Tested Material Used To CFE-Investigation Test Engine Exam Questions in here [Oct-2021]
Penetration testers simulate CFE-Investigation exam PDF
NEW QUESTION 11
Shane, a Certified Fraud Examiner (CFF) is investigating Larsen, who is active on various social networking sites. Shane wants to search and extract information from Larsen s social media postings so that it can be used in court as evidence. Which of the following is the MOST ACCURATE statement regarding what Shane should do when conducting a social media investigation of Larsen?
- A. Shane should preserve the Information from the social networking sites so that it can be established as authentic if used in court.
- B. Shane should email himself the links of the postings so that he can retrieve them later.
- C. Shane should preserve the information by saving the links of ate postings in his 'bookmarks "
- D. Shane should conduct a forensic shutdown of his computer to preserve the metadata in the social networking sites.
Answer: A
NEW QUESTION 12
Tonya, a suspect in a kickback scheme is being interviewed by Carlos, a fraud examiner As the interview progresses. Carlos notices that Tonya is exhibiting signs of stress such as repeatedly touching her face, crossing and uncrossing her legs and darting her eyes around the room. Carlos should conclude that Tonya's behavior is the result of deception.
- A. False
- B. True
Answer: A
NEW QUESTION 13
Foster a Certified Fraud Examiner (CFE), needs to obtain a copy of a picture that a former employee of Friendly Interior an interior design studio posted on the company's website three years ago. Unfortunately because the website has since been updated the picture is no longer available on the website. Which of the following resources should Foster consult to find an earlier version of the Web page he needs?
- A. The invisible Web
- B. The internet archives
- C. The deep Web
- D. The Library of Congress
Answer: B
NEW QUESTION 14
Which of the following is the MOST ACCURATE statement concerning the volatility, of digital evidence?
- A. Digital evidence a more volatile than tangible evidence because digital evidence is subject to claims of spoliation, whereas tangible evidence is not.
- B. Digital evidence is more volatile than tangible evidence because digital data can be altered or destroyed more easily than tangible information
- C. If the integrity of digital evidence is violated It can be easily restored using widely available data restoration programs
- D. The failure to preserve the integrity of digital evidence will not affect its admissibility in a legal proceeding
Answer: D
NEW QUESTION 15
Which of the following data analysis functions is used to determine whether company policies are met by employee transactions such as verifying that traveling employees book their accommodations at approved hotels?
- A. The compliance verification function
- B. The Join function
- C. The correlation analysis function
- D. The gap testing function
Answer: A
NEW QUESTION 16
Which of the following is NOT a common use of public sources of information?
- A. Developing background information on a subject
- B. Obtaining an individual's credit records
- C. Corroborating or refuting witness statements
- D. Finding out about a person's lifestyle
Answer: B
NEW QUESTION 17
Which of the following are the classifications for the Corruption?
- A. Bribery, economic extortion, illegal gratuities and conflicts of interest
- B. Overbilling, bribery, bid-ridding and illegal gratuities
- C. economic extortion, bribery, illegal gratuities and corruption
- D. Corruption, bribery, economic extortion, conflicts of interest
Answer: A
NEW QUESTION 18
Which of the following is the LEAST accurate statement about seeing a computer for examination?
- A. When seizing a computer that is running, it is acceptable to review the files contained on the machine prior to seizing it.
- B. When seizing a computer for examination the seizing party should look around the area for passwords because many people leave passwords near their computers.
- C. Before removing a computer system from a scene for further analysis. It is important to document, the system's setup with photographs or diagrams
- D. When taking a computer for examination it the computer is off should remain off when It is removed.
Answer: C
NEW QUESTION 19
Which at the following situations would most likely requite access to nonpublic records to develop evidence?
- A. Obtaining a company's business filings
- B. Finding out where a person lives
- C. Reviewing an individual's personal mobile phone records
- D. Determining who owns a piece of real estate
Answer: A
NEW QUESTION 20
Delta, an Interviewer with little experience asks Sigma the respondent the following question. "Were you aware that the signature was forged and why didn't you tell anyone earlier?
This kind of question Is cased a______________ question.
- A. Free narrative
- B. Complex
- C. Double-negative
- D. Controlled answer
Answer: C
NEW QUESTION 21
Which of the following is TRUE about observing the reactions of interview subjects?
- A. The interpretation of an interview subjects reactions requires specific skills on the part of the interviewer
- B. Emotive words should be used early in the interview to observe the respondent s emotional reaction.
- C. The observation of body language is much less important than observing the words used by the subject
- D. To effectively observe reactions an Interviewer should alternate between sensitive and nonsensitive questions early in the Interview
Answer: B
NEW QUESTION 22
Which of the following is the MOST ACCURATE statement about how fraud examiners should approach fraud examinations?
- A. Fraud examinations should begin with general information that is known, starting at the periphery, and then move to the more specific details.
- B. In most examinations fraud examiners should interview those who are more involved in the matters at issue before interviewing those who are less involved.
- C. When conducting fraud examinations, fraud examiners should adhere to the me an sand-ends approach
- D. When conducting fraud examinations fraud examiners should operate under the assumption that the subjects are guilty
Answer: A
NEW QUESTION 23
II you are seizing a computer for forensic analysis why is it generally necessary to seize any copiers connected to it?
- A. Many copiers have Internal hard drives that right contain Information relevant to a fraud examination.
- B. Many copiers connect via parallel cables, which store and transmit copy job data.
- C. Most copters today are nonimpact copiers meaning that they store copied mages indefinitely
- D. Most copiers store, process and transmit data In a cloud environment
Answer: A
NEW QUESTION 24
Talia has been hired by SBS Inc, to implement a new data analysis program to search for warning signs of potential fraud within the company. Which of the following steps should Talia conduct first to most effectively use data analysis techniques for such an initiative?
- A. Identify the relevant data
- B. Build a profile of potential frauds.
- C. Cleanse and normalize the data.
- D. Monitor the data.
Answer: B
NEW QUESTION 25
Blue, a Certified Fraud Examiner (CFE) was interviewing Green a fraud suspect Although Green had a strong memory when responding to questions involving insignificant events, he began asking Blue w repeat almost every question that addressed important facts. If Green b Involved In the suspected misconduct he might be repeating the question to
- A. Distrect Blue and change the subject
Test Blue's ability to ask consistent questions - B. Ensure he understood the question
- C. Gain tine to frame Ns answer
Answer: C
NEW QUESTION 26
Martin is a fraud examiner. He contacts Dianne for the purpose of conducting a routine information-gathering interview Dianne says that she wants her coworker, Sheila, whom Martin also plans to Interview to be present during fie interview Martin should:
- A. Interview Dianne and Sheila together but bring in a second interviewer.
- B. Allow Sheila to be present but only if she does not speak
- C. Interview Dianne and Sheila separately
- D. Interview Dianne and Shell together by himself
Answer: C
NEW QUESTION 27
Pedro a Certified Fraud Examiner (CFF) is conducting an admission-seeking interview of Manuel a fraud suspect After Pedro diffused Manuel's alibis Manuel became withdrawn and slowly began to slouch in his chair, bowing his head and beginning to cry. What should Pedro do now?
- A. Demand that Manuel stop crying.
- B. Leave the room for a short time.
- C. Present an alternative question.
- D. Ask Manual to sit up straight.
Answer: C
NEW QUESTION 28
Which of the following is NOT an advantage to using link analysis in a fraud investigation?
- A. Link analysis visually displays financial ratio analysis
- B. Link analysis to an effective tool to demonstrate complex networks
- C. Link analysis allows the investigator lo discover patterns in data
- D. Link analysis helps identify indirect relationships with several degrees of separation
Answer: D
NEW QUESTION 29
A fraud examiner suspects that an employee who is tasked with meeting new customers over business dinners to discuss their accounts is using those meetings to proposition the customers and steal business from the employee's company. If the fraud examiner wanted to pose as a new customer and meet with the employee, which of the following would beet describe the fraud examiner's method?
- A. An undercover operation
- B. An entrapment operation
- C. A source operation
- D. A surveillance operation
Answer: B
NEW QUESTION 30
......
Authentic Best resources for CFE-Investigation Online Practice Exam: https://www.itexamsimulator.com/CFE-Investigation-brain-dumps.html
Get the superior quality CFE-Investigation Dumps with explanations waiting just for you, get it now: https://drive.google.com/open?id=1QZ-w-WW2EglViguWz1BZfJrgdTdOdpvt
