ACFE CFE - Investigation (Certified Fraud Examiner - Investigation) Practice Test 17

Question 160

An employee attending an optional fact-finding meeting is told they are under arrest. Which response most directly enables the examiner to identify the status of a participant accurately?

  1. Limit questioning to relevant, authorized investigative facts
  2. Set out the examiner cannot grant criminal immunity
  3. State participation conditions truthfully and avoid coercive claims
  4. Consult applicable labor and contract rules before proceeding
  5. Pause and follow applicable rights, policies, and counsel guidance

Explanation

Correct Answer

C:

False assertions of police authority can invalidate cooperation and create liability. The investigator must operate within actual powers.

Incorrect Answers

A:

Intrusive inquiries require a legitimate basis; it can be useful for efforts to respect privacy boundaries during questioning. Unrelated personal details can add privacy risk without evidence value; the immediate evidentiary task here is to identify the status of a participant accurately.

B:

Private investigators cannot make binding promises on behalf of prosecutors; it can be useful for efforts to avoid a false promise of immunity. Clear limits protect the witness's decision-making; the priority under these facts is to identify the status of a participant accurately.

D:

Representation rights depend on jurisdiction and circumstances; it describes an action suited to check workplace representation requirements. Verifying them avoids treating an internal inquiry as exempt from workplace obligations; this case asks for a means to identify the status of a participant accurately instead.

E:

The enforceable rules vary between private and government contexts; it protects the separate goal to handle a request to seek legal advice. An examiner should not falsely assert that no rights apply; it would not by itself meet the stated need to identify the status of a participant accurately.

Question 161

A remote witness is speaking from an open coworking space with other people nearby. Which next step best helps the team to protect confidentiality during a video interview?

  1. Use proportionate identity verification before discussing confidential evidence
  2. Verify a private setting and who else is present
  3. Export the conversation with timestamps and source metadata
  4. Pause and confirm missing words instead of guessing

Explanation

Correct Answer

B:

Physical privacy matters even when the platform is encrypted. A witness may be overheard or coached by off-camera individuals.

Incorrect Answers

A:

An alias or compromised account can lead to unauthorized disclosure; this distinction matters when investigators must confirm participant identity in a remote session. Verification should match the sensitivity of the interview; the record instead calls for an action that would protect confidentiality during a video interview.

C:

Screenshots alone may omit sequence or attachments; this is a sensible safeguard where the issue is to preserve a chat-based account properly. A defensible export maintains provenance and helps interpret messages in context; the examiner still needs to protect confidentiality during a video interview.

D:

Network interruptions can change meaning; it can be useful for efforts to manage unreliable connectivity without distorting answers. The examiner should note gaps and repeat material questions when the connection is stable; the examiner still needs to protect confidentiality during a video interview.

Question 162

A purported former employee joins a video call using an unfamiliar display name. What action should the investigation team take to confirm participant identity in a remote session?

  1. Use proportionate identity verification before discussing confidential evidence
  2. Pause and confirm missing words instead of guessing
  3. Verify a private setting and who else is present
  4. Export the conversation with timestamps and source metadata
  5. Consolidate questions and document the reason for any necessary follow-up
  6. Use an authorized recording and transcription workflow

Explanation

Correct Answer

A:

An alias or compromised account can lead to unauthorized disclosure. Verification should match the sensitivity of the interview.

Incorrect Answers

B:

Network interruptions can change meaning; this addresses a different question: how to manage unreliable connectivity without distorting answers. The examiner should note gaps and repeat material questions when the connection is stable; the investigative step being tested here is how to confirm participant identity in a remote session.

C:

Physical privacy matters even when the platform is encrypted; it can be useful for efforts to protect confidentiality during a video interview. A witness may be overheard or coached by off-camera individuals; the record instead calls for an action that would confirm participant identity in a remote session.

D:

Screenshots alone may omit sequence or attachments; it describes an action suited to preserve a chat-based account properly. A defensible export maintains provenance and helps interpret messages in context; it would not by itself meet the stated need to confirm participant identity in a remote session.

E:

Repeated suggestive questioning may change responses; this addresses a different question: how to keep repeated interviews from contaminating recollection. Follow-ups should have clear new evidence or unresolved factual issues; the required investigative decision is to confirm participant identity in a remote session.

F:

External processing may transmit sensitive testimony to unapproved providers; that is the consideration when a team tries to avoid exposure from a poorly secured recording service. Security, contractual, and privacy checks should precede use; it does not address the specific requirement to confirm participant identity in a remote session.

Question 163

Audio repeatedly drops out during a discussion of payment instructions. Which investigative method is best suited to manage unreliable connectivity without distorting answers?

  1. Use proportionate identity verification before discussing confidential evidence
  2. Confirm a private setting and who else is present
  3. Export the conversation with timestamps and source metadata
  4. Pause and confirm missing words instead of guessing

Explanation

Correct Answer

D:

Network interruptions can change meaning. The examiner should note gaps and repeat material questions when the connection is stable.

Incorrect Answers

A:

An alias or compromised account can lead to unauthorized disclosure; that is why it can help to confirm participant identity in a remote session. Verification should match the sensitivity of the interview; the current question is about how to manage unreliable connectivity without distorting answers.

B:

Physical privacy matters even when the platform is encrypted; this addresses a different question: how to protect confidentiality during a video interview. A witness may be overheard or coached by off-camera individuals; it is not a substitute for a step that would manage unreliable connectivity without distorting answers.

C:

Screenshots alone may omit sequence or attachments; its purpose in an investigation is to preserve a chat-based account properly. A defensible export maintains provenance and helps interpret messages in context; this case asks for a means to manage unreliable connectivity without distorting answers instead.

Question 164

A witness provides key answers through a workplace messaging platform. What should the examiner select to preserve a chat-based account properly?

  1. Pause and confirm missing words instead of guessing
  2. Export the conversation with timestamps and source metadata
  3. Use proportionate identity verification before discussing confidential evidence
  4. Verify a private setting and who else is present
  5. Use an authorized recording and transcription workflow

Explanation

Correct Answer

B:

Screenshots alone may omit sequence or attachments. A defensible export maintains provenance and helps interpret messages in context.

Incorrect Answers

A:

Network interruptions can change meaning; it supports the separate objective to manage unreliable connectivity without distorting answers. The examiner should note gaps and repeat material questions when the connection is stable; it does not settle how to preserve a chat-based account properly in this situation.

C:

An alias or compromised account can lead to unauthorized disclosure; it belongs to a different stage of work: trying to confirm participant identity in a remote session. Verification should match the sensitivity of the interview; that would leave unresolved the present need to preserve a chat-based account properly.

D:

Physical privacy matters even when the platform is encrypted; it supports the separate objective to protect confidentiality during a video interview. A witness may be overheard or coached by off-camera individuals; the immediate evidentiary task here is to preserve a chat-based account properly.

E:

External processing may transmit sensitive testimony to unapproved providers; this is a sensible safeguard where the issue is to avoid exposure from a poorly secured recording service. Security, contractual, and privacy checks should precede use; the priority under these facts is to preserve a chat-based account properly.

Question 165

An interviewer proposes an unapproved cloud transcription bot for confidential witness calls. What should be done to avoid exposure from a poorly secured recording service?

  1. Use an authorized recording and transcription workflow
  2. Pause and confirm missing words instead of guessing
  3. Verify a private setting and who else is present
  4. Use proportionate identity verification before discussing confidential evidence

Explanation

Correct Answer

A:

External processing may transmit sensitive testimony to unapproved providers. Security, contractual, and privacy checks should precede use.

Incorrect Answers

B:

Network interruptions can change meaning; that is the consideration when a team tries to manage unreliable connectivity without distorting answers. The examiner should note gaps and repeat material questions when the connection is stable; it is not a substitute for a step that would avoid exposure from a poorly secured recording service.

C:

Physical privacy matters even when the platform is encrypted; that is the consideration when a team tries to protect confidentiality during a video interview. A witness may be overheard or coached by off-camera individuals; this case asks for a means to avoid exposure from a poorly secured recording service instead.

D:

An alias or compromised account can lead to unauthorized disclosure; this responds to a different operational need to confirm participant identity in a remote session. Verification should match the sensitivity of the interview; this case asks for a means to avoid exposure from a poorly secured recording service instead.

Question 166

One interviewer wants to tell a new witness that everyone else blamed the finance manager. Which response most directly enables the examiner to avoid suggesting what another witness said?

  1. Consolidate questions and document the reason for any necessary follow-up
  2. Ask each about preparation, discussions, and firsthand source of details
  3. Seek the witness's independent account before comparison
  4. Seek an appropriate independent interview arrangement

Explanation

Correct Answer

C:

Social pressure and suggestion can shape testimony. Later confrontation with verified discrepancies should be specific and fair.

Incorrect Answers

A:

Repeated suggestive questioning may change responses; it supports the separate objective to keep repeated interviews from contaminating recollection. Follow-ups should have clear new evidence or unresolved factual issues; this case asks for a means to avoid suggesting what another witness said instead.

B:

Independent verification helps establish whether similarities reflect shared memories or coordinated statements; it supports the separate objective to recognize possible witness coaching. Matching errors merit follow-up, not automatic guilt findings; this case asks for a means to avoid suggesting what another witness said instead.

D:

A supervisor's presence can influence a witness, particularly if allegations involve management; this concerns the distinct task of deciding how to prevent a supervisor from answering for a subordinate. Legal and contractual rights still require checking; it would not by itself meet the stated need to avoid suggesting what another witness said.

Question 167

Two employees supply matching scripts with identical unusual errors. Which action addresses the primary investigative need to recognize possible witness coaching?

  1. Ask each about preparation, discussions, and firsthand source of details
  2. Seek the witness's independent account before comparison
  3. Use restricted contact records and neutral scheduling descriptions
  4. Seek an appropriate independent interview arrangement

Explanation

Correct Answer

A:

Independent verification helps establish whether similarities reflect shared memories or coordinated statements. Matching errors merit follow-up, not automatic guilt findings.

Incorrect Answers

B:

Social pressure and suggestion can shape testimony; its purpose in an investigation is to avoid suggesting what another witness said. Later confrontation with verified discrepancies should be specific and fair; the required investigative decision is to recognize possible witness coaching.

C:

Contact logistics can reveal source identity; it can be useful for efforts to manage confidential witness contact securely. Separating sensitive identifiers from general case coordination lowers exposure; the facts presented call first for a way to recognize possible witness coaching.

D:

A supervisor's presence can influence a witness, particularly if allegations involve management; that principle applies when the team needs to prevent a supervisor from answering for a subordinate. Legal and contractual rights still require checking; it does not address the specific requirement to recognize possible witness coaching.

Question 168

A line manager insists on sitting in and supplying answers during a staff interview. Which option best supports the objective to prevent a supervisor from answering for a subordinate?

  1. Seek an appropriate independent interview arrangement
  2. Seek the witness's independent account before comparison
  3. Ask each about preparation, discussions, and firsthand source of details
  4. Use restricted contact records and neutral scheduling descriptions
  5. Consolidate questions and document the reason for any necessary follow-up

Explanation

Correct Answer

A:

A supervisor's presence can influence a witness, particularly if allegations involve management. Legal and contractual rights still require checking.

Incorrect Answers

B:

Social pressure and suggestion can shape testimony; this distinction matters when investigators must avoid suggesting what another witness said. Later confrontation with verified discrepancies should be specific and fair; it does not address the specific requirement to prevent a supervisor from answering for a subordinate.

C:

Independent verification helps establish whether similarities reflect shared memories or coordinated statements; that is the consideration when a team tries to recognize possible witness coaching. Matching errors merit follow-up, not automatic guilt findings; the current question is about how to prevent a supervisor from answering for a subordinate.

D:

Contact logistics can reveal source identity; this addresses a different question: how to manage confidential witness contact securely. Separating sensitive identifiers from general case coordination lowers exposure; the priority under these facts is to prevent a supervisor from answering for a subordinate.

E:

Repeated suggestive questioning may change responses; that is the consideration when a team tries to keep repeated interviews from contaminating recollection. Follow-ups should have clear new evidence or unresolved factual issues; the facts presented call first for a way to prevent a supervisor from answering for a subordinate.

Question 169

An examiner has reinterviewed a witness daily about the same minor detail. Which technique best fits the need to keep repeated interviews from contaminating recollection?

  1. Ask each about preparation, discussions, and firsthand source of details
  2. Seek the witness's independent account before comparison
  3. Consolidate questions and document the reason for any necessary follow-up
  4. Use restricted contact records and neutral scheduling descriptions

Explanation

Correct Answer

C:

Repeated suggestive questioning may change responses. Follow-ups should have clear new evidence or unresolved factual issues.

Incorrect Answers

A:

Independent verification helps establish whether similarities reflect shared memories or coordinated statements; this is a sensible safeguard where the issue is to recognize possible witness coaching. Matching errors merit follow-up, not automatic guilt findings; the record instead calls for an action that would keep repeated interviews from contaminating recollection.

B:

Social pressure and suggestion can shape testimony; that is why it can help to avoid suggesting what another witness said. Later confrontation with verified discrepancies should be specific and fair; the required investigative decision is to keep repeated interviews from contaminating recollection.

D:

Contact logistics can reveal source identity; it supports the separate objective to manage confidential witness contact securely. Separating sensitive identifiers from general case coordination lowers exposure; it does not settle how to keep repeated interviews from contaminating recollection in this situation.

Question 170

A reporter's personal number appears in a case-wide scheduling spreadsheet. What is the strongest investigative approach to manage confidential witness contact securely?

  1. Seek the witness's independent account before comparison
  2. Consolidate questions and document the reason for any necessary follow-up
  3. Seek an appropriate independent interview arrangement
  4. Use restricted contact records and neutral scheduling descriptions

Explanation

Correct Answer

D:

Contact logistics can reveal source identity. Separating sensitive identifiers from general case coordination lowers exposure.

Incorrect Answers

A:

Social pressure and suggestion can shape testimony; it belongs to a different stage of work: trying to avoid suggesting what another witness said. Later confrontation with verified discrepancies should be specific and fair; the facts presented call first for a way to manage confidential witness contact securely.

B:

Repeated suggestive questioning may change responses; this is a sensible safeguard where the issue is to keep repeated interviews from contaminating recollection. Follow-ups should have clear new evidence or unresolved factual issues; that would leave unresolved the present need to manage confidential witness contact securely.

C:

A supervisor's presence can influence a witness, particularly if allegations involve management; this is primarily relevant when the objective is to prevent a supervisor from answering for a subordinate. Legal and contractual rights still require checking; the facts presented call first for a way to manage confidential witness contact securely.

Certified Fraud Examiner - Investigation (CFE - Investigation) Practice Tests