ACFE CFE - Investigation (Certified Fraud Examiner - Investigation) Practice Test 29

Question 280

Access logs and camera footage already show who entered the locked stockroom. Which response most directly enables the examiner to choose less intrusive alternatives when adequate?

  1. Require a factual investigative basis before covert activity
  2. Define observable events, limits, and stopping conditions
  3. Analyze existing authenticated records before placing undercover staff
  4. Assess a narrowly scoped covert plan with independent approval
  5. Route authorization through an unconflicted control function

Explanation

Correct Answer

C:

Necessity and proportionality favor less intrusive evidence when it meets the objective. Covert deployment adds risks without necessarily improving proof.

Incorrect Answers

A:

Personal dislike does not justify surveillance; it belongs to a different stage of work: trying to avoid using covert methods for a vague suspicion. A defined allegation and lawful authority are required to support intrusive collection; the facts presented call first for a way to choose less intrusive alternatives when adequate.

B:

Clear objectives make covert activity manageable and auditable; it protects the separate goal to define clear objectives for an undercover assignment. An open-ended mission can drift into irrelevant collection or unsafe exposure; it does not settle how to choose less intrusive alternatives when adequate in this situation.

D:

Covert methods carry elevated privacy and safety risks; this addresses a different question: how to recognize when covert methods may be proportionate. Specific predication, necessity, and authorization should justify their use over less intrusive alternatives; this case asks for a means to choose less intrusive alternatives when adequate instead.

E:

A conflicted subject must not control investigative methods; this concerns the distinct task of deciding how to plan independent oversight of a covert operation. Independent authorization helps ensure lawful scope and trustworthy decisions; the priority under these facts is to choose less intrusive alternatives when adequate.

Question 281

A company wishes to observe delivery activity visible from a permitted public viewpoint. Which next step best helps the team to establish who visited a suspect location lawfully?

  1. Reject intrusive monitoring and seek lawful alternatives
  2. Define a relevant time window and field of observation
  3. Use authorized, documented observation without trespass
  4. Corroborate identity using independent records and reliable features

Explanation

Correct Answer

C:

Observations from a lawful position may establish movements and timing. Privacy and surveillance rules still vary by jurisdiction.

Incorrect Answers

A:

Highly private spaces demand heightened protection; this responds to a different operational need to avoid secretly recording areas with high privacy expectations. Fraud suspicion does not create unrestricted surveillance powers; the facts presented call first for a way to establish who visited a suspect location lawfully.

B:

Targeted surveillance limits unnecessary personal-data collection; it can be useful for efforts to calibrate surveillance to the relevant time period. Scope should follow the facts and retention requirements; it serves another purpose, not the immediate need to establish who visited a suspect location lawfully.

D:

Video may establish an event without identifying the actor; this is a sensible safeguard where the issue is to check whether observational evidence establishes identity. Badge logs, rosters, and additional footage may resolve attribution; it does not settle how to establish who visited a suspect location lawfully in this situation.

Question 282

An investigator suggests installing a camera inside an employee restroom. What action should the investigation team take to avoid secretly recording areas with high privacy expectations?

  1. Use authorized, documented observation without trespass
  2. Specify a relevant time window and field of observation
  3. Corroborate identity using independent records and reliable features
  4. Reject intrusive monitoring and seek lawful alternatives

Explanation

Correct Answer

D:

Highly private spaces demand heightened protection. Fraud suspicion does not create unrestricted surveillance powers.

Incorrect Answers

A:

Observations from a lawful position may establish movements and timing; it protects the separate goal to establish who visited a suspect location lawfully. Privacy and surveillance rules still vary by jurisdiction; the facts presented call first for a way to avoid secretly recording areas with high privacy expectations.

B:

Targeted surveillance limits unnecessary personal-data collection; this addresses a different question: how to calibrate surveillance to the relevant time period. Scope should follow the facts and retention requirements; the examiner still needs to avoid secretly recording areas with high privacy expectations.

C:

Video may establish an event without identifying the actor; it describes an action suited to check whether observational evidence establishes identity. Badge logs, rosters, and additional footage may resolve attribution; the priority under these facts is to avoid secretly recording areas with high privacy expectations.

Question 283

Losses arise only during weekend night shifts, but the team proposes months of unrelated office filming. Which investigative method is best suited to calibrate surveillance to the relevant time period?

  1. Define a relevant time window and field of observation
  2. Reject intrusive monitoring and seek lawful alternatives
  3. Corroborate identity using independent records and reliable features
  4. Employ authorized, documented observation without trespass

Explanation

Correct Answer

A:

Targeted surveillance limits unnecessary personal-data collection. Scope should follow the facts and retention requirements.

Incorrect Answers

B:

Highly private spaces demand heightened protection; it protects the separate goal to avoid secretly recording areas with high privacy expectations. Fraud suspicion does not create unrestricted surveillance powers; the record instead calls for an action that would calibrate surveillance to the relevant time period.

C:

Video may establish an event without identifying the actor; its purpose in an investigation is to check whether observational evidence establishes identity. Badge logs, rosters, and additional footage may resolve attribution; the immediate evidentiary task here is to calibrate surveillance to the relevant time period.

D:

Observations from a lawful position may establish movements and timing; this concerns the distinct task of deciding how to establish who visited a suspect location lawfully. Privacy and surveillance rules still vary by jurisdiction; the immediate evidentiary task here is to calibrate surveillance to the relevant time period.

Question 284

Night footage shows a person carrying boxes, but the face is obscured. What should the examiner select to check whether observational evidence establishes identity?

  1. Define a relevant time window and field of observation
  2. Use lawful locations and a safety-reviewed observation protocol
  3. Use authorized, documented observation without trespass
  4. Corroborate identity using independent records and reliable features
  5. Reject intrusive monitoring and seek lawful alternatives

Explanation

Correct Answer

D:

Video may establish an event without identifying the actor. Badge logs, rosters, and additional footage may resolve attribution.

Incorrect Answers

A:

Targeted surveillance limits unnecessary personal-data collection; it supports the separate objective to calibrate surveillance to the relevant time period. Scope should follow the facts and retention requirements; the facts presented call first for a way to check whether observational evidence establishes identity.

B:

An undercover purpose does not authorize trespass or dangerous pursuit; it belongs to a different stage of work: trying to maintain safety and lawful access during mobile observation. Observers should prioritize safety and admissible collection; the record instead calls for an action that would check whether observational evidence establishes identity.

C:

Observations from a lawful position may establish movements and timing; that principle applies when the team needs to establish who visited a suspect location lawfully. Privacy and surveillance rules still vary by jurisdiction; it would not by itself meet the stated need to check whether observational evidence establishes identity.

E:

Highly private spaces demand heightened protection; this concerns the distinct task of deciding how to avoid secretly recording areas with high privacy expectations. Fraud suspicion does not create unrestricted surveillance powers; the examiner still needs to check whether observational evidence establishes identity.

Question 285

A field observer plans to follow a suspected courier onto restricted private property. What should be done to maintain safety and lawful access during mobile observation?

  1. Define a relevant time window and field of observation
  2. Use authorized, documented observation without trespass
  3. Reject intrusive monitoring and seek lawful alternatives
  4. Use lawful locations and a safety-reviewed observation protocol

Explanation

Correct Answer

D:

An undercover purpose does not authorize trespass or dangerous pursuit. Observers should prioritize safety and admissible collection.

Incorrect Answers

A:

Targeted surveillance limits unnecessary personal-data collection; that is the consideration when a team tries to calibrate surveillance to the relevant time period. Scope should follow the facts and retention requirements; the investigative step being tested here is how to maintain safety and lawful access during mobile observation.

B:

Observations from a lawful position may establish movements and timing; this is primarily relevant when the objective is to establish who visited a suspect location lawfully. Privacy and surveillance rules still vary by jurisdiction; it would not by itself meet the stated need to maintain safety and lawful access during mobile observation.

C:

Highly private spaces demand heightened protection; that principle applies when the team needs to avoid secretly recording areas with high privacy expectations. Fraud suspicion does not create unrestricted surveillance powers; the record instead calls for an action that would maintain safety and lawful access during mobile observation.

Question 286

A field agent recalls a conversation two weeks later but has no written record. Which response most directly enables the examiner to preserve contemporaneous undercover notes?

  1. Record collection conditions and each subsequent transfer
  2. Preserve an intact master and label derivative excerpts
  3. Make prompt dated observations distinguishing fact from inference
  4. Mark the lead uncorroborated pending independent verification

Explanation

Correct Answer

C:

Timely notes reduce memory drift and preserve sequence. The record should identify when and where each observation was made.

Incorrect Answers

A:

Provenance ties an exhibit to the event and supports authenticity; that is why it can help to log movement and custody of undercover exhibits. Unrecorded handling allows avoidable disputes over substitution; the record instead calls for an action that would preserve contemporaneous undercover notes.

B:

Edits can change context and create authenticity disputes; this is a sensible safeguard where the issue is to retain the original covert recording. The underlying recording must also have been acquired lawfully; the priority under these facts is to preserve contemporaneous undercover notes.

D:

Confidential intelligence can guide inquiry without constituting established fact; that principle applies when the team needs to distinguish intelligence leads from verified proof. Source credibility and objective corroboration remain separate questions; the record instead calls for an action that would preserve contemporaneous undercover notes.

Question 287

An undercover employee accepts a suspicious invoice in a meeting and later hands it to an analyst. Which action addresses the primary investigative need to log movement and custody of undercover exhibits?

  1. Make prompt dated observations distinguishing fact from inference
  2. Record collection conditions and each subsequent transfer
  3. Safeguard an intact master and label derivative excerpts
  4. Mark the lead uncorroborated pending independent verification

Explanation

Correct Answer

B:

Provenance ties an exhibit to the event and supports authenticity. Unrecorded handling allows avoidable disputes over substitution.

Incorrect Answers

A:

Timely notes reduce memory drift and preserve sequence; this responds to a different operational need to preserve contemporaneous undercover notes. The record should identify when and where each observation was made; the current question is about how to log movement and custody of undercover exhibits.

C:

Edits can change context and create authenticity disputes; it describes an action suited to retain the original covert recording. The underlying recording must also have been acquired lawfully; the record instead calls for an action that would log movement and custody of undercover exhibits.

D:

Confidential intelligence can guide inquiry without constituting established fact; this is primarily relevant when the objective is to distinguish intelligence leads from verified proof. Source credibility and objective corroboration remain separate questions; the current question is about how to log movement and custody of undercover exhibits.

Question 288

An informant reports a future cash handoff but no one has observed it. Which option best supports the objective to distinguish intelligence leads from verified proof?

  1. Record the reason, authorization, and revised limits
  2. Mark the lead uncorroborated pending independent verification
  3. Record collection conditions and each subsequent transfer
  4. Make prompt dated observations distinguishing fact from inference
  5. Ask what was firsthand and obtain independent corroboration
  6. Preserve an intact master and label derivative excerpts

Explanation

Correct Answer

B:

Confidential intelligence can guide inquiry without constituting established fact. Source credibility and objective corroboration remain separate questions.

Incorrect Answers

A:

An auditable change log shows whether the operation stayed within approved boundaries; it supports the separate objective to document operational changes during surveillance. Silent changes can obscure unlawful or irrelevant collection; the record instead calls for an action that would distinguish intelligence leads from verified proof.

C:

Provenance ties an exhibit to the event and supports authenticity; it belongs to a different stage of work: trying to log movement and custody of undercover exhibits. Unrecorded handling allows avoidable disputes over substitution; it does not settle how to distinguish intelligence leads from verified proof in this situation.

D:

Timely notes reduce memory drift and preserve sequence; it protects the separate goal to preserve contemporaneous undercover notes. The record should identify when and where each observation was made; the facts presented call first for a way to distinguish intelligence leads from verified proof.

E:

A source's proximity to events affects reliability; this is primarily relevant when the objective is to check a proposed informant's basis of knowledge. Competitive motives can increase the need to test information, not automatically invalidate it; the record instead calls for an action that would distinguish intelligence leads from verified proof.

F:

Edits can change context and create authenticity disputes; its purpose in an investigation is to retain the original covert recording. The underlying recording must also have been acquired lawfully; it serves another purpose, not the immediate need to distinguish intelligence leads from verified proof.

Question 289

An agent edits irrelevant discussion from a secret audio file before adding it to the case. Which technique best fits the need to retain the original covert recording?

  1. Preserve an intact master and label derivative excerpts
  2. Record the reason, authorization, and revised limits
  3. Record collection conditions and each subsequent transfer
  4. Make prompt dated observations distinguishing fact from inference

Explanation

Correct Answer

A:

Edits can change context and create authenticity disputes. The underlying recording must also have been acquired lawfully.

Incorrect Answers

B:

An auditable change log shows whether the operation stayed within approved boundaries; that is the consideration when a team tries to document operational changes during surveillance. Silent changes can obscure unlawful or irrelevant collection; the record instead calls for an action that would retain the original covert recording.

C:

Provenance ties an exhibit to the event and supports authenticity; this responds to a different operational need to log movement and custody of undercover exhibits. Unrecorded handling allows avoidable disputes over substitution; the current question is about how to retain the original covert recording.

D:

Timely notes reduce memory drift and preserve sequence; this concerns the distinct task of deciding how to preserve contemporaneous undercover notes. The record should identify when and where each observation was made; the investigative step being tested here is how to retain the original covert recording.

Question 290

A surveillance team changes locations after unexpectedly encountering a protected area. What is the strongest investigative approach to document operational changes during surveillance?

  1. Make prompt dated observations distinguishing fact from inference
  2. Record the reason, authorization, and revised limits
  3. Record collection conditions and each subsequent transfer
  4. Mark the lead uncorroborated pending independent verification

Explanation

Correct Answer

B:

An auditable change log shows whether the operation stayed within approved boundaries. Silent changes can obscure unlawful or irrelevant collection.

Incorrect Answers

A:

Timely notes reduce memory drift and preserve sequence; that principle applies when the team needs to preserve contemporaneous undercover notes. The record should identify when and where each observation was made; it does not address the specific requirement to document operational changes during surveillance.

C:

Provenance ties an exhibit to the event and supports authenticity; it protects the separate goal to log movement and custody of undercover exhibits. Unrecorded handling allows avoidable disputes over substitution; that would leave unresolved the present need to document operational changes during surveillance.

D:

Confidential intelligence can guide inquiry without constituting established fact; it can be useful for efforts to distinguish intelligence leads from verified proof. Source credibility and objective corroboration remain separate questions; the required investigative decision is to document operational changes during surveillance.

Certified Fraud Examiner - Investigation (CFE - Investigation) Practice Tests