Questions for the CFE INVESTIGATION were updated on : Nov 21 ,2025
Page 1 out of 12. Viewing questions 1-15 out of 170
Question 1
Due to risks of illicit transactions, most jurisdictions require financial institutions to obtain information about which of the following from an institution with which they have a foreign correspondent relationship?
A. The institution's branch addresses
B. The institution's licenses or certifications
C. The institution's tax statements
D. The institution's client loan profiles
Answer:
A
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 2
Caroline, a fraud examiner, is conducting an admission-seeking interview with John, an employee suspected of stealing cash. Which of the following is the MOST effective phrasing for Caroline to use when posing an admission-seeking question to John?
A. "Why did you take the money?"
B. "What do you know about the stolen money?"
C. "Do you know who took the money''"
D. "Did you steal the money?"
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 3
Mil a. a Certified Fraud Examiner (CFE). needs to obtain court records and wants to be as sure as possible that the records are accurate In most countries, the most reliable way lo obtain these documents is to obtain them directly from the court authorities.
A. True
B. False
Answer:
A
User Votes:
A
50%
B
50%
Discussions
0/ 1000
Question 4
Which of the following is the MOST ACCURATE statement regarding the analysis phase in digital forensic investigations?
A. The analysis phase of digital forensic investigations should not commence unless it is verified that the suspect devices do not contain relevant data.
B. During the analysis phase, it is best to use a combination of the various forensic tools that can assist h identifying, extracting, and collecting digital evidence
C. When analyzing data for evidence, fraud examiners should look for exculpatory evidence but not exculpatory evidence
D. The primary concern when analyzing digital evidence is to protect the collected information from seizure
Answer:
B
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 5
Beta, a Certified Fraud Examiner (CFE). is conducting an admission-seeking interview of Gamma, a fraud suspect. After Beta gave Gamma an appropriate rationalization for his conduct, Gamma continued his denials, giving various alibis. These alibis can usually be diffused by all of the following techniques EXCEPT:
A. Discussing the testimony of witnesses
B. Displaying physical evidence
C. Discussing Gamma's prior deceptions
D. Downplaying the strength of the evidence
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 6
Which of the following is NOT true with regard to tracing the disposition of loan proceeds?
A. Tracing loan proceeds can determine if the proceeds were deposited into hidden accounts.
B. Tracing loan proceeds can uncover previously hidden assets
C. Tracing loan proceeds can determine if hidden accounts were used for loan payments
D. Tracing loan proceeds can identify the presence of internal control weaknesses.
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 7
Tony, a fraud examiner, believes that vendors might be submitting multiple invoices for the same sales with the hope that they will be paid more than once. He wants to ensure that no two invoices in the system have the same number. Which of the Mowing data analysis functions would be most useful for this test?
A. Duplicate search
B. Benford's Law analysis
C. Correlation analysis
D. Linear regression
Answer:
A
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 8
Which of the following is TRUE of a follow-up/recommendations section in a written fraud examination report?
A. A follow-up recommendations section is a required part of every written fraud examination report
B. A follow-up/recommendations section calculates the amount of fraud-related loss sustained by the organization
C. A follow-up/recommendations section should state remedial measures for the organization to undertake
D. All of the above
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 9
Baker, a Certified Fraud Examiner (CFE). is getting prepared to conduct a lengthy and complex interview. To prepare himself. Baker should:
A. Writs down a detailed list of questions in advance
B. Avoid bringing any notes with him to the interview
C. Write down key points to go over with the respondent
D. Take only the documents he wishes to go over
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 10
Which of the following questions would be most effective when starting the calibration process during an interview?
A. "Did you commit any misconduct against the company?"
B. "Do you know what the punishment is for violations like this'5"
C. "Do you know who might have defrauded the company?"
D. "How many jobs have you had before this one?’
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 11
Which of the following is a best practice for obtaining a signed statement?
A. Make sure that everything is included in the signed statement and that no addendum are made
B. Have the suspect write out the entire statement in their own handwriting
C. Have two individuals witness the signing of the document when possible.
D. Include all of the subject's offenses, whether related or not, in a angle document.
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 12
Butler, a Certified Fraud Examiner (CFE), needs to obtain a copy of a statement that the chief executive officer (CEO) of Accord Investments, a venture capital firm, posted on the firm's website sometime last year. Unfortunately, the quote has been removed from the website. Which of the following resources would be the BEST choice for Butler to consult to find an earlier version of the web page that he needs?
A. The invisible archives
B. The free web
C. The internet archives
D. The deep web
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 13
Nobles, a digital forensic examiner for a government agency, is conducting a criminal investigation of Lucas, a construction company executive, for alleged bribery of foreign officials Nobles obtains a court order authorizing him to seize Lucas's personal computer for forensic examination. Which of the following is the MOST ACCURATE statement?
A. If Lucas's computer is running. Nobles may retrieve data from the computer directly via its normal interface 4 the evidence that he needs exists only in the form of volatile data
B. If Lucas's computer is off and Nobles needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer's normal interlace.
C. If Lucas's computer is off. Nobles should not turn it on unless he plans to use an encryption device that can guarantee that the system's hard drive will not be accessed during startup.
D. If Lucas's computer is running. Nobles should perform a graceful shutdown by turning it off using the normal shutdown process
Answer:
A
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 14
Management at Oak Company has asked Arthur, an internal auditor, to implement a data analysis program to search for warning signs of potential fraud within the company. Which of the following steps should Arthur conduct first to MOST effectively use data analysis techniques for such an initiative?
A. Analyze the data.
B. Cleanse and normalize the data
C. Build a profile of potential frauds.
D. Obtain the data.
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 15
Martin is a fraud examiner. He contacts Dianne for the purpose of conducting a routine, information- gathering interview. Dianne says that she wants her coworker. Sheila, whom Martin also plans to interview, to be present during the interview. Martin should:
A. Interview Dianne and Sheila separately
B. Allow Sheila to be present but only if she does not speak
C. Interview Dianne and Sheila together by himself
D. Interview Dianne and Sheila together, but bring in a second interviewer