ACFE CFE - Investigation (Certified Fraud Examiner - Investigation) Practice Test 2

Question 10

A subsidiary stores encrypted records in an unfamiliar overseas system. What is the strongest investigative approach to ensure availability of specialist resources before collection?

  1. Invoke preassigned escalation and independent oversight roles
  2. Initiate a targeted evidence-preservation protocol
  3. Route external statements through a designated communications contact
  4. Identify forensic expertise, access authority, and budget at intake

Explanation

Correct Answer

D:

Early resource planning avoids destructive improvisation and unauthorized access. It clarifies which specialists can collect evidence lawfully and reliably across jurisdictions.

Incorrect Answers

A:

A documented response plan identifies who authorizes steps and who receives findings; it can be useful for efforts to assign decision authority after a credible allegation. Independent reporting helps prevent conflicted management from controlling the case; it would not by itself meet the stated need to ensure availability of specialist resources before collection.

B:

A preplanned hold directs custodians to preserve potentially relevant records before ordinary deletion; that principle applies when the team needs to keep investigators from deleting relevant systems data. It should specify systems, dates, ownership, and verification of compliance; the priority under these facts is to ensure availability of specialist resources before collection.

C:

A response plan coordinates accurate, limited public messaging; it can be useful for efforts to prepare for media inquiries without prejudicing the case. Investigators should not improvise factual conclusions or reveal protected witnesses; the immediate evidentiary task here is to ensure availability of specialist resources before collection.

Question 11

A complaint states only that the sales team is cooking the books. What should be done to convert a broad accusation into testable issues?

  1. Check for credit notes, voids, and legitimately reissued invoices
  2. List unanswered facts and evidence needed to resolve them
  3. Define transactions, persons, period, and assertions to test
  4. Sequence acquisition by risk of irreversible loss

Explanation

Correct Answer

C:

An allegation matrix converts vague language into falsifiable propositions. Clear boundaries guide proportionate collection and reveal what evidence would support or refute each assertion.

Incorrect Answers

A:

Fraud theory should test disconfirming as well as supporting information; this addresses a different question: how to test an alternative innocent explanation. Duplicate identifiers alone can result from corrections or separate accounting entities; the priority under these facts is to convert a broad accusation into testable issues.

B:

An evidence gap register shows precisely what remains uncertain; this responds to a different operational need to identify missing corroboration instead of reaching a verdict. It prevents a preliminary inconsistency from being reported as a verified fraudulent act; the current question is about how to convert a broad accusation into testable issues.

D:

Investigation plans should consider volatility, not only convenience; its purpose in an investigation is to prioritize the most perishable lead. Capturing at-risk records promptly protects later hypothesis testing; that would leave unresolved the present need to convert a broad accusation into testable issues.

Question 12

A vendor appears to have been paid twice for the same invoice number. Which action would most reliably help the team to test an alternative innocent explanation?

  1. List unanswered facts and evidence needed to resolve them
  2. Reassess the hypothesis and follow the reconciled evidence
  3. Check for credit notes, voids, and legitimately reissued invoices
  4. Define transactions, persons, period, and assertions to test
  5. Sequence acquisition by risk of irreversible loss

Explanation

Correct Answer

C:

Fraud theory should test disconfirming as well as supporting information. Duplicate identifiers alone can result from corrections or separate accounting entities.

Incorrect Answers

A:

An evidence gap register shows precisely what remains uncertain; it protects the separate goal to identify missing corroboration instead of reaching a verdict. It prevents a preliminary inconsistency from being reported as a verified fraudulent act; the current question is about how to test an alternative innocent explanation.

B:

A fraud theory is provisional and must evolve as facts emerge; this concerns the distinct task of deciding how to revise the examination theory when new facts contradict it. Treating an exculpatory finding seriously reduces confirmation bias and wasted work; it does not settle how to test an alternative innocent explanation in this situation.

D:

An allegation matrix converts vague language into falsifiable propositions; that is the consideration when a team tries to convert a broad accusation into testable issues. Clear boundaries guide proportionate collection and reveal what evidence would support or refute each assertion; the record instead calls for an action that would test an alternative innocent explanation.

E:

Investigation plans should consider volatility, not only convenience; this distinction matters when investigators must prioritize the most perishable lead. Capturing at-risk records promptly protects later hypothesis testing; the record instead calls for an action that would test an alternative innocent explanation.

Question 13

An employee interview conflicts with an unverified spreadsheet extracted by a colleague. What would be the most defensible approach to identify missing corroboration instead of reaching a verdict?

  1. Sequence acquisition by risk of irreversible loss
  2. List unanswered facts and evidence needed to resolve them
  3. Specify transactions, persons, period, and assertions to test
  4. Check for credit notes, voids, and legitimately reissued invoices

Explanation

Correct Answer

B:

An evidence gap register shows precisely what remains uncertain. It prevents a preliminary inconsistency from being reported as a verified fraudulent act.

Incorrect Answers

A:

Investigation plans should consider volatility, not only convenience; that is why it can help to prioritize the most perishable lead. Capturing at-risk records promptly protects later hypothesis testing; it would not by itself meet the stated need to identify missing corroboration instead of reaching a verdict.

C:

An allegation matrix converts vague language into falsifiable propositions; this is a sensible safeguard where the issue is to convert a broad accusation into testable issues. Clear boundaries guide proportionate collection and reveal what evidence would support or refute each assertion; the record instead calls for an action that would identify missing corroboration instead of reaching a verdict.

D:

Fraud theory should test disconfirming as well as supporting information; it supports the separate objective to test an alternative innocent explanation. Duplicate identifiers alone can result from corrections or separate accounting entities; the priority under these facts is to identify missing corroboration instead of reaching a verdict.

Question 14

The audit team learns that security-camera footage may be overwritten tonight. Which response is most appropriate to prioritize the most perishable lead?

  1. Check for credit notes, voids, and legitimately reissued invoices
  2. Sequence acquisition by risk of irreversible loss
  3. Enumerate unanswered facts and evidence needed to resolve them
  4. Define transactions, persons, period, and assertions to test

Explanation

Correct Answer

B:

Investigation plans should consider volatility, not only convenience. Capturing at-risk records promptly protects later hypothesis testing.

Incorrect Answers

A:

Fraud theory should test disconfirming as well as supporting information; that is the consideration when a team tries to test an alternative innocent explanation. Duplicate identifiers alone can result from corrections or separate accounting entities; this case asks for a means to prioritize the most perishable lead instead.

C:

An evidence gap register shows precisely what remains uncertain; this concerns the distinct task of deciding how to identify missing corroboration instead of reaching a verdict. It prevents a preliminary inconsistency from being reported as a verified fraudulent act; this case asks for a means to prioritize the most perishable lead instead.

D:

An allegation matrix converts vague language into falsifiable propositions; it describes an action suited to convert a broad accusation into testable issues. Clear boundaries guide proportionate collection and reveal what evidence would support or refute each assertion; it serves another purpose, not the immediate need to prioritize the most perishable lead.

Question 15

A payment initially believed to be fictitious is supported by independent delivery confirmations. Which procedure would best allow investigators to revise the examination theory when new facts contradict it?

  1. List unanswered facts and evidence needed to resolve them
  2. Check for credit notes, voids, and legitimately reissued invoices
  3. Reassess the hypothesis and follow the reconciled evidence
  4. Define transactions, persons, period, and assertions to test

Explanation

Correct Answer

C:

A fraud theory is provisional and must evolve as facts emerge. Treating an exculpatory finding seriously reduces confirmation bias and wasted work.

Incorrect Answers

A:

An evidence gap register shows precisely what remains uncertain; that principle applies when the team needs to identify missing corroboration instead of reaching a verdict. It prevents a preliminary inconsistency from being reported as a verified fraudulent act; the immediate evidentiary task here is to revise the examination theory when new facts contradict it.

B:

Fraud theory should test disconfirming as well as supporting information; this is a sensible safeguard where the issue is to test an alternative innocent explanation. Duplicate identifiers alone can result from corrections or separate accounting entities; the immediate evidentiary task here is to revise the examination theory when new facts contradict it.

D:

An allegation matrix converts vague language into falsifiable propositions; its purpose in an investigation is to convert a broad accusation into testable issues. Clear boundaries guide proportionate collection and reveal what evidence would support or refute each assertion; it is not a substitute for a step that would revise the examination theory when new facts contradict it.

Question 16

The suspected officer normally approves all compliance investigations. What is the strongest investigative approach to manage an allegation against the chief finance officer?

  1. Approve resources against a written case plan and risk assessment
  2. Separate fact-finding from management's disciplinary determination
  3. Engage qualified specialists under a defined scope
  4. Report through an unconflicted audit committee or designated authority
  5. Disclose the conflict and reassign sensitive interview duties

Explanation

Correct Answer

D:

Senior-level allegations require oversight outside the accused person's control. This protects authorization, confidentiality, and the independence of investigative judgments.

Incorrect Answers

A:

Budget oversight can coexist with investigator independence; this addresses a different question: how to control investigative expenditures without compromising purpose. Linking expenses to objectives helps management authorize necessary steps without dictating findings; the examiner still needs to manage an allegation against the chief finance officer.

B:

An examiner evaluates and reports evidence; authorized decision-makers apply employment policy and law; it can be useful for efforts to clarify who owns the final case decision. The distinction limits unsupported conclusions and role confusion; the examiner still needs to manage an allegation against the chief finance officer.

C:

Expertise and reliable tools are needed for defensible technical examination; that principle applies when the team needs to decide whether external experts are needed. Using untrained staff can damage evidence or produce interpretations beyond their capabilities; it does not settle how to manage an allegation against the chief finance officer in this situation.

E:

A real or apparent conflict can undermine credibility and objectivity; it protects the separate goal to address an investigator's personal relationship to a witness. Prompt disclosure lets independent leadership arrange appropriate safeguards before facts are gathered; it would not by itself meet the stated need to manage an allegation against the chief finance officer.

Question 17

A team member discovers that a principal witness is their sibling. Which step is most appropriate to address an investigator's personal relationship to a witness?

  1. Disclose the conflict and reassign sensitive interview duties
  2. Report through an unconflicted audit committee or designated authority
  3. Approve resources against a written case plan and risk assessment
  4. Engage qualified specialists under a defined scope

Explanation

Correct Answer

A:

A real or apparent conflict can undermine credibility and objectivity. Prompt disclosure lets independent leadership arrange appropriate safeguards before facts are gathered.

Incorrect Answers

B:

Senior-level allegations require oversight outside the accused person's control; that is the consideration when a team tries to manage an allegation against the chief finance officer. This protects authorization, confidentiality, and the independence of investigative judgments; the priority under these facts is to address an investigator's personal relationship to a witness.

C:

Budget oversight can coexist with investigator independence; it supports the separate objective to control investigative expenditures without compromising purpose. Linking expenses to objectives helps management authorize necessary steps without dictating findings; the required investigative decision is to address an investigator's personal relationship to a witness.

D:

Expertise and reliable tools are needed for defensible technical examination; this is primarily relevant when the objective is to decide whether external experts are needed. Using untrained staff can damage evidence or produce interpretations beyond their capabilities; it would not by itself meet the stated need to address an investigator's personal relationship to a witness.

Question 18

An internal audit unit needs to examine an encrypted phone beyond its technical competence. Management will authorize specialist spending only against a documented case budget. Which TWO decisions preserve technical reliability and accountable use of resources? Choose TWO.

  1. Engage qualified specialists under a defined scope
  2. Report through an unconflicted audit committee or designated authority
  3. Approve a defined forensic-specialist budget tied to the phone acquisition plan, not a preferred conclusion
  4. Separate fact-finding from management's disciplinary determination
  5. State the conflict and reassign sensitive interview duties

Explanation

Correct Answers

A:

Expertise and reliable tools are needed for defensible technical examination. Using untrained staff can damage evidence or produce interpretations beyond their capabilities.

C:

Budget authorization should attach to a documented specialist scope rather than the desired investigative outcome. In this phone-acquisition inquiry, itemized costs and approval controls make the expenditure defensible without directing the expert's conclusions.

Incorrect Answers

B:

Senior-level allegations require oversight outside the accused person's control; this is a sensible safeguard where the issue is to manage an allegation against the chief finance officer. This protects authorization, confidentiality, and the independence of investigative judgments; the immediate evidentiary task here is to decide whether external experts are needed.

D:

An examiner evaluates and reports evidence; authorized decision-makers apply employment policy and law; this addresses a different question: how to clarify who owns the final case decision. The distinction limits unsupported conclusions and role confusion; that would leave unresolved the present need to decide whether external experts are needed.

E:

A real or apparent conflict can undermine credibility and objectivity; this concerns the distinct task of deciding how to address an investigator's personal relationship to a witness. Prompt disclosure lets independent leadership arrange appropriate safeguards before facts are gathered; the current question is about how to decide whether external experts are needed.

Question 19

A case requires overseas travel and urgent translation services. What action should the investigation team take to control investigative expenditures without compromising purpose?

  1. Approve resources against a written case plan and risk assessment
  2. Engage qualified specialists under a defined scope
  3. Report through an unconflicted audit committee or designated authority
  4. Separate fact-finding from management's disciplinary determination

Explanation

Correct Answer

A:

Budget oversight can coexist with investigator independence. Linking expenses to objectives helps management authorize necessary steps without dictating findings.

Incorrect Answers

B:

Expertise and reliable tools are needed for defensible technical examination; it can be useful for efforts to decide whether external experts are needed. Using untrained staff can damage evidence or produce interpretations beyond their capabilities; the required investigative decision is to control investigative expenditures without compromising purpose.

C:

Senior-level allegations require oversight outside the accused person's control; it describes an action suited to manage an allegation against the chief finance officer. This protects authorization, confidentiality, and the independence of investigative judgments; the current question is about how to control investigative expenditures without compromising purpose.

D:

An examiner evaluates and reports evidence; authorized decision-makers apply employment policy and law; it supports the separate objective to clarify who owns the final case decision. The distinction limits unsupported conclusions and role confusion; the examiner still needs to control investigative expenditures without compromising purpose.

Question 20

Fraud examiners are being asked to decide whether an employee must be dismissed. Which investigative method is best suited to clarify who owns the final case decision?

  1. Disclose the conflict and reassign sensitive interview duties
  2. Report through an unconflicted audit committee or designated authority
  3. Retain qualified specialists under a defined scope
  4. Separate fact-finding from management's disciplinary determination
  5. Approve resources against a written case plan and risk assessment

Explanation

Correct Answer

D:

An examiner evaluates and reports evidence; authorized decision-makers apply employment policy and law. The distinction limits unsupported conclusions and role confusion.

Incorrect Answers

A:

A real or apparent conflict can undermine credibility and objectivity; that principle applies when the team needs to address an investigator's personal relationship to a witness. Prompt disclosure lets independent leadership arrange appropriate safeguards before facts are gathered; the required investigative decision is to clarify who owns the final case decision.

B:

Senior-level allegations require oversight outside the accused person's control; its purpose in an investigation is to manage an allegation against the chief finance officer. This protects authorization, confidentiality, and the independence of investigative judgments; the facts presented call first for a way to clarify who owns the final case decision.

C:

Expertise and reliable tools are needed for defensible technical examination; this addresses a different question: how to decide whether external experts are needed. Using untrained staff can damage evidence or produce interpretations beyond their capabilities; this case asks for a means to clarify who owns the final case decision instead.

E:

Budget oversight can coexist with investigator independence; that is the consideration when a team tries to control investigative expenditures without compromising purpose. Linking expenses to objectives helps management authorize necessary steps without dictating findings; this case asks for a means to clarify who owns the final case decision instead.

Certified Fraud Examiner - Investigation (CFE - Investigation) Practice Tests