Try and practice the latest ACFE : CFE-Fraud-Investigations-and-Legal-Issues real questions & answers

Jackson, a digital forensic examiner for a government agency, is conducting a criminal investigation into the alleged embezzlement of funds from the government ' s Welfare Department (WD). Ginny. a WD employee, is the prime suspect. Jackson obtains a court order authorizing him to seize Ginny ' s personal computer for forensic examination. Which of the following is the MOST ACCURATE statement?

• A. If Ginny ' s computer is running. Jackson should perform a graceful shutdown by turning it off using the normal shutdown process
• B. If Ginny ' s computer is running. Jackson may retrieve data from the computer directly via its normal interface if the evidence that he needs exists only in the form of volatile data
• C. If Ginny ' s computer is off. Jackson should not turn it on unless he plans to use an encryption device that can guarantee that the system ' s hard drive will not be accessed during startup.
• D. If Ginny's computer is off and Jackson needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer ' s normal interface.

Scarlett, a Certified Fraud Examiner (CFE), is conducting an admission-seeking interview of Plum, a fraud suspect. After Scarlett defused Plum ' s alibis. Plum became withdrawn and slowly began to slouch in her chair, bowing her head. What should Scarlett do now?

• A. Continue to display evidence that implicates Plum
• B. Discourage Plum from showing any emotion.
• C. Insist that Plum sit up straight in her chair
• D. Remain silent until Plum makes a confession.

Which of the following statements concerning examinations of expert witnesses in most inquisitorial jurisdictions is accurate?

• A. The parties are usually allowed to raise objections regarding the expert's biases.
• B. Only the judge is permitted to question the expert's methods or analysis.
• C. Both the judge and the parties determine how much consideration should be given to the expert's testimony.
• D. The parties determine the scope of the expert's testimony and the expert's authority to access certain items of evidence.

Elsa, a fraud examiner at ABC Corp., is interviewing Leah, a fraud suspect. Leah allegedly committed a fraud scheme that resulted in a loss of $200,000 for ABC. Elsa asks Leah directly whether she was involved in the fraud. Which of the following responses from Leah is MOST LIKELY an indication that she is being deceptive?

• A. "No, I did not commit fraud against ABC."
• B. "Why would I do something like that?"
• C. "No, I have never stolen anything from ABC."
• D. "I had no involvement with the scheme."

Thea is conducting a fraud examination for a company and suspects one of the company ' s vendors (a one- person operation) of fraudulent billing. Thea wants to obtain a copy of the suspect individual ' s credit report and personal data from a third-party information broker. If Thea works in a jurisdiction that regulates the distribution of personal credit information, she cannot obtain the suspect ' s personal credit data under any circumstances.

• A. False
• B. True