ACFE CFE - Investigation (Certified Fraud Examiner - Investigation) Practice Test 19

Question 180

A person with limited literacy cannot review a written account in the usual way. Which investigative method is best suited to record limitations when a witness needs communication assistance?

  1. Arrange an independent safe interview with restricted disclosure
  2. Use accessible read-back and independent verification of comprehension
  3. Identify each transaction and ask the witness about their separate circumstances
  4. Use a trauma-informed pace and avoid unnecessarily repetitive demands
  5. Distinguish technical possibility from evidence of actual modification
  6. Use shorter sessions and confirm understanding without pressure

Explanation

Correct Answer

B:

An accurate statement requires understanding of its content. Documenting the accommodation helps show what was acknowledged.

Incorrect Answers

A:

Power imbalance may affect willingness to speak; this is primarily relevant when the objective is to protect a junior employee from intimidation. Appropriate safeguards help elicit an account without promising outcomes beyond the examiner's authority; it does not settle how to record limitations when a witness needs communication assistance in this situation.

C:

Similar transactions can be conflated in memory; it describes an action suited to reconcile a witness account with transaction history. A detailed comparison may resolve whether the witness was present for both; the immediate evidentiary task here is to record limitations when a witness needs communication assistance.

D:

Supportive methods can reduce additional harm and preserve testimony quality; this is a sensible safeguard where the issue is to handle traumatic accounts with care. An examiner should not infer truth or falsity from emotional intensity; this case asks for a means to record limitations when a witness needs communication assistance instead.

E:

Capability analysis identifies what is feasible, not who performed it; it can be useful for efforts to interview a technical expert without assuming factual certainty. System artifacts and access records are required for attribution; it is not a substitute for a step that would record limitations when a witness needs communication assistance.

F:

Pacing and accessible questions can improve reliability; this concerns the distinct task of deciding how to adapt an interview for an older witness with fatigue. Fatigue-related errors should not be treated as deliberate evasion; the record instead calls for an action that would record limitations when a witness needs communication assistance.

Question 181

A teller recalls one cash withdrawal while records show two on the same day. Which procedure would best allow investigators to reconcile a witness account with transaction history?

  1. Correlate user IDs, roles, and approval audit events
  2. Reconstruct lighting, distance, obstructions, and available footage
  3. Check authorized call metadata and related messages
  4. Identify each transaction and ask the witness about their separate circumstances

Explanation

Correct Answer

D:

Similar transactions can be conflated in memory. A detailed comparison may resolve whether the witness was present for both.

Incorrect Answers

A:

Names alone may not reliably identify a participant; it describes an action suited to compare a remembered name with system identifiers. Source records help resolve who held the account and what action occurred; the immediate evidentiary task here is to reconcile a witness account with transaction history.

B:

Perception depends on conditions; this responds to a different operational need to check whether a witness had a realistic viewing opportunity. A credible-seeming account still needs assessment of what could actually be observed; this case asks for a means to reconcile a witness account with transaction history instead.

C:

Communications records can support timing but may not reveal the call's content; this is a sensible safeguard where the issue is to verify a claimed conversation against communications data. The examiner should distinguish contact from agreement; the record instead calls for an action that would reconcile a witness account with transaction history.

Question 182

An executive says a supplier called immediately before an approval was entered. How should the examiner proceed to verify a claimed conversation against communications data?

  1. Identify each transaction and ask the witness about their separate circumstances
  2. Check authorized call metadata and related messages
  3. Reconstruct lighting, distance, obstructions, and available footage
  4. Cross-reference user IDs, roles, and approval audit events

Explanation

Correct Answer

B:

Communications records can support timing but may not reveal the call's content. The examiner should distinguish contact from agreement.

Incorrect Answers

A:

Similar transactions can be conflated in memory; its purpose in an investigation is to reconcile a witness account with transaction history. A detailed comparison may resolve whether the witness was present for both; it does not settle how to verify a claimed conversation against communications data in this situation.

C:

Perception depends on conditions; it protects the separate goal to check whether a witness had a realistic viewing opportunity. A credible-seeming account still needs assessment of what could actually be observed; the facts presented call first for a way to verify a claimed conversation against communications data.

D:

Names alone may not reliably identify a participant; its purpose in an investigation is to compare a remembered name with system identifiers. Source records help resolve who held the account and what action occurred; the priority under these facts is to verify a claimed conversation against communications data.

Question 183

A guard claims to have seen a person remove stock from a distant loading bay at night. Which response most directly enables the examiner to check whether a witness had a realistic viewing opportunity?

  1. Reconstruct lighting, distance, obstructions, and available footage
  2. Verify authorized call metadata and related messages
  3. Identify each transaction and ask the witness about their separate circumstances
  4. Correlate user IDs, roles, and approval audit events

Explanation

Correct Answer

A:

Perception depends on conditions. A credible-seeming account still needs assessment of what could actually be observed.

Incorrect Answers

B:

Communications records can support timing but may not reveal the call's content; it describes an action suited to verify a claimed conversation against communications data. The examiner should distinguish contact from agreement; that would leave unresolved the present need to check whether a witness had a realistic viewing opportunity.

C:

Similar transactions can be conflated in memory; this distinction matters when investigators must reconcile a witness account with transaction history. A detailed comparison may resolve whether the witness was present for both; this case asks for a means to check whether a witness had a realistic viewing opportunity instead.

D:

Names alone may not reliably identify a participant; this distinction matters when investigators must compare a remembered name with system identifiers. Source records help resolve who held the account and what action occurred; the priority under these facts is to check whether a witness had a realistic viewing opportunity.

Question 184

A witness recalls that Sam approved a payment, but multiple employees share that first name. Which action addresses the primary investigative need to compare a remembered name with system identifiers?

  1. Reconstruct lighting, distance, obstructions, and available footage
  2. Check entry logs, room booking, and plausible alternative access
  3. Correlate user IDs, roles, and approval audit events
  4. Check authorized call metadata and related messages
  5. Identify each transaction and ask the witness about their separate circumstances

Explanation

Correct Answer

C:

Names alone may not reliably identify a participant. Source records help resolve who held the account and what action occurred.

Incorrect Answers

A:

Perception depends on conditions; this concerns the distinct task of deciding how to check whether a witness had a realistic viewing opportunity. A credible-seeming account still needs assessment of what could actually be observed; that would leave unresolved the present need to compare a remembered name with system identifiers.

B:

A negative access log is not necessarily proof a meeting never happened; that principle applies when the team needs to test a claimed physical meeting objectively. Multiple independent sources and system limitations should be considered; the current question is about how to compare a remembered name with system identifiers.

D:

Communications records can support timing but may not reveal the call's content; its purpose in an investigation is to verify a claimed conversation against communications data. The examiner should distinguish contact from agreement; this case asks for a means to compare a remembered name with system identifiers instead.

E:

Similar transactions can be conflated in memory; that is why it can help to reconcile a witness account with transaction history. A detailed comparison may resolve whether the witness was present for both; the current question is about how to compare a remembered name with system identifiers.

Question 185

Two employees insist they met in a conference room while building access records suggest otherwise. Which option best supports the objective to test a claimed physical meeting objectively?

  1. Correlate user IDs, roles, and approval audit events
  2. Check entry logs, room booking, and plausible alternative access
  3. Check authorized call metadata and related messages
  4. Identify each transaction and ask the witness about their separate circumstances

Explanation

Correct Answer

B:

A negative access log is not necessarily proof a meeting never happened. Multiple independent sources and system limitations should be considered.

Incorrect Answers

A:

Names alone may not reliably identify a participant; that is why it can help to compare a remembered name with system identifiers. Source records help resolve who held the account and what action occurred; it serves another purpose, not the immediate need to test a claimed physical meeting objectively.

C:

Communications records can support timing but may not reveal the call's content; this distinction matters when investigators must verify a claimed conversation against communications data. The examiner should distinguish contact from agreement; that would leave unresolved the present need to test a claimed physical meeting objectively.

D:

Similar transactions can be conflated in memory; it belongs to a different stage of work: trying to reconcile a witness account with transaction history. A detailed comparison may resolve whether the witness was present for both; the facts presented call first for a way to test a claimed physical meeting objectively.

Question 186

An examiner believes a named employee is dishonest before meeting any witnesses. Which investigative method is best suited to challenge an early theory formed from an anonymous tip?

  1. Prepare neutral questions that permit competing explanations
  2. Separate documented prior history from present-event inquiries
  3. Evaluate each account against independent evidence
  4. Document the lack of corroboration without rewriting it as evasiveness

Explanation

Correct Answer

A:

Hypothesis awareness reduces selective questioning. A good interview plan includes facts that might disprove the allegation as well as support it.

Incorrect Answers

B:

Prior misconduct or allegations can bias interpretation; it protects the separate goal to recognize how prior information can shape questions. The current inquiry must stand on evidence connected to the present claim; the current question is about how to challenge an early theory formed from an anonymous tip.

C:

Confidence and authority are not substitutes for firsthand accuracy; this concerns the distinct task of deciding how to avoid letting the most confident witness dominate the narrative. Comparing sources prevents hierarchy from determining the factual conclusion; it serves another purpose, not the immediate need to challenge an early theory formed from an anonymous tip.

D:

A nonconfirming account is a legitimate result; it can be useful for efforts to ensure that a negative interview result is recorded fairly. Preserving it lets reviewers assess the complete evidence rather than only statements fitting the theory; the investigative step being tested here is how to challenge an early theory formed from an anonymous tip.

Question 187

A senior manager speaks emphatically while junior employees give more cautious accounts. What should the examiner select to avoid letting the most confident witness dominate the narrative?

  1. Allow reasonable time and avoid supplying possible answers
  2. Prepare neutral questions that permit competing explanations
  3. Evaluate each account against independent evidence
  4. Document the lack of corroboration without rewriting it as evasiveness

Explanation

Correct Answer

C:

Confidence and authority are not substitutes for firsthand accuracy. Comparing sources prevents hierarchy from determining the factual conclusion.

Incorrect Answers

A:

Silence may reflect recall or thought; that is why it can help to keep an interviewer from filling silences with assumptions. Suggestions inserted by the examiner can become contaminated response material; it does not address the specific requirement to avoid letting the most confident witness dominate the narrative.

B:

Hypothesis awareness reduces selective questioning; that is the consideration when a team tries to challenge an early theory formed from an anonymous tip. A good interview plan includes facts that might disprove the allegation as well as support it; the record instead calls for an action that would avoid letting the most confident witness dominate the narrative.

D:

A nonconfirming account is a legitimate result; this addresses a different question: how to ensure that a negative interview result is recorded fairly. Preserving it lets reviewers assess the complete evidence rather than only statements fitting the theory; it would not by itself meet the stated need to avoid letting the most confident witness dominate the narrative.

Question 188

A witness pauses before answering a question about a delivery. What should be done to keep an interviewer from filling silences with assumptions?

  1. Document the lack of corroboration without rewriting it as evasiveness
  2. Separate documented prior history from present-event inquiries
  3. Evaluate each account against independent evidence
  4. Allow reasonable time and avoid supplying possible answers
  5. Prepare neutral questions that permit competing explanations

Explanation

Correct Answer

D:

Silence may reflect recall or thought. Suggestions inserted by the examiner can become contaminated response material.

Incorrect Answers

A:

A nonconfirming account is a legitimate result; it supports the separate objective to ensure that a negative interview result is recorded fairly. Preserving it lets reviewers assess the complete evidence rather than only statements fitting the theory; it serves another purpose, not the immediate need to keep an interviewer from filling silences with assumptions.

B:

Prior misconduct or allegations can bias interpretation; this concerns the distinct task of deciding how to recognize how prior information can shape questions. The current inquiry must stand on evidence connected to the present claim; the current question is about how to keep an interviewer from filling silences with assumptions.

C:

Confidence and authority are not substitutes for firsthand accuracy; that principle applies when the team needs to avoid letting the most confident witness dominate the narrative. Comparing sources prevents hierarchy from determining the factual conclusion; it is not a substitute for a step that would keep an interviewer from filling silences with assumptions.

E:

Hypothesis awareness reduces selective questioning; this is a sensible safeguard where the issue is to challenge an early theory formed from an anonymous tip. A good interview plan includes facts that might disprove the allegation as well as support it; it does not settle how to keep an interviewer from filling silences with assumptions in this situation.

Question 189

An interviewer read a harsh disciplinary report before speaking to an employee about a different incident. Which action would most reliably help the team to recognize how prior information can shape questions?

  1. Allow reasonable time and avoid supplying possible answers
  2. Separate documented prior history from present-event inquiries
  3. Evaluate each account against independent evidence
  4. Prepare neutral questions that permit competing explanations

Explanation

Correct Answer

B:

Prior misconduct or allegations can bias interpretation. The current inquiry must stand on evidence connected to the present claim.

Incorrect Answers

A:

Silence may reflect recall or thought; it belongs to a different stage of work: trying to keep an interviewer from filling silences with assumptions. Suggestions inserted by the examiner can become contaminated response material; it is not a substitute for a step that would recognize how prior information can shape questions.

C:

Confidence and authority are not substitutes for firsthand accuracy; this is primarily relevant when the objective is to avoid letting the most confident witness dominate the narrative. Comparing sources prevents hierarchy from determining the factual conclusion; it would not by itself meet the stated need to recognize how prior information can shape questions.

D:

Hypothesis awareness reduces selective questioning; it describes an action suited to challenge an early theory formed from an anonymous tip. A good interview plan includes facts that might disprove the allegation as well as support it; it serves another purpose, not the immediate need to recognize how prior information can shape questions.

Question 190

A supposed key witness says they saw nothing and provides no additional leads. What would be the most defensible approach to ensure that a negative interview result is recorded fairly?

  1. Prepare neutral questions that permit competing explanations
  2. Assess each account against independent evidence
  3. Allow reasonable time and avoid supplying possible answers
  4. Document the lack of corroboration without rewriting it as evasiveness

Explanation

Correct Answer

D:

A nonconfirming account is a legitimate result. Preserving it lets reviewers assess the complete evidence rather than only statements fitting the theory.

Incorrect Answers

A:

Hypothesis awareness reduces selective questioning; its purpose in an investigation is to challenge an early theory formed from an anonymous tip. A good interview plan includes facts that might disprove the allegation as well as support it; it serves another purpose, not the immediate need to ensure that a negative interview result is recorded fairly.

B:

Confidence and authority are not substitutes for firsthand accuracy; it can be useful for efforts to avoid letting the most confident witness dominate the narrative. Comparing sources prevents hierarchy from determining the factual conclusion; the required investigative decision is to ensure that a negative interview result is recorded fairly.

C:

Silence may reflect recall or thought; this responds to a different operational need to keep an interviewer from filling silences with assumptions. Suggestions inserted by the examiner can become contaminated response material; it would not by itself meet the stated need to ensure that a negative interview result is recorded fairly.

Certified Fraud Examiner - Investigation (CFE - Investigation) Practice Tests