ACFE CFE - Investigation (Certified Fraud Examiner - Investigation) Practice Test 18

Question 170

A reporter's personal number appears in a case-wide scheduling spreadsheet. What is the strongest investigative approach to manage confidential witness contact securely?

  1. Seek the witness's independent account before comparison
  2. Consolidate questions and document the reason for any necessary follow-up
  3. Seek an appropriate independent interview arrangement
  4. Use restricted contact records and neutral scheduling descriptions

Explanation

Correct Answer

D:

Contact logistics can reveal source identity. Separating sensitive identifiers from general case coordination lowers exposure.

Incorrect Answers

A:

Social pressure and suggestion can shape testimony; it belongs to a different stage of work: trying to avoid suggesting what another witness said. Later confrontation with verified discrepancies should be specific and fair; the facts presented call first for a way to manage confidential witness contact securely.

B:

Repeated suggestive questioning may change responses; this is a sensible safeguard where the issue is to keep repeated interviews from contaminating recollection. Follow-ups should have clear new evidence or unresolved factual issues; that would leave unresolved the present need to manage confidential witness contact securely.

C:

A supervisor's presence can influence a witness, particularly if allegations involve management; this is primarily relevant when the objective is to prevent a supervisor from answering for a subordinate. Legal and contractual rights still require checking; the facts presented call first for a way to manage confidential witness contact securely.

Question 171

A witness described several cash collections across different branches. What should be done to summarize key facts before ending a long session?

  1. Recap significant points and ask for corrections or omissions
  2. Document the ending and unanswered points without treating silence as guilt
  3. Ask which records or people could verify the account
  4. Close respectfully and offer relevant support or referral information

Explanation

Correct Answer

A:

A neutral summary can expose misunderstandings while the witness is present. Corrections should be attributed and recorded accurately.

Incorrect Answers

B:

A complete record distinguishes unfinished inquiry from a damaging inference; it can be useful for efforts to record the time and reason an interview ended. Future steps must honor applicable rights; it would not by itself meet the stated need to summarize key facts before ending a long session.

C:

Closing questions can lead to corroboration rather than premature judgment; that principle applies when the team needs to identify additional documentary leads at the close. New contacts and documents should enter the case plan; the examiner still needs to summarize key facts before ending a long session.

D:

An interview can have human consequences; this is a sensible safeguard where the issue is to check participant wellbeing after a difficult interview. Appropriate support does not imply endorsement of an unverified accusation; the record instead calls for an action that would summarize key facts before ending a long session.

Question 172

A logistics clerk has described an irregular delivery arrangement in detail. Which action would most reliably help the team to identify additional documentary leads at the close?

  1. Document the ending and unanswered points without treating silence as guilt
  2. Close respectfully and offer relevant support or referral information
  3. Ask which records or people could verify the account
  4. Provide a secure authorized follow-up channel
  5. Recap significant points and ask for corrections or omissions

Explanation

Correct Answer

C:

Closing questions can lead to corroboration rather than premature judgment. New contacts and documents should enter the case plan.

Incorrect Answers

A:

A complete record distinguishes unfinished inquiry from a damaging inference; this addresses a different question: how to record the time and reason an interview ended. Future steps must honor applicable rights; it serves another purpose, not the immediate need to identify additional documentary leads at the close.

B:

An interview can have human consequences; it describes an action suited to check participant wellbeing after a difficult interview. Appropriate support does not imply endorsement of an unverified accusation; it is not a substitute for a step that would identify additional documentary leads at the close.

D:

A clear route for supplemental information supports accuracy while protecting case confidentiality; it supports the separate objective to explain how later contact will be managed. The examiner should avoid casual case discussion; the priority under these facts is to identify additional documentary leads at the close.

E:

A neutral summary can expose misunderstandings while the witness is present; it protects the separate goal to summarize key facts before ending a long session. Corrections should be attributed and recorded accurately; the immediate evidentiary task here is to identify additional documentary leads at the close.

Question 173

A witness asks whom to call if they remember a missing detail next week. What would be the most defensible approach to explain how later contact will be managed?

  1. Close respectfully and offer relevant support or referral information
  2. Recap significant points and ask for corrections or omissions
  3. Ask which records or people could verify the account
  4. Provide a secure authorized follow-up channel

Explanation

Correct Answer

D:

A clear route for supplemental information supports accuracy while protecting case confidentiality. The examiner should avoid casual case discussion.

Incorrect Answers

A:

An interview can have human consequences; its purpose in an investigation is to check participant wellbeing after a difficult interview. Appropriate support does not imply endorsement of an unverified accusation; it would not by itself meet the stated need to explain how later contact will be managed.

B:

A neutral summary can expose misunderstandings while the witness is present; this concerns the distinct task of deciding how to summarize key facts before ending a long session. Corrections should be attributed and recorded accurately; the priority under these facts is to explain how later contact will be managed.

C:

Closing questions can lead to corroboration rather than premature judgment; this is primarily relevant when the objective is to identify additional documentary leads at the close. New contacts and documents should enter the case plan; it would not by itself meet the stated need to explain how later contact will be managed.

Question 174

A witness becomes distressed after recounting workplace retaliation. Which response is most appropriate to check participant wellbeing after a difficult interview?

  1. Offer a secure authorized follow-up channel
  2. Ask which records or people could verify the account
  3. Close respectfully and offer relevant support or referral information
  4. Recap significant points and ask for corrections or omissions

Explanation

Correct Answer

C:

An interview can have human consequences. Appropriate support does not imply endorsement of an unverified accusation.

Incorrect Answers

A:

A clear route for supplemental information supports accuracy while protecting case confidentiality; that is the consideration when a team tries to explain how later contact will be managed. The examiner should avoid casual case discussion; the priority under these facts is to check participant wellbeing after a difficult interview.

B:

Closing questions can lead to corroboration rather than premature judgment; it can be useful for efforts to identify additional documentary leads at the close. New contacts and documents should enter the case plan; the immediate evidentiary task here is to check participant wellbeing after a difficult interview.

D:

A neutral summary can expose misunderstandings while the witness is present; that principle applies when the team needs to summarize key facts before ending a long session. Corrections should be attributed and recorded accurately; it does not settle how to check participant wellbeing after a difficult interview in this situation.

Question 175

A suspect terminates a meeting before responding to the final question. Which procedure would best allow investigators to record the time and reason an interview ended?

  1. Document the ending and unanswered points without treating silence as guilt
  2. Ask which records or people could verify the account
  3. Recap significant points and ask for corrections or omissions
  4. Provide a secure authorized follow-up channel

Explanation

Correct Answer

A:

A complete record distinguishes unfinished inquiry from a damaging inference. Future steps must honor applicable rights.

Incorrect Answers

B:

Closing questions can lead to corroboration rather than premature judgment; this addresses a different question: how to identify additional documentary leads at the close. New contacts and documents should enter the case plan; it serves another purpose, not the immediate need to record the time and reason an interview ended.

C:

A neutral summary can expose misunderstandings while the witness is present; this is primarily relevant when the objective is to summarize key facts before ending a long session. Corrections should be attributed and recorded accurately; it does not address the specific requirement to record the time and reason an interview ended.

D:

A clear route for supplemental information supports accuracy while protecting case confidentiality; this is a sensible safeguard where the issue is to explain how later contact will be managed. The examiner should avoid casual case discussion; it is not a substitute for a step that would record the time and reason an interview ended.

Question 176

An elderly supplier struggles to maintain concentration after a lengthy session. What is the strongest investigative approach to adapt an interview for an older witness with fatigue?

  1. Arrange an independent safe interview with restricted disclosure
  2. Use shorter sessions and confirm understanding without pressure
  3. Use a trauma-informed pace and avoid unnecessarily repetitive demands
  4. Distinguish technical possibility from evidence of actual modification
  5. Use accessible read-back and independent verification of comprehension

Explanation

Correct Answer

B:

Pacing and accessible questions can improve reliability. Fatigue-related errors should not be treated as deliberate evasion.

Incorrect Answers

A:

Power imbalance may affect willingness to speak; it protects the separate goal to protect a junior employee from intimidation. Appropriate safeguards help elicit an account without promising outcomes beyond the examiner's authority; the immediate evidentiary task here is to adapt an interview for an older witness with fatigue.

C:

Supportive methods can reduce additional harm and preserve testimony quality; it supports the separate objective to handle traumatic accounts with care. An examiner should not infer truth or falsity from emotional intensity; the record instead calls for an action that would adapt an interview for an older witness with fatigue.

D:

Capability analysis identifies what is feasible, not who performed it; that principle applies when the team needs to interview a technical expert without assuming factual certainty. System artifacts and access records are required for attribution; it does not settle how to adapt an interview for an older witness with fatigue in this situation.

E:

An accurate statement requires understanding of its content; it belongs to a different stage of work: trying to record limitations when a witness needs communication assistance. Documenting the accommodation helps show what was acknowledged; the priority under these facts is to adapt an interview for an older witness with fatigue.

Question 177

An intern reports misconduct by a powerful executive and requests privacy. Which step is most appropriate to protect a junior employee from intimidation?

  1. Use shorter sessions and confirm understanding without pressure
  2. Distinguish technical possibility from evidence of actual modification
  3. Arrange an independent safe interview with restricted disclosure
  4. Use a trauma-informed pace and avoid unnecessarily repetitive demands

Explanation

Correct Answer

C:

Power imbalance may affect willingness to speak. Appropriate safeguards help elicit an account without promising outcomes beyond the examiner's authority.

Incorrect Answers

A:

Pacing and accessible questions can improve reliability; it belongs to a different stage of work: trying to adapt an interview for an older witness with fatigue. Fatigue-related errors should not be treated as deliberate evasion; that would leave unresolved the present need to protect a junior employee from intimidation.

B:

Capability analysis identifies what is feasible, not who performed it; this is primarily relevant when the objective is to interview a technical expert without assuming factual certainty. System artifacts and access records are required for attribution; the investigative step being tested here is how to protect a junior employee from intimidation.

D:

Supportive methods can reduce additional harm and preserve testimony quality; that is the consideration when a team tries to handle traumatic accounts with care. An examiner should not infer truth or falsity from emotional intensity; the investigative step being tested here is how to protect a junior employee from intimidation.

Question 178

A cybersecurity specialist describes a hypothetical way an administrator could alter audit logs but has no direct evidence it happened. The specialist becomes distressed while describing threatening messages about the inquiry. Which TWO interviewing approaches preserve factual precision and accommodate the witness? Choose TWO.

  1. Demand an immediate definite conclusion about log tampering before granting breaks
  2. Invite the manager accused of sending threats to supervise the specialist's interview for reassurance
  3. Distinguish technical possibility from evidence of actual modification
  4. Offer a supportive, non-repetitive pace while separately documenting the threatened specialist’s observations
  5. Use accessible read-back and independent verification of comprehension

Explanation

Correct Answers

C:

Capability analysis identifies what is feasible, not who performed it. System artifacts and access records are required for attribution.

D:

A slower, non-repetitive sequence gives this threatened specialist an opportunity to distinguish direct experience from technical supposition. The specialist's emotional state is not, by itself, evidence that a technical claim is true or false.

Incorrect Answers

A:

Pressure can distort recollection and does not convert a technical possibility into observed fact. A vulnerable witness requires support while the examiner distinguishes what was demonstrated from what was conjectured.

B:

Giving an implicated person access to the threatened witness's interview can undermine safety and influence the account. Supportive independent arrangements, limited disclosure, and careful source attribution are preferable.

E:

An accurate statement requires understanding of its content; this responds to a different operational need to record limitations when a witness needs communication assistance. Documenting the accommodation helps show what was acknowledged; this case asks for a means to interview a technical expert without assuming factual certainty instead.

Question 179

A witness becomes visibly distressed when discussing threats from a suspected fraudster. What action should the investigation team take to handle traumatic accounts with care?

  1. Use accessible read-back and independent verification of comprehension
  2. Use a trauma-informed pace and avoid unnecessarily repetitive demands
  3. Arrange an independent safe interview with restricted disclosure
  4. Use shorter sessions and confirm understanding without pressure

Explanation

Correct Answer

B:

Supportive methods can reduce additional harm and preserve testimony quality. An examiner should not infer truth or falsity from emotional intensity.

Incorrect Answers

A:

An accurate statement requires understanding of its content; it protects the separate goal to record limitations when a witness needs communication assistance. Documenting the accommodation helps show what was acknowledged; the priority under these facts is to handle traumatic accounts with care.

C:

Power imbalance may affect willingness to speak; that principle applies when the team needs to protect a junior employee from intimidation. Appropriate safeguards help elicit an account without promising outcomes beyond the examiner's authority; the required investigative decision is to handle traumatic accounts with care.

D:

Pacing and accessible questions can improve reliability; it protects the separate goal to adapt an interview for an older witness with fatigue. Fatigue-related errors should not be treated as deliberate evasion; that would leave unresolved the present need to handle traumatic accounts with care.

Question 180

A person with limited literacy cannot review a written account in the usual way. Which investigative method is best suited to record limitations when a witness needs communication assistance?

  1. Arrange an independent safe interview with restricted disclosure
  2. Use accessible read-back and independent verification of comprehension
  3. Identify each transaction and ask the witness about their separate circumstances
  4. Use a trauma-informed pace and avoid unnecessarily repetitive demands
  5. Distinguish technical possibility from evidence of actual modification
  6. Use shorter sessions and confirm understanding without pressure

Explanation

Correct Answer

B:

An accurate statement requires understanding of its content. Documenting the accommodation helps show what was acknowledged.

Incorrect Answers

A:

Power imbalance may affect willingness to speak; this is primarily relevant when the objective is to protect a junior employee from intimidation. Appropriate safeguards help elicit an account without promising outcomes beyond the examiner's authority; it does not settle how to record limitations when a witness needs communication assistance in this situation.

C:

Similar transactions can be conflated in memory; it describes an action suited to reconcile a witness account with transaction history. A detailed comparison may resolve whether the witness was present for both; the immediate evidentiary task here is to record limitations when a witness needs communication assistance.

D:

Supportive methods can reduce additional harm and preserve testimony quality; this is a sensible safeguard where the issue is to handle traumatic accounts with care. An examiner should not infer truth or falsity from emotional intensity; this case asks for a means to record limitations when a witness needs communication assistance instead.

E:

Capability analysis identifies what is feasible, not who performed it; it can be useful for efforts to interview a technical expert without assuming factual certainty. System artifacts and access records are required for attribution; it is not a substitute for a step that would record limitations when a witness needs communication assistance.

F:

Pacing and accessible questions can improve reliability; this concerns the distinct task of deciding how to adapt an interview for an older witness with fatigue. Fatigue-related errors should not be treated as deliberate evasion; the record instead calls for an action that would record limitations when a witness needs communication assistance.

Certified Fraud Examiner - Investigation (CFE - Investigation) Practice Tests