ACFE CFE - Financial Transactions and Fraud Schemes (Certified Fraud Examiner - Financial Transactions and Fraud Schemes) Practice Test 62

Question 610

A reviewer wants to distinguish time-and-materials labor padding from adjacent risk patterns. Which observation is the most diagnostic indicator?

  1. Scoring notes and objective evidence disagree while one bidder receives unexplained advantages.
  2. Site access and staffing records contradict skill grades and hours on invoices.
  3. Specifications mirror one vendor catalog while alternatives meet the operational need.
  4. Extensions exceed stated options and bypass mandated review dates.

Explanation

Correct Answer

B:

This observation is a pertinent indicator of Time-and-materials labor padding because misstated labor grade or effort inflates reimbursable service cost after award. The practical corroborating procedure is to match billable labor classes and timesheets with actual personnel and work evidence; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Collusive bid-evaluation scoring, where manipulated evaluation changes the award outcome after bids arrive, unlike specification tailoring, rather than the particular mechanism in Time-and-materials labor padding. Unlike the clue for Collusive bid-evaluation scoring, the more directly related indicator for Time-and-materials labor padding is this: Site access and staffing records contradict skill grades and hours on invoices.

C:

The proposed observation fits Tender specifications tailored to one supplier, where bid tailoring manipulates the solicitation before vendors compete, rather than the particular mechanism in Time-and-materials labor padding. Unlike the clue for Tender specifications tailored to one supplier, the more directly related indicator for Time-and-materials labor padding is this: Site access and staffing records contradict skill grades and hours on invoices.

D:

The proposed observation fits Unauthorized contract extension, where improper continuation can give an incumbent business without the required competition, rather than the particular mechanism in Time-and-materials labor padding. Unlike the clue for Unauthorized contract extension, the more directly related indicator for Time-and-materials labor padding is this: Site access and staffing records contradict skill grades and hours on invoices.

Question 611

A reviewer wants to distinguish material nonpublic information trading from adjacent risk patterns. Which observation is the most diagnostic indicator?

  1. Employee trades consistently precede client orders and benefit from resulting price movements.
  2. Coordinated promotional bursts coincide with insider selling and extreme price reversals.
  3. Trades by insiders closely precede market-moving news and differ from prior patterns.
  4. Commission records show ongoing securities placement activity without appropriate registration evidence.

Explanation

Correct Answer

C:

This observation is a pertinent indicator of Material nonpublic information trading because trading on material information not publicly available may breach insider-trading rules depending on the jurisdiction and duties involved. The practical corroborating procedure is to compare trading timestamps, information access and public-disclosure chronology; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Broker front-running client order, where misusing confidential customer-order knowledge for personal gain creates market-abuse and conflict risks, rather than the particular mechanism in Material nonpublic information trading. Unlike the clue for Broker front-running client order, the more directly related indicator for Material nonpublic information trading is this: Trades by insiders closely precede market-moving news and differ from prior patterns.

B:

The proposed observation fits Pump-and-dump stock promotion, where false hype can induce investor purchases while manipulators unload inflated positions, rather than the particular mechanism in Material nonpublic information trading. Unlike the clue for Pump-and-dump stock promotion, the more directly related indicator for Material nonpublic information trading is this: Trades by insiders closely precede market-moving news and differ from prior patterns.

D:

The proposed observation fits Unregistered brokerage solicitation, where securities-related compensation and solicitation can trigger registration obligations under relevant laws, rather than the particular mechanism in Material nonpublic information trading. Unlike the clue for Unregistered brokerage solicitation, the more directly related indicator for Material nonpublic information trading is this: Trades by insiders closely precede market-moving news and differ from prior patterns.

Question 612

The review team observes the following: Employee trades consistently precede client orders and benefit from resulting price movements. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Compare trading timestamps, information access and public-disclosure chronology; safeguard: Enforce personal-trading controls and surveillance around sensitive customer orders.
  2. Diagnostic: Correlate promotional communications with trading accounts and beneficial ownership; safeguard: Verify regulatory status and permitted functions of intermediaries before engagement.
  3. Diagnostic: Join employee transaction records with confidential order timestamps and market prices; safeguard: Enforce personal-trading controls and surveillance around sensitive customer orders.
  4. Diagnostic: Join employee transaction records with confidential order timestamps and market prices; safeguard: Monitor promotional claims and suspicious trading around low-liquidity securities.

Explanation

Correct Answer

C:

The test addresses Broker front-running client order by targeting this observation: Employee trades consistently precede client orders and benefit from resulting price movements. The accompanying safeguard—enforce personal-trading controls and surveillance around sensitive customer orders—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The proposed safeguard is relevant to Broker front-running client order, but the diagnostic tests Material nonpublic information trading rather than the identified anomaly. That test is aimed at records involving trades by insiders closely precede market-moving news and differ from prior patterns; the specified case instead calls for reviewers to join employee transaction records with confidential order timestamps and market prices.

B:

The evidence test relates to Pump-and-dump stock promotion, whereas the proposed safeguard protects against Unregistered brokerage solicitation; neither directly resolves Broker front-running client order. Unlike the Pump-and-dump stock promotion test and Unregistered brokerage solicitation safeguard, the investigation of Broker front-running client order requires reviewers to join employee transaction records with confidential order timestamps and market prices, followed by assessment of the matching control point.

D:

The diagnostic correctly examines Broker front-running client order by having reviewers join employee transaction records with confidential order timestamps and market prices, but the safeguard is for Pump-and-dump stock promotion. That prevention step responds to a different mechanism: False hype can induce investor purchases while manipulators unload inflated positions.

Question 613

An analyst is selecting warning signs for investing cash-flow classification. Which recorded pattern should receive focused attention?

  1. Loan agreements and bank movements show changes in borrowed capital.
  2. The outflow bought a long-lived productive asset.
  3. Stock counts confirm unsold merchandise at the reporting date.
  4. The underlying cash movements arise from the ordinary revenue-producing operations.

Explanation

Correct Answer

B:

This observation is a pertinent indicator of Investing cash-flow classification because buying plant equipment is generally an investing cash outflow, not a routine operating payment. The practical corroborating procedure is to trace fixed-asset additions and bank settlements to the investing section of the cash-flow statement; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Financing cash-flow classification, where financing activities describe changes in funding from lenders and owners; classifications of interest can vary by accounting framework, rather than the particular mechanism in Investing cash-flow classification. Unlike the clue for Financing cash-flow classification, the more directly related indicator for Investing cash-flow classification is this: The outflow bought a long-lived productive asset.

C:

The proposed observation fits Inventory cost recognition, where unsold goods ordinarily remain inventory assets until sold or written down as required, rather than the particular mechanism in Investing cash-flow classification. Unlike the clue for Inventory cost recognition, the more directly related indicator for Investing cash-flow classification is this: The outflow bought a long-lived productive asset.

D:

The proposed observation fits Operating cash-flow classification, where operating cash flows concern core activities and need not equal accrual net income, rather than the particular mechanism in Investing cash-flow classification. Unlike the clue for Operating cash-flow classification, the more directly related indicator for Investing cash-flow classification is this: The outflow bought a long-lived productive asset.

Question 614

The review team observes the following: Purchases accelerate before filing while sale proceeds are diverted. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Trace inventory purchases, resale proceeds and pre-filing management communications; safeguard: Apply supplier exposure controls and monitor sudden anomalous credit demand.
  2. Diagnostic: Compare the proposed plan with liquidity forecasts and creditor treatment; safeguard: Subject related-party creditor proofs to independent substantive verification.
  3. Diagnostic: Independently confirm material receivables and liabilities against the filed schedules; safeguard: Apply supplier exposure controls and monitor sudden anomalous credit demand.
  4. Diagnostic: Trace inventory purchases, resale proceeds and pre-filing management communications; safeguard: Choose an appropriate lawful restructuring process rather than assuming all insolvencies require liquidation.

Explanation

Correct Answer

A:

The test addresses Bankruptcy bust-out credit buying by targeting this observation: Purchases accelerate before filing while sale proceeds are diverted. The accompanying safeguard—apply supplier exposure controls and monitor sudden anomalous credit demand—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

B:

The evidence test relates to Liquidation versus reorganization, whereas the proposed safeguard protects against Fictitious creditor claim; neither directly resolves Bankruptcy bust-out credit buying. Unlike the Liquidation versus reorganization test and Fictitious creditor claim safeguard, the investigation of Bankruptcy bust-out credit buying requires reviewers to trace inventory purchases, resale proceeds and pre-filing management communications, followed by assessment of the matching control point.

C:

The proposed safeguard is relevant to Bankruptcy bust-out credit buying, but the diagnostic tests False insolvency schedules rather than the identified anomaly. That test is aimed at records involving customer confirmations and creditor support contradict filed values; the specified case instead calls for reviewers to trace inventory purchases, resale proceeds and pre-filing management communications.

D:

The diagnostic correctly examines Bankruptcy bust-out credit buying by having reviewers trace inventory purchases, resale proceeds and pre-filing management communications, but the safeguard is for Liquidation versus reorganization. That prevention step responds to a different mechanism: Reorganization aims to preserve or restructure the enterprise; liquidation ordinarily realizes assets for distribution.

Question 615

An examination of ghost public-assistance beneficiaries begins with this observation: Benefit rolls conflict with independent vital records and eligibility updates. Which follow-up procedure gives the most direct evidence?

  1. Reconcile employee time allocation and invoice support across grants.
  2. Compare engineering test results, supplier records and acceptance approvals.
  3. Cross-match beneficiary status with authorized registries and payment destinations.
  4. Verify existence and pre-disaster activity using independent authoritative records.

Explanation

Correct Answer

C:

For the Ghost public-assistance beneficiaries concern, the procedure tests source evidence behind this observation: Benefit rolls conflict with independent vital records and eligibility updates. This matters because public funds continue flowing to people who should not receive benefits; independent corroboration is necessary before accepting any conclusion.

Incorrect Answers

A:

This comparison primarily addresses Double-charged public grant costs, in which a real cost becomes fraudulent when recovered more than once from restricted funding sources; because the present question instead concerns Ghost public-assistance beneficiaries, reviewers should cross-match beneficiary status with authorized registries and payment destinations rather than apply a check designed for Double-charged public grant costs.

B:

This comparison primarily addresses Substandard public works certification, in which taxpayer money pays for specifications that were not actually met; because the present question instead concerns Ghost public-assistance beneficiaries, reviewers should cross-match beneficiary status with authorized registries and payment destinations rather than apply a check designed for Substandard public works certification.

D:

This comparison primarily addresses Fictitious disaster relief business, in which crisis support can be abused through fictitious claimants and fabricated losses; because the present question instead concerns Ghost public-assistance beneficiaries, reviewers should cross-match beneficiary status with authorized registries and payment destinations rather than apply a check designed for Fictitious disaster relief business.

Question 616

Control designers are focusing on the mechanism behind unrecorded accrued liabilities: Omitting obligations understates liabilities and costs rather than creating new cash resources. Which measure best limits that opportunity?

  1. Maintain conflict declarations and review related-party transactions for required disclosure.
  2. Segregate count teams and reconcile physical results with perpetual records.
  3. Independently review goods and services received near the cutoff date.
  4. Require legal and finance review of all amendments affecting recognition.
  5. Apply reviewed capitalization thresholds and expense nonqualifying costs.

Explanation

Correct Answer

C:

The control directly addresses the failure point in Unrecorded accrued liabilities, since omitting obligations understates liabilities and costs rather than creating new cash resources. A subsequent independent review could search subsequent disbursements for missing accruals and compare receiving logs with liabilities to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Omitted related-party disclosure rather than Unrecorded accrued liabilities, because even when amounts are recorded, withholding material relationship information can mislead statement users. Unlike the control for Omitted related-party disclosure, the more direct design for Unrecorded accrued liabilities is to independently review goods and services received near the cutoff date; a different safeguard cannot substitute for it.

B:

This safeguard is directed primarily at Inflated year-end inventory rather than Unrecorded accrued liabilities, because overstated ending inventory usually understates cost of goods sold and inflates earnings. Unlike the control for Inflated year-end inventory, the more direct design for Unrecorded accrued liabilities is to independently review goods and services received near the cutoff date; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Concealed sales-side agreement rather than Unrecorded accrued liabilities, because undisclosed contractual rights may defeat the assertion that a recorded sale is final or earned. Unlike the control for Concealed sales-side agreement, the more direct design for Unrecorded accrued liabilities is to independently review goods and services received near the cutoff date; a different safeguard cannot substitute for it.

E:

This safeguard is directed primarily at Capitalized routine operating costs rather than Unrecorded accrued liabilities, because moving a period expense into assets understates expenses and overstates profit and assets. Unlike the control for Capitalized routine operating costs, the more direct design for Unrecorded accrued liabilities is to independently review goods and services received near the cutoff date; a different safeguard cannot substitute for it.

Question 617

Two separate review files raise different issues. File A: A person with signature authority issues company checks to the person's own controlled entity. File B: An attacker alters approved electronic supplier payment instructions to send money to a new bank account. Which pairing accurately classifies both files?

  1. File A: Authorized-maker self-payment; File B: Concealed check diversion.
  2. File A: Authorized-maker self-payment; File B: ACH beneficiary substitution.
  3. File A: Shell-company invoice billing; File B: ACH beneficiary substitution.
  4. File A: ACH beneficiary substitution; File B: Authorized-maker self-payment.

Explanation

Correct Answer

B:

File A is Authorized-maker self-payment because authority to sign does not confer permission to take company funds for personal use, while File B is ACH beneficiary substitution because the fraud redirects a genuine disbursement through altered settlement coordinates. The evidence chains differ: for File A, reviewers should compare signers and beneficiaries with employee conflict declarations and contracts; for File B, they should compare beneficiary master-file history with verified supplier instructions and payment files.

Incorrect Answers

A:

File B is misidentified as Concealed check diversion instead of ACH beneficiary substitution. With the proposed pairing Authorized-maker self-payment / Concealed check diversion, the distinction is substantive: File A shows that payments to related beneficiaries lack independent authorization or economic support, whereas File B shows that recent bank-account changes precede transfers while invoices remain otherwise valid. For these Authorized-maker self-payment and ACH beneficiary substitution files, choosing the pair Authorized-maker self-payment / Concealed check diversion would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Shell-company invoice billing instead of Authorized-maker self-payment. With the proposed pairing Shell-company invoice billing / ACH beneficiary substitution, the distinction is substantive: File A shows that payments to related beneficiaries lack independent authorization or economic support, whereas File B shows that recent bank-account changes precede transfers while invoices remain otherwise valid. For these Authorized-maker self-payment and ACH beneficiary substitution files, choosing the pair Shell-company invoice billing / ACH beneficiary substitution would misdirect the review away from at least one of these mechanisms.

D:

File A is misidentified as ACH beneficiary substitution instead of Authorized-maker self-payment; File B is misidentified as Authorized-maker self-payment instead of ACH beneficiary substitution. With the proposed pairing ACH beneficiary substitution / Authorized-maker self-payment, the distinction is substantive: File A shows that payments to related beneficiaries lack independent authorization or economic support, whereas File B shows that recent bank-account changes precede transfers while invoices remain otherwise valid. For these Authorized-maker self-payment and ACH beneficiary substitution files, choosing the pair ACH beneficiary substitution / Authorized-maker self-payment would misdirect the review away from at least one of these mechanisms.

Question 618

The organization wants to prevent recorded-till cash larceny. Its risk assessment describes: Cash larceny steals receipts after they have been recorded, leaving a book-to-cash shortage. What targeted safeguard should it prioritize?

  1. Separate receipt custody from receivable posting and review all write-off authorizations.
  2. Separate cash custody and reconciliation with surprise cash counts.
  3. Use dual counts, tamper-evident bags and independent bank reconciliation.
  4. Assign cash receipt posting to an employee who cannot handle incoming funds.

Explanation

Correct Answer

B:

The control directly addresses the failure point in Recorded-till cash larceny, since cash larceny steals receipts after they have been recorded, leaving a book-to-cash shortage. A subsequent independent review could match recorded tender totals with independent till counts and deposit slips to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Accounts-receivable skimming rather than Recorded-till cash larceny, because the employee captures incoming funds and conceals the missing credit to the customer's balance. Unlike the control for Accounts-receivable skimming, the more direct design for Recorded-till cash larceny is to separate cash custody and reconciliation with surprise cash counts; a different safeguard cannot substitute for it.

C:

This safeguard is directed primarily at Deposit-bag substitution rather than Recorded-till cash larceny, because the removal occurs after recording and before funds reach the bank. Unlike the control for Deposit-bag substitution, the more direct design for Recorded-till cash larceny is to separate cash custody and reconciliation with surprise cash counts; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Receivable lapping rather than Recorded-till cash larceny, because lapping rolls forward a shortage by applying one customer's payment to another account. Unlike the control for Receivable lapping, the more direct design for Recorded-till cash larceny is to separate cash custody and reconciliation with surprise cash counts; a different safeguard cannot substitute for it.

Question 619

A finance team is reviewing the accuracy of prepaid insurance expense. Relevant accounting principle: An advance payment creates an asset for future economic benefit rather than immediate expense for all periods. Which procedure best supports reliable treatment?

  1. Use an unbilled-liabilities accrual and review invoices received after close.
  2. Recognize unearned consideration as a liability until the related service is earned.
  3. Capitalize the unexpired coverage and expense it systematically over the protection period.
  4. Post an appropriate receivable and reconcile the subledger with the control account.

Explanation

Correct Answer

C:

The control directly addresses the failure point in Prepaid insurance expense, since an advance payment creates an asset for future economic benefit rather than immediate expense for all periods. A subsequent independent review could reconcile policy coverage dates and the prepaid-insurance amortization schedule to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Accrued supplier expense rather than Prepaid insurance expense, because an incurred cost belongs to the period of the service even if payment and invoicing follow later. Unlike the control for Accrued supplier expense, the more direct design for Prepaid insurance expense is to capitalize the unexpired coverage and expense it systematically over the protection period; a different safeguard cannot substitute for it.

B:

This safeguard is directed primarily at Deferred customer revenue rather than Prepaid insurance expense, because prepayment does not by itself make the entire receipt current-period income; the unperformed portion represents an obligation. Unlike the control for Deferred customer revenue, the more direct design for Prepaid insurance expense is to capitalize the unexpired coverage and expense it systematically over the protection period; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Accounts receivable from credit sales rather than Prepaid insurance expense, because a legitimate credit sale can create an asset before cash arrives when revenue criteria are met. Unlike the control for Accounts receivable from credit sales, the more direct design for Prepaid insurance expense is to capitalize the unexpired coverage and expense it systematically over the protection period; a different safeguard cannot substitute for it.

Question 620

Two separate review files raise different issues. File A: An inspector approves a bridge repair as meeting contract standards despite undisclosed material substitution. File B: A public program selects ineligible recipients after pressure from influential insiders and bypasses published scoring rules. Which pairing accurately classifies both files?

  1. File A: Substandard public works certification; File B: Double-charged public grant costs.
  2. File A: Politically directed benefit awards; File B: Substandard public works certification.
  3. File A: Substandard public works certification; File B: Politically directed benefit awards.
  4. File A: False government grant deliverables; File B: Politically directed benefit awards.

Explanation

Correct Answer

C:

File A is Substandard public works certification because taxpayer money pays for specifications that were not actually met, while File B is Politically directed benefit awards because misuse of discretionary public funds can favor connected parties over eligible beneficiaries. The evidence chains differ: for File A, reviewers should compare engineering test results, supplier records and acceptance approvals; for File B, they should compare application scoring and decision records with declared program requirements.

Incorrect Answers

A:

File B is misidentified as Double-charged public grant costs instead of Politically directed benefit awards. With the proposed pairing Substandard public works certification / Double-charged public grant costs, the distinction is substantive: File A shows that independent materials tests disagree with approved completion certificates, whereas File B shows that award outcomes diverge from documented eligibility criteria without defensible exceptions. For these Substandard public works certification and Politically directed benefit awards files, choosing the pair Substandard public works certification / Double-charged public grant costs would misdirect the review away from at least one of these mechanisms.

B:

File A is misidentified as Politically directed benefit awards instead of Substandard public works certification; File B is misidentified as Substandard public works certification instead of Politically directed benefit awards. With the proposed pairing Politically directed benefit awards / Substandard public works certification, the distinction is substantive: File A shows that independent materials tests disagree with approved completion certificates, whereas File B shows that award outcomes diverge from documented eligibility criteria without defensible exceptions. For these Substandard public works certification and Politically directed benefit awards files, choosing the pair Politically directed benefit awards / Substandard public works certification would misdirect the review away from at least one of these mechanisms.

D:

File A is misidentified as False government grant deliverables instead of Substandard public works certification. With the proposed pairing False government grant deliverables / Politically directed benefit awards, the distinction is substantive: File A shows that independent materials tests disagree with approved completion certificates, whereas File B shows that award outcomes diverge from documented eligibility criteria without defensible exceptions. For these Substandard public works certification and Politically directed benefit awards files, choosing the pair False government grant deliverables / Politically directed benefit awards would misdirect the review away from at least one of these mechanisms.

Certified Fraud Examiner - Financial Transactions and Fraud Schemes (CFE - Financial Transactions and Fraud Schemes) Practice Tests