a government agent, he generally does not need a search warrant to search company property such as an employee workstation, subject to privacy laws and company policy. Option D is especially risky because involving law enforcement could convert the search into government action. Option C is not required.

Before disposing of evidence, a fraud examiner should consider the organization’s document retention policy and any legal duty to preserve evidence. A proper document retention policy identifies what records should be retained, how long they should be retained, and when destruction is permitted. However, destruction must stop when litigation, investigation, or legal document requests are reasonably anticipated or pending. The type of fraud, such as corruption or asset misappropriation, does not by itself determine whether evidence can be destroyed. Whether the evidence is digital or tangible affects preservation method, not the basic retention decision. Whether evidence would support a conviction is also not the examiner’s disposal standard. Evidence handling must follow retention rules, legal obligations, and counsel’s guidance.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, adversarial, inquisitorial, the question asks about BEST.

The correct answer is A: Adversarial process.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Fraud examiners should write reports with the assumption that the report might be reviewed outside the immediate investigation team, including by legal counsel, opposing parties, regulators, owners, investors, or members of the media. Therefore, reports must be accurate, objective, professional, and free from unnecessary speculation. Option A is incorrect because a fraud examination report does not legally confirm liability; courts or other authorized decision-makers determine liability. Option B is too broad because fraud examiners should avoid improper opinions, especially opinions on guilt or innocence, although limited expert opinions or recommendations may sometimes be appropriate. Option C is unsafe because reports can be disclosed through litigation, regulatory processes, or internal distribution. Thus, option D is the best answer.

Referring to the informant in the memorandum using the informant ' s initials

Best practice requires that informants be identified only by symbols (e.g., I-1, I-2), not by initials, to protect their identity. Cash payments are acceptable but must be accompanied by a receipt.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to administrative, the question asks about BEST.

The correct answer is C: Debarment.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Admission-seeking questions are used when the examiner has a reasonable basis to believe the subject committed the act and wants to obtain a legal admission of wrongdoing. The most effective question is one that assumes the conduct occurred and encourages the subject to explain it, rather than merely deny it. Option D is strongest because it directly focuses on Harsha’s conduct and is phrased as though the personal purchases have already been established. Options A and C are informational questions, not admission-seeking questions. Option B is a closed yes-or-no question and uses accusatory wording that can encourage a denial. In admission-seeking interviews, the examiner should use disciplined phrasing designed to move the subject toward explanation and admission.

Within CFE investigation guidance on data analysis, predictive approaches are framed as using analytical techniques (including statistical processes and machine learning) to identify patterns and outliers that can indicate fraud risk and, importantly, help detect a fraudulent situation earlier than traditional methods. Predictive analytics is not limited to one specific technology such as layered neural networks (A); neural networks can be one possible technique, but predictive analytics is broader than that. Option B describes robotic process automation (RPA)—software that imitates human actions to automate routine tasks—rather than predictive analytics. Option D describes artificial intelligence in a general sense (systems performing “human tasks” like perception and decision-making), which is also broader and not specific to predictive modeling. The most accurate description is therefore C: predictive analytics uses historical data along with statistical analysis and machine learning methods to build models that reflect patterns/trends and generate projections about likely future outcomes (e.g., predicting which transactions, vendors, employees, or accounts are higher-risk).

The Fraud Examiners Manual states:

“Duplicate testing is used to identify transactions with duplicate values in specified fields … fields such as cheque numbers, invoice numbers, and government identification numbers … searching for duplicates within these fields can help the fraud examiner find anomalies that merit further examination”.

This directly addresses Tony’s need to ensure no two invoices have the same number.

According to the ACFE Fraud Examiners Manual, Law Section, particularly in the Money Laundering chapter discussing International Anti-Money Laundering Efforts and the FATF Recommendations , financial institutions are required to file suspicious transaction reports STRs when they suspect that funds are the proceeds of criminal activity or are related to money laundering or terrorist financing.

The conduct described—purchasing bearer instruments with cash in amounts just below mandatory reporting thresholds—is commonly known as structuring. Structuring is a recognized money laundering technique designed to evade currency transaction reporting requirements. Under the FATF Recommendations, financial institutions must not rely solely on monetary thresholds to trigger reporting obligations. Instead, they are required to file a suspicious transaction report whenever there is reasonable suspicion of illicit activity, regardless of the amount involved.

A cash transaction report is typically triggered by transactions exceeding a specific monetary threshold, but structuring to avoid that threshold does not eliminate the reporting obligation. If employees suspect money laundering, the bank is obligated to file a suspicious transaction report with the appropriate authorities.

Therefore, the correct answer is that the bank is required to file a report of suspicious transactions because the employees suspect money laundering violations.

Data quality is important on both the inbound and outbound sides of any data transfer. Fraud examiners must ensure that the data received are complete, readable, accurate, and appropriate for the requested period and fields. They should also consider control totals, missing records, formatting issues, and whether the transfer process affected integrity. Option A is incorrect because many jurisdictions have data privacy laws governing collection, storage, disclosure, and transfer of personal data. Option B is wrong because interoperability matters even when a data sharing agreement exists; the receiving party must be able to read and use the data. Option C is not a necessary feature of every data sharing agreement. The best statement is that data quality must be ensured throughout the transfer.

The most likely claim is violation of the duty of care. Directors and officers generally owe fiduciary duties to act with reasonable care, diligence, and prudence in managing corporate affairs. Willa’s problem is inattentiveness: she fell behind on her board duties, and her failure to act likely allowed preventable shareholder losses. That fact pattern concerns failure to exercise adequate oversight and care. The duty of loyalty involves acting in the organization’s best interests and avoiding self-dealing, conflicts of interest, or improper personal benefit. The facts do not indicate that Willa acted for personal gain or against ACME’s interests intentionally. “Duty of transparency” and “duty of responsibility” are not the best fiduciary theories described here. Therefore, option B is correct.

“Introductory questions should be designed to establish rapport… Interviewers usually establish rapport by spending a few minutes with the respondent in an informal dialogue”.

Jason’s small talk about sports and compliments is clearly rapport building

Isla is attempting to create rapport. Introductory questions should help establish trust, cooperation, and communication before the examiner moves into the fact-gathering portion of the interview. The Fraud Examiners Manual describes rapport as a harmonious relationship that fosters cooperation and trust. Asking a simple, friendly question about coffee or tea is casual conversation designed to make Doug comfortable and create common ground. Option A is too broad because the facts do not show she is structuring a questioning pattern. Option B is different; the interview theme states the general purpose of the interview. Option D is incorrect because the question is not meant to distract Doug, but to relax him and encourage open communication.

Wire transfer records include specific transactional details:

“The information contained on a wire transfer generally will include… the amount of the transfer, the date, the name of the sender, the routing number of the originating bank, the identity of the beneficiary, [and] the routing number of the recipient bank”.

They do not list things like the type of money order, customs port of entry, or government ID numbers (CFE Prep explicitly states that recipient government IDs are not typically included).

The records are digital evidence because Myra discovered them during a review of records stored on a computer hard drive. Digital evidence consists of information stored or transmitted in electronic form and can include documents, logs, spreadsheets, emails, databases, metadata, and other computer-based files. Although the content might function like a document, its form and preservation issues make it digital evidence. This distinction matters because digital evidence is more volatile than traditional paper documents and must be collected, preserved, imaged, and analyzed using proper forensic procedures. Analog evidence is not the correct term, and “virtual evidence” is not the standard classification used in the CFE materials. Therefore, the best answer is digital evidence.

When the objective is asset recovery through civil legal action, the practical value of litigation depends heavily on collectability—whether a favorable judgment can be satisfied. CFE guidance on tracing and asset recovery highlights that tracing engagements are commonly undertaken specifically to determine whether a potential defendant can pay a court-ordered sum if judgment is entered, and to locate assets that can be used to satisfy a judgment. If the defendant is judgment-proof or has insufficient reachable assets, the legal action might be economically irrational even if liability is strong. While statute of limitations (D) is legally important, the question asks what is most important before moving forward with a recovery action; from an investigative and recovery perspective, the threshold question is whether there are assets to recover or a realistic path to enforcement. Past arrests (B) do not answer the recovery feasibility question. Option C misframes the decision: legal actions proceed based on evidence and counsel’s assessment, but recoverability often drives whether to invest in litigation. Therefore, assessing whether the defendant has sufficient money or property to satisfy a judgment is the most important preliminary question.

The electronic device in option B is most likely to have its authenticity questioned because the storage area is only described as accessible to company employees generally, not restricted to authorized custodians or monitored through a clear chain of custody. Authenticity requires showing that evidence is what it purports to be and that it has not been materially altered. The ACFE materials explain that chain of custody documents who possessed the evidence, how it was stored, what was done with it, and how it left each custodian’s control. Options A, C, and D describe stronger safeguards, such as restricted access, monitoring, access logs, password protection, secure storage, or formal transfer. Option B creates a greater risk that unauthorized access or alteration could be alleged.

Best practices for admission-seeking interviews emphasize building rapport, presenting a morally acceptable reason, and maintaining empathy to encourage a confession. The manual states examiners should “present a morally acceptable reason for the suspect’s behavior” and avoid creating hostility . Minimizing empathy is counterproductive and not recommended.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, bustout, concealment of assets, the question asks about MOST COMMON.

The correct answer is D: Concealment of assets.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

“Even when a victim refers a fraud case for criminal prosecution, the government will usually not disclose the contents of nonpublic records with the victim during the investigation”.

Thus, option D is most accurate.

“Opinions or conclusions concerning the guilt or innocence of a fraud suspect is outside the scope of a fraud examination and should never be included in a report”.

Functions of a fraud examination report include presenting evidence, corroborating facts, and supporting credibility. Communicating the examiner’s qualifications to provide opinions is not a function.

Therefore, option D is not a function of a fraud examination report.

The Financial Action Task Force (FATF) Recommendations, as cited in the Fraud Examiners Manual, require enhanced due diligence in correspondent banking relationships. Specifically, banks must “avoid correspondent banking with shell banks” and ensure the foreign institution is properly licensed and regulated.

This means financial institutions must confirm that the foreign correspondent bank holds the necessary licenses or certifications to operate legitimately.

Other options (branch addresses, tax statements, or client loan profiles) are not mandated under FATF’s correspondent banking due diligence requirements. The most critical factor is verifying the correspondent institution’s legal authorization (licenses/certifications) to prevent money laundering and terrorist financing.

CFE interview guidance identifies verbal behaviors that often appear when an interviewee is being deceptive. A strong indicator is answering with a question rather than providing a direct denial. When asked directly about misconduct, truthful respondents commonly give a straightforward “no” and may add clarifying facts. Deceptive respondents sometimes deflect, buy time, or attempt to regain control by replying with a question such as, “Why would I do something like that?” This response avoids the substance of the allegation and shifts the burden back to the interviewer, potentially probing how much evidence the interviewer has. While Options A, B, and D are denials (and any denial could be untrue), the CFE materials specifically flag “answering with a question” as a frequent deceptive tactic because it functions as diversion and can indicate discomfort with issuing a clear denial. Therefore, among the choices presented, Option C is most consistent with a deceptive verbal response pattern described in CFE interview methodology.

“In jurisdictions that regulate credit information and personal data, a fraud examiner will generally need a legally acceptable reason for accessing such information from third parties… some common circumstances include when: the individual has given consent”.

Thus, with the individual’s consent, Leslie could obtain the report.

This question tests your knowledge of Uncategorized.

the question asks about his illicit assets, James deposits $9,000 each day.

The correct answer is D: Structuring scheme.

This question tests your understanding of key fraud examination concepts and legal principles.

Admission-seeking interviews are designed:

“to obtain a legal admission of wrongdoing… also to distinguish innocent individuals from culpable ones and to secure a signed written statement”.

The primary purpose is obtaining a valid confession.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is A: True.

This question tests your understanding of key fraud examination concepts and legal principles.

The correct answer is C. Structuring scheme. The CFE Manual explains that structuring occurs when a person breaks up money into smaller transactions specifically designed to avoid regulatory reporting requirements or internal financial-institution controls. It notes that many countries require reporting of currency transactions above a certain threshold, such as more than $10,000, and that a common red flag is a customer making many deposits just under the reporting threshold.

That is exactly what Tammy is doing. Her repeated deposits of $9,000 to $9,900 over several weeks strongly suggest that she is intentionally keeping each transaction below the reporting threshold to avoid government scrutiny. Option D, integration, refers to a later laundering phase in which illicit money is reintroduced into the economy as apparently legitimate funds. Options A and B do not match this conduct. In money laundering cases, fraud examiners are trained to identify transaction patterns that appear deliberately calibrated to evade mandatory reporting rules. Repeated cash deposits just below a legal threshold are one of the clearest examples. Therefore, Tammy is most likely engaged in a structuring scheme, making C the correct answer.

Covert operations can be useful, but they are among the riskiest investigative techniques. They require careful planning, legal review, and appropriate precautions. The Fraud Examiners Manual warns that mistakes in covert work can cause irreparable damage to the investigation, physical harm to the investigator, and reputational, financial, or legal consequences. Therefore, option B is the most accurate statement. Option A is incorrect because poor planning can seriously damage the investigation. Option C is too broad because investigators are not automatically protected from legal or reputational consequences. Option D is also incorrect because covert operations should generally be used with extreme care and often as a last resort, not automatically alongside conventional methods.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about CDD, FATF.

The correct answer is B: False.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Conspiracy generally requires proof that the defendant entered into an agreement with at least one other person to commit an illegal act, knew the purpose of the agreement, intentionally joined it, and that at least one conspirator committed an overt act in furtherance of the conspiracy. Option A states one of the core elements. Option B is incorrect because the government generally does not have to prove that each conspirator knew every objective or the identity of every participant. Option C is too broad because not every conspirator must personally commit the overt act; at least one conspirator must do so. Option D is incorrect because a conspiracy agreement does not have to be documented in writing or electronically.

The Fraud Examiners Manual notes:

“Management of an organisation should ensure that the organisation has a proper and effective document retention policy in place… An effective policy requires clear retention protocols… and should be immobilised due to a pending investigation or foreseeable litigation.”

Thus, the existence of a document retention policy is a critical factor in deciding how to dispose of evidence.

The most likely claim is intrusion into an individual’s private matters, also known as intrusion upon seclusion. This civil wrong occurs when someone intentionally intrudes into an area where another person has a reasonable expectation of privacy and the intrusion would be highly offensive or objectionable to a reasonable person. Vasquez’s personal workbag is more private than ordinary company property, and the facts state that Ben lacked legitimate interest or authority. Public disclosure of private facts requires publicity of private information, which is not described. Defamation requires a false statement harming reputation, and false accusations are not the issue. Because the claim arises from an improper search of personal property where privacy was reasonably expected, option D is correct.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, administrator, the question asks about TRUE, his employer ' s financial affairs Assuming the administrator has all of the powers recommended in the World Bank Principles for Effective Insolvency and Creditor/Debtor Regimes (World Bank Principles) which of the following is TRUE.

The correct answer is C: The administrator may compel Ellis to provide the information despite Ellis ' s relationship to the business.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

In civil law systems, appellate review is generally broader than in common law systems. Appellate courts in civil law jurisdictions may review both legal and factual determinations, and they may obtain additional witness testimony, gather new documentary evidence, or obtain new expert opinions. This differs from many common law systems, where appeals are usually focused on legal errors and the appellate court generally does not retry the facts. Option A describes the common law approach more closely. Option B is incorrect because appellate courts are not required to modify every trial court decision; they may affirm, reverse, remand, or modify depending on the case. Option D is also incorrect because civil law appellate courts are not limited to factual issues only.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, IOSCO, the question asks about the International Organization of Securities Commissions (IOSCO) is TRUE, TRUE, IOSCO.

The correct answer is B: IOSCO is comprised of commissioners and administrators responsible for regulating securities and administering securities laws in their countries..

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

The correct answer is A. The primary purpose of expert testimony is to help the fact finder understand the evidence or determine a fact in issue by applying specialized knowledge. Federal Rule of Evidence 702 states that an expert may testify when the expert’s scientific, technical, or other specialized knowledge will help the trier of fact understand the evidence or determine a fact in issue. That captures the classic role of an expert witness in fraud-related litigation.

Option B is incorrect because deciding the admissibility of evidence is generally a matter for the judge, not the expert witness. Option C is also incorrect because experts ordinarily are not called to opine on whether another witness is truthful; credibility determinations are for the fact finder. Option D is incorrect because experts generally do not decide or directly state whether the accused is guilty; that is the function of the judge or jury after considering all admissible evidence. In CFE practice, expert testimony is valuable because complex accounting records, financial analyses, loss calculations, and fraud patterns often require explanation beyond ordinary lay understanding. Therefore, the best statement of Levi’s primary purpose is that he will help the fact finder understand evidence through specialized knowledge, making A the correct answer.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about BEST.

The correct answer is B: When litigation has started.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Nonpublic records include banking, tax, credit, phone, credit card, and health care records.

Business entity organisational filings (corporate constitutions, articles of incorporation) are generally public records and can be obtained from the government.

Therefore, reviewing a company’s business filings does not require access to nonpublic records.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about civil actions in most jurisdictions is CORRECT, CORRECT.

The correct answer is B: Civil actions begin with the filing of a pleading, usually in the jurisdiction where the defendant resides or where the claim originated..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

False imprisonment occurs when one person restrains another person’s physical liberty without consent or legal justification. In workplace interviews, liability can arise if an interviewer locks the interview room, blocks the exit, refuses to allow the employee to leave, or otherwise creates involuntary confinement. Jordan wanted to leave, but Sam locked the door and continued the interview. If a trier of fact concludes that this restrained Jordan against his will and without legal justification, Sam would likely lose. Option A is incorrect because ignorance of the law is not a reliable defense. Option B misstates the issue; the key issue is unlawful restraint, not failure to explain cooperation duties. Option C is wrong because acting for the company does not excuse unlawful confinement.

The correct answer is B. Mail fraud. Mail fraud generally involves using the postal system in furtherance of a scheme to defraud. In this question, Cindi used the U.S. mail system to send fraudulent advertisements to potential victims. That use of the mail is the key jurisdictional hook that would most likely support federal prosecution. The fact that the victims are located in China does not change the central point that the U.S. mail system was used as part of the fraudulent scheme.

Option A, wire fraud, would apply more naturally if the scheme were carried out by electronic communications such as telephone calls, emails, internet transmissions, or other interstate or international wire communications. Option C, communications fraud, is not the standard offense name typically used in this context. Option D, interstate fraud, is also not the most precise legal label for prosecution under these facts. In fraud law, prosecutors often rely on statutes such as mail fraud and wire fraud because they are broad and effective tools for prosecuting deceptive schemes. Since the question specifically states that Cindi used the U.S. mail system, the most likely basis for the charges would be mail fraud, making B the correct answer.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, the question asks about the core concepts in this area.

The correct answer is A: True.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

The correct answer is B. False. The key issue is that the legal protection against unreasonable search and seizure generally applies to government action, not purely private conduct. In this question, Charlie is an investigator employed by Victorian Inc., a private company, and he acted at the direction of company management rather than as a government officer. Therefore, the normal constitutional requirement for a search warrant would generally not apply to his workplace search.

This conclusion is strengthened by the fact that the item searched was Lorna’s company-issued laptop, which is employer property and usually carries a lower expectation of privacy than a purely personal device. In workplace-fraud matters, private employers are often permitted to examine company systems, devices, and records, particularly when investigating suspected misconduct. The later fact that Charlie turned the evidence over to law enforcement does not automatically transform his original search into a government search requiring a warrant, unless he was acting as an agent of the government when the search occurred.

Accordingly, Charlie did not violate Lorna’s rights merely by failing to obtain a search warrant before searching the employer’s laptop. That is why the statement is false.

The correct answer is C. The CFE Manual states that the UK Bribery Act has a broader application than the FCPA because it reaches commercial bribery, meaning bribery in the private sector, not just bribery involving foreign public officials. The Manual specifically explains that, unlike the FCPA, the UK Bribery Act includes a general commercial bribery offense and also creates a corporate offense for failure to prevent bribery.

Option A is incorrect because the UK Bribery Act does not contain the same kind of explicit exception for facilitating payments associated with the FCPA framework. Option B is also incorrect because the Manual expressly notes that an anti-corruption program sufficient for FCPA compliance might still be insufficient for UK Bribery Act compliance due to the broader scope of the UK law. Option D is incorrect because both the FCPA and the UK Bribery Act criminalize bribery of foreign public officials in connection with international business transactions; that is not a point of difference. Therefore, the most accurate statement is C, because the UK Bribery Act goes further by criminalizing bribery in the private sector as well.

Credit reports can sometimes be obtained legally if proper consent or a recognized legal basis (such as employment background checks, extension of credit, or legal proceedings) exists. The Manual notes:

“Access to personal credit data may be permitted when the individual has given consent or when required for employment, credit, or legal reasons”.

Thus, it is not true that credit data can never be obtained—circumstances exist where it can be done lawfully.

Lay testimony, also called factual testimony, is based on what the witness personally saw, heard, did, or otherwise experienced. A lay witness helps the fact finder understand facts by providing firsthand observations, not specialized opinions. Expert witnesses, by contrast, may provide opinions based on specialized education, training, skill, or experience. Option A describes expert testimony. Option C is improper because witnesses generally should not express opinions on the defendant’s guilt or innocence. Option D also goes beyond the usual role of a lay witness because determining validity or evidentiary weight is generally the role of the court or fact finder, unless expert testimony is properly admitted. Therefore, Bob’s primary purpose is to provide factual observations.

The attorney is using a bias attack. In cross-examination, opposing counsel might try to show that an expert witness’s work, report, or opinion is not independent, but instead was influenced by the party that hired or paid the expert. Suggesting that Llewellyn was directed to reach a particular conclusion attacks impartiality and implies that the testimony was purchased or shaped to favor the hiring party. Contradiction focuses on inconsistent statements or conflicts with prior testimony or documents. Myopic vision focuses on excessive attention to one area while ignoring another. A sounding board technique attempts to use the witness to support the opposing side’s theory. Because the question attacks Llewellyn’s neutrality, answer A is correct.

The Manual emphasizes that interviews should be held where the respondent feels comfortable and secure, not threatened:

“When possible, the interview should be held in a venue where the subject will feel comfortable and secure”.

Holding it in an uncomfortable setting is counterproductive and contrary to best practices.

A financial record showing that an asset has disappeared or has been diverted into an unknown account is a strong red flag of illicit transactions. Tracing illicit transactions focuses on identifying how funds or assets moved from their source to their final disposition, including whether assets were hidden, transferred, converted, or diverted. Option B suggests unexplained movement or concealment, which is directly relevant to asset tracing. Option A is not necessarily suspicious because low ATM activity might simply reflect normal banking habits. Option C is too vague because withdrawals for inconsistent amounts can occur for legitimate reasons. Option D is unclear and does not identify a recognized red flag unless the bearer instruments themselves are tied to concealment. Therefore, option B is the best answer.

The Fraud Examiners Manual advises that fraud examiners should preserve and organize evidence, and one of the key steps is to establish a document database early. This allows examiners to track documents, index them, and link them to findings. Dusting for fingerprints, leaving originals behind, or organizing solely in chronological order are not standard best practices .

Fraud examination is the process or methodology of resolving allegations or signs of fraud from inception to disposition. The ACFE materials describe fraud examination as a structured, legal, evidence-based process that moves from general information to specific conclusions. It includes obtaining evidence, reporting findings, testifying when necessary, and assisting in fraud prevention and detection. Fraud response is broader organizational action after suspected fraud arises. Fraud deterrence focuses on discouraging fraud through controls, ethics, governance, and consequences. Fraud management is not the precise term used for this investigative methodology. Because the question asks for the methodology that resolves fraud allegations from beginning to end and also assists with prevention and detection, the correct answer is fraud examination.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about examinations of expert witnesses in most inquisitorial jurisdictions is accurate.

The correct answer is D: The parties are often allowed to question the expert ' s methods and analysis.

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

CFE Prep clarifies entrapment:

“Entrapment occurs when law enforcement induces a person to commit a crime that he is not predisposed to commit… It is imperative that adequate predication exists before the operation is commenced. For example, if the officer received a reliable tip, that could serve as adequate predication.”

Here, the officer acted on a reliable tip, so the entrapment claim would fail.

The manual defines:

“Open questions are those worded in a way that makes it difficult for the respondent to answer ‘yes’ or ‘no.’ The typical open question calls for a monologue response and can be answered in several different ways.”

Example given: “Please tell me about your job.”

Allison’s question (“Why did you choose to do business with that vendor?”) invites explanation, not a yes/no response — making it an open question.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about examinations of expert witnesses in most inquisitorial jurisdictions is accurate.

The correct answer is B: Both the parties and the judge may question an expert ' s credibility..

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, common law, the question asks about MOST ACCURATE, fact finders in criminal trials in common law jurisdictions is MOST ACCURATE.

The correct answer is C: A judge is typically responsible for factual findings.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to misrepresentation, conspiracy, obstruction, the question asks about MOST LIKELY.

The correct answer is A: Obstruction of justice.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The best introduction is truthful but nonthreatening. The Fraud Examiners Manual explains that interviewers should introduce themselves, generally provide their name and company, avoid unnecessary titles that create fear, establish rapport, and state the interview purpose in general terms. Option A is accurate because Ralph truthfully identifies himself as an investigator hired by Pippy Inc. and asks for help gathering information about an issue. Options B and C unnecessarily use the title “Certified Fraud Examiner” and refer to “possible fraud,” which could make the employee defensive or overly cautious. Option D is inaccurate because Ralph was hired by Pippy Inc.; it states that he works for Pippy Inc., which might mislead the interviewee. Therefore, option A best follows interview theory.

The Fraud Examiners Manual makes clear:

“Fraud examiners should never offer opinions regarding guilt or innocence. Reports must be factual, objective, and free from speculation. Statements implying guilt are improper.”

Thus, while it is proper to note contradictions, evidence, or control weaknesses, it is improper to declare the suspect guilty.

Fraud examiners must not opine on guilt, innocence, intent, or disposition. Reports should focus on facts and expert conclusions within their field. The Manual stresses:

“The fraud examiner should refrain from expressing opinions as to the guilt or innocence of any person or entity. Such conclusions are reserved for the trier of fact” (Fraud Examiners Manual, Reporting section).

Options A, B, and D relate to accounting and internal control assessments, which fall within an accounting expert’s scope. Only C is improper because it speculates about the suspect’s character or intent, which is outside the CFE’s role.

The reporting and testifying phase of a digital evidence investigation is where the examiner presents the results of the analysis fairly, objectively, and in a way that supports the reliability of the process. The purpose is not to prove guilt at all costs, but to explain what was done, what was found, and why the evidence and analysis are valid. Option B is correct because digital evidence must be presented in a manner that confirms the soundness of collection, preservation, processing, and analysis. Option A is too conclusory and improperly focuses on proving guilt. Option C is too narrow because live demonstrations are not the primary goal. Option D is educational rather than evidentiary.

Link analysis is described as a visual analytic tool that:

“Tracks the movement of money,”

“Demonstrates complex networks,”

“Helps identify indirect relationships with several degrees of separation,” and

“Discovers communications, patterns, and trends.”

It does not display financial ratios—that belongs to traditional financial statement/ratio analysis.

The Fraud Examiners Manual stresses confidentiality:

“To preserve confidentiality, investigators should avoid transmitting confidential information by email or other electronic means whenever possible, as these are susceptible to interception or unauthorized access.”

Suspending employees or blanket bans on discussion are not best practices. Confidentiality is preserved primarily by secure communication and controlled access to information.

A best practice when collecting and organizing documents is to establish a document database early in the investigation. A document database helps the examiner track what was collected, where it came from, who provided it, when it was obtained, and how it relates to issues in the case. It also supports indexing, retrieval, review, and later report preparation. Option A is poor practice because originals and working copies should be controlled carefully and not mixed in a way that risks alteration or loss. Option B may be useful for some documents, but chronological order alone is not sufficient. Option D is inefficient and not the best general practice. Therefore, establishing a document database early is the strongest answer.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about COD, FATF.

The correct answer is A: True.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The Fraud Examiners Manual advises avoiding prematurely alerting perpetrators. Recommended methods include:

“Conducting investigations at times when the suspect is not present (such as nonbusiness hours)”.

This avoids tipping off suspects.

The Fraud Examiners Manual states:

“The expenditures method works best when the subject spends illicit income on consumables (e.g., travel and entertainment), because when the subject spends the illicit income, it will not cause an increase in net worth.”

CFE Prep confirms:

“The expenditures method … is best used when the subject spends illicit income on consumables (such as travel and entertainment) that would not cause an increase in net worth.”

Thus, the correct answer is A.

In jurisdictions that allow criminal bargaining agreements, the prosecution generally has discretion to decide whether to offer a bargain. The Fraud Examiners Manual explains that bargaining agreements occur when a defendant agrees with prosecutors to plead guilty or provide a confession in exchange for lesser charges, a reduced sentence, or another negotiated resolution. Such agreements are used to make criminal justice processes more efficient by reducing the need for full trials. Judges may need to approve or accept the final agreement depending on local law, but the offer itself usually comes from the prosecution. Defense counsel may request or negotiate a bargain, but counsel does not control whether one is offered. Therefore, option B is the most accurate statement.

After alibis are diffused, suspects may become quiet, withdrawn, or even cry. This often indicates they are considering confession. At this point, the interviewer should present an alternative question, forcing a choice between two answers that both imply guilt, thus leading toward a benchmark admission.

The correct answer is B. Sounding board. In expert-witness cross-examination, the “sounding board” method is used when counsel asks the expert to agree with a series of basic or already accepted facts so the lawyer can repeat favorable points through the witness. The technique is not mainly about exposing inconsistency or prejudice. Instead, it uses the witness to reinforce the examining party’s theory of the case by obtaining repeated agreement on foundational matters. Secondary CFE prep materials describe sounding board in this same way: the witness is used to generally agree with the questioner’s position or with favorable facts already established.

The other options do not fit as well. Contradiction would involve trying to show the witness has said something inconsistent. Bias aims to show the witness is not objective, perhaps because of fees or relationships. Myopic vision usually refers to suggesting the expert’s perspective is too narrow or one-sided. Here, Nancy is simply being led to agree with basic, favorable facts, which is the classic sounding-board approach. Therefore, B is the most accurate answer.

The Fraud Examiners Manual explains that recommendations in a report are optional, not mandatory. When included, they should cover remedial measures such as control reviews or increased security.

“Finally, the fraud examiner might decide to include a section for recommendations. The recommendations section should contain remedial measures or specific recommendations for follow-up actions … This section is optional”.

Therefore, C is correct. Options A and D are incorrect because recommendations are not required in every report, and B misstates its purpose.

During admission-seeking interviews, when suspects persist with denials or alibis, examiners are trained to diffuse them. Accepted techniques include:

Discussing testimony of witnesses,

Displaying physical evidence, and

Downplaying the strength of evidence.

However, manuals caution that discussing a suspect’s prior deceptions is not an effective or recommended method to diffuse alibis. It risks confrontation and may damage rapport, reducing chances of confession.

Therefore, option C is the exception.

The correct answer is C. Whether an employee is covered by a union contract can significantly affect the employee’s rights during an internal investigation because unionized employees may have representation rights during investigatory interviews. In the United States, the National Labor Relations Board explains that employees in unionized workplaces can have Weingarten rights, meaning they may request union representation during an interview the employee reasonably believes could lead to discipline.

That makes a union or collective bargaining agreement far more relevant to investigation rights than the other choices. Option A, the employee’s length of service, might matter in some human-resources settings but does not usually determine the employee’s legal investigation rights. Option B, a noncompetition agreement, concerns post-employment competition restrictions rather than representation, questioning, or procedural protections during an internal inquiry. Option D, the likelihood of guilt or innocence, is likewise not what determines the employee’s rights; legal protections apply based on the governing employment relationship and applicable labor law, not the employer’s suspicion level. For fraud examiners, this distinction matters because interview procedures can change depending on whether the employee is unionized or otherwise contractually protected. Therefore, the factor most likely to affect the employee’s rights is whether the employee has signed a union contract.

“Credit card records… show card purchasing limits, previous payment history, account balance, when and where the subject has travelled, restaurants frequented, and assets acquired. In short, these records show the movements and habits of the person”.

Therefore, B is correct.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is C: The investment is in a common enterprise..

This question tests your understanding of key fraud examination concepts and legal principles.

The best answer is B. Probation. In the CFE Law section on criminal justice, probation is identified as one of the sanctions that a court may impose after a defendant has been found guilty of a crime. The facts in this question match probation because Ella has already been convicted, but instead of immediately serving jail time, she remains in the community under supervision and must maintain good behavior. That is the classic structure of probation: a convicted offender is allowed to remain in the community, subject to conditions and oversight, rather than being incarcerated.

The other options do not fit as well. A deferred prosecution agreement generally concerns prosecutors agreeing to suspend or avoid prosecution—often in the corporate context—if specified conditions are met, so it applies before final conviction and is not the same as post-conviction community supervision. A determinate sentence refers to a fixed term of incarceration, while an indeterminate sentence involves a range rather than a fixed duration. Neither term specifically describes supervised release in the community in lieu of jail. Because Ella’s punishment is a suspended custodial consequence combined with supervision and a requirement of good conduct, probation is the most accurate choice.

The Fraud Examiners Manual explains:

“Each transaction on a blockchain ledger is recorded with a cryptographic address… by analyzing these addresses, fraud examiners can sometimes establish patterns and connections that identify users or link them to criminal activity”.

Perjury generally involves knowingly making a false statement under oath or affirmation about a material or relevant matter in an official proceeding. The best answer is C because the false statement must be relevant or material to the proceeding. Option A is too broad because statements to opposing counsel are not automatically perjury unless made under oath in an authorized proceeding, such as a deposition, and satisfy the other elements. Option B is incomplete because not every false statement in court establishes perjury; the statement must be made knowingly, under oath, and concern a relevant or material matter. Option D is incorrect because statements to one’s attorney before litigation are not perjury. Therefore, relevance to the proceeding is a required element.

To confirm ownership of a building, real estate and permit records are most useful. The Manual notes that real property records and related permits identify the owner, provide legal descriptions, and show improvements such as construction of commercial buildings. Court or voter registration records would not typically establish property ownership.

The correct answer is A. The CFE Manual explains that to recover for intentional infliction of emotional distress, the plaintiff must prove that the defendant engaged in extreme and outrageous conduct, that the defendant acted intentionally or recklessly, and that the victim actually suffered emotional or mental distress as a result of the defendant’s conduct. These core elements match options B, C, and D.

There is no general requirement that the distress must have lasted for at least two years. That time-based condition is not one of the recognized elements listed in the CFE Law section. The Manual instead focuses on the nature of the conduct and the causal connection between that conduct and the victim’s injury. It also notes that the conduct must be sufficiently outrageous to exceed the bounds tolerated by civilized society and that mere insults or ordinary upset are not enough. Additionally, the Manual emphasizes that actionable claims require proof of serious, visible, and provable harm. Still, none of those requirements impose a fixed minimum duration such as two years. Accordingly, A is the only choice that is not a required element of this common law tort.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is A: Fidelity.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about LEAST ACCURATE, front businesses as a method of laundering money is the LEAST ACCURATE.

The correct answer is A: A red flag of a front business is the observation of a large number of customers during peak operating hours.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The Manual and Prep Guide state:

“Before conducting a covert operation, it is essential that the basis for the operation be committed to writing, preferably in a memo. The memorandum should clearly state: the information upon which the covert operation will be based; the information that is expected to be gained from the operation; the identities of suspects, if known; operatives under the fraud examiner’s care, custody, or control. Confidential sources’ identities should not be disclosed.”

Thus, expected information belongs, but confidential source identities must not

A custodial arrest does not occur simply because a suspect is being questioned by a law enforcement officer. Under the CFE Law topics, the controlling issue is whether the person is in custody, not whether questioning has started. The Manual distinguishes between ordinary questioning and custodial interrogation. It explains that custodial interrogation refers to guilt-seeking questioning initiated by law enforcement officers after a person has been taken into custody or otherwise deprived of freedom in a significant way. A person is considered in custody when the individual is under arrest or is not free to leave.

This means that questioning alone does not automatically create a custodial arrest. For example, if officers ask questions during a noncustodial interview and the person is free to end the encounter, that situation is generally not treated as custodial arrest. In fraud examinations, this distinction is important because constitutional safeguards associated with custody apply only when the legal threshold for custody has been met. Therefore, the statement is false because it incorrectly equates being questioned with being in custody or under arrest, which are not the same under CFE Law principles.

The employee could raise an entrapment defense. Entrapment occurs when law enforcement officers or government agents induce a person to commit a crime that the person was not previously predisposed to commit. The facts state that Mari, a law enforcement officer, posed as a salesperson, offered a kickback, and eventually persuaded the employee to accept after an initial rejection. Those facts support an argument that the criminal act was induced by government conduct. Collusion involves agreement among parties to commit wrongdoing, but it is not the defense described here. Coercion involves compulsion or threats, which are not stated. Fraudulent misrepresentation concerns false material statements, not inducement by law enforcement. Therefore, option C is correct.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is A: Overstate revenues.

This question tests your understanding of key fraud examination concepts and legal principles.

Fraud examiners should not promise absolute confidentiality to informants because legal, organizational, or prosecutorial duties might require disclosure later. The proper response is to qualify any confidentiality assurance and explain that all reasonable attempts will be made to protect the informant’s identity, but no guarantee can be made. Option D best reflects this rule. Options A and B are incorrect because they promise confidentiality too strongly. Even corroboration does not ensure that the informant’s identity can remain secret. Option C is also too broad because disclosure to executive leadership is not automatically required in every case. The examiner must protect confidentiality where possible while avoiding promises that cannot be honored. This protects both the investigation and the examiner’s professional credibility.

The Fraud Examiners Manual explains that rather than drafting an exhaustive list of questions, the interviewer should:

“formulate a brief outline of key points to discuss during the interview”.

This helps organize thoughts while allowing flexibility.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is B: False.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The Fraud Examiners Manual and CFE Prep Guide explain that tracing loan proceeds is a key investigative tool, but its scope is limited. Specifically, it helps determine:

if proceeds were deposited into hidden accounts,

if hidden accounts were used for loan payments, and

if loans were secured by hidden assets or unknown witnesses.

However, the manuals do not state that tracing loan proceeds can identify internal control weaknesses. That is a different aspect of fraud examination, often addressed through audit procedures or control assessments.

Thus, option D is NOT true.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about large cash transactions with customers as provided by the Financial Action Task Force (FATF) Recommendations, which of the following transactions would require a report to be filed with the government, FATF.

The correct answer is C: A single cash purchase of casino credits for a sum that is above the jurisdiction ' s designated threshold..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

A memorandum recording a whistleblower tip is a written record. The Fraud Examiners Manual defines documentary evidence as evidence “presented in the form of documents such as memoranda, contracts, emails, or other records”. Testimonial evidence comes from oral statements; here, the memorandum itself is the evidence, so it is documentary.

The correct answer is A. A fraudulent conveyance. The CFE Manual states that debtors often attempt to conceal assets by transferring them to another person or company, and a transfer is considered a fraudulent conveyance if its purpose is to hinder, delay, or defraud a creditor. In this question, Bob transferred one of the company’s luxury vehicles to his wife just one week before the business filed for bankruptcy. That timing strongly suggests an attempt to move valuable property out of the reach of creditors before the bankruptcy estate is formed.

Option B is too broad because “fraudulent bankruptcy” is not the specific scheme described. Option C is not the standard label used in the Manual for this kind of transfer. Option D, a planned bustout, refers to a different scheme involving building up credit with suppliers and then collapsing the business without payment. The facts here center on the transfer of an asset to a related party to keep it away from creditors, which is the classic definition of a fraudulent conveyance under the CFE Law materials. Accordingly, A is the most accurate answer.