ACFE CFE - Law (Certified Fraud Examiner - Law) Practice Test 32

Question 310

An organization discovers a privileged memo accidentally included in a civil production. Which process should be considered?

  1. Data minimization
  2. Privilege screening in review
  3. Evidence retention and lawful disposal
  4. Clawback and inadvertent disclosure

Explanation

Correct Answer

D:

Rules such as FRE 502 and protective agreements may address effects of inadvertent privilege disclosure when their requirements are met.

Incorrect Answers

A:

Sensitive personal data collection and use should be limited to lawful, relevant needs under the applicable privacy framework; here the operative distinction is Clawback and inadvertent disclosure.

B:

Documents potentially covered by legal privilege require controlled review and handling before external production or substantive use; those prerequisites should not be confused with Clawback and inadvertent disclosure.

C:

Retention, litigation hold and lawful disposal obligations should be assessed before preserving or destroying records outside case scope; clawback and inadvertent disclosure addresses the distinct legal requirement stated in the facts.

Question 311

An investigator discloses a witness's private health information despite no link to the fraud issues. Which rule of practice is implicated?

  1. Data minimization
  2. Medical-treatment statement exception
  3. Privilege screening in review
  4. Clawback and inadvertent disclosure
  5. Evidence retention and lawful disposal

Explanation

Correct Answer

A:

Sensitive personal data collection and use should be limited to lawful, relevant needs under the applicable privacy framework.

Incorrect Answers

B:

Rule 803(4) may permit qualifying statements reasonably pertinent to diagnosis or treatment, subject to the rule's stated purpose and content; that concept must be distinguished from Data minimization here.

C:

Documents potentially covered by legal privilege require controlled review and handling before external production or substantive use; the circumstances point to Data minimization rather than that separate test.

D:

Rules such as FRE 502 and protective agreements may address effects of inadvertent privilege disclosure when their requirements are met; data minimization is the issue raised by the described conduct.

E:

Retention, litigation hold and lawful disposal obligations should be assessed before preserving or destroying records outside case scope; the inquiry instead concerns Data minimization, with its own elements.

Question 312

An auditor holds unrelated, unrequested client records after the authorized investigation ends. Which handling consideration applies?

  1. Evidence retention and lawful disposal
  2. Clawback and inadvertent disclosure
  3. Data minimization
  4. Privilege screening in review

Explanation

Correct Answer

A:

Retention, litigation hold and lawful disposal obligations should be assessed before preserving or destroying records outside case scope.

Incorrect Answers

B:

Rules such as FRE 502 and protective agreements may address effects of inadvertent privilege disclosure when their requirements are met; the relevant step in this scenario is Evidence retention and lawful disposal.

C:

Sensitive personal data collection and use should be limited to lawful, relevant needs under the applicable privacy framework; here the operative distinction is Evidence retention and lawful disposal.

D:

Documents potentially covered by legal privilege require controlled review and handling before external production or substantive use; those prerequisites should not be confused with Evidence retention and lawful disposal.

Question 313

A court asks if a recorded statement was made during a medical visit for diagnosis or treatment. Which exception may be examined?

  1. Statement against interest
  2. Medical-treatment statement exception
  3. Former-testimony exception
  4. Dying declaration

Explanation

Correct Answer

B:

Rule 803(4) may permit qualifying statements reasonably pertinent to diagnosis or treatment, subject to the rule's stated purpose and content.

Incorrect Answers

A:

Rule 804(b)(3) has requirements concerning unavailability and statement adversity; statements against interest differ from opposing-party admissions; medical-treatment statement exception raises a different threshold from this alternative.

C:

Rule 804(b)(1) can admit qualifying prior testimony when the declarant is unavailable and the earlier examination opportunity and motive requirements are met; that concept must be distinguished from Medical-treatment statement exception here.

D:

Rule 804(b)(2) addresses statements under belief of imminent death about its cause or circumstances in specified civil and homicide matters; the circumstances point to Medical-treatment statement exception rather than that separate test.

Question 314

A witness has died, but a prior testimony transcript was given with a meaningful earlier opportunity to cross-examine. Which exception may apply?

  1. Statement against interest
  2. Dying declaration
  3. Former-testimony exception
  4. Medical-treatment statement exception
  5. Custodian and export foundation

Explanation

Correct Answer

C:

Rule 804(b)(1) can admit qualifying prior testimony when the declarant is unavailable and the earlier examination opportunity and motive requirements are met.

Incorrect Answers

A:

Rule 804(b)(3) has requirements concerning unavailability and statement adversity; statements against interest differ from opposing-party admissions; the inquiry instead concerns Former-testimony exception, with its own elements.

B:

Rule 804(b)(2) addresses statements under belief of imminent death about its cause or circumstances in specified civil and homicide matters; the relevant step in this scenario is Former-testimony exception.

D:

Rule 803(4) may permit qualifying statements reasonably pertinent to diagnosis or treatment, subject to the rule's stated purpose and content; here the operative distinction is Former-testimony exception.

E:

The proponent should establish what data were retained, how export occurred and what the log fields mean to avoid overclaiming completeness; those prerequisites should not be confused with Former-testimony exception.

Question 315

Two unavailable witnesses leave statements in an investigation that also includes a violent assault. (1) Believing death imminent, a seriously injured victim identifies the assailant responsible for the injury before dying; which narrowly defined hearsay exception might be relevant in an appropriate proceeding? (2) A now-unavailable business partner previously acknowledged diverting funds in a statement exposing the partner to substantial financial liability; which other exception should counsel assess? Choose TWO.

  1. Medical-treatment statement exception
  2. Former-testimony exception
  3. Dying declaration
  4. Statement against interest

Explanation

Correct Answers

C:

Rule 804(b)(2) addresses statements under belief of imminent death about its cause or circumstances in specified civil and homicide matters; it specifically answers numbered situation 1.

D:

Rule 804(b)(3) has requirements concerning unavailability and statement adversity; statements against interest differ from opposing-party admissions; it specifically answers numbered situation 2.

Incorrect Answers

A:

Rule 803(4) may permit qualifying statements reasonably pertinent to diagnosis or treatment, subject to the rule's stated purpose and content; the separate questions call for dying declaration and statement against interest, while no prompt asks for this additional rule.

B:

Rule 804(b)(1) can admit qualifying prior testimony when the declarant is unavailable and the earlier examination opportunity and motive requirements are met; the separate questions call for dying declaration and statement against interest, while no prompt asks for this additional rule.

Question 316

A declarant cannot testify at trial, and a proposed statement exposed that person to criminal liability when made. Under Federal Rule of Evidence 804(b)(3), which additional protection is especially important when that statement is offered in a criminal case?

  1. Requiring the unavailable declarant to give the same account again at trial
  2. Treating the statement as admissible solely because it is digitally stored
  3. Corroborating circumstances that clearly indicate trustworthiness where required by the rule
  4. A blanket rule accepting every unsworn accusation against another person

Explanation

Correct Answer

C:

Rule 804(b)(3) requires the declaration to be genuinely against interest and, in criminal proceedings, corroborating circumstances clearly indicating its trustworthiness.

Incorrect Answers

A:

The rule presupposes an unavailable declarant as defined by Rule 804(a); its special corroboration analysis does not turn on obtaining the very live testimony the premise excludes.

B:

Reliable storage can help establish authenticity, but it cannot replace proof that the statement was genuinely against penal interest and supported by corroborating circumstances.

D:

Self-serving blame-shifting statements do not qualify merely because they accompany some incriminating admissions.

Question 317

An online provider's platform exports a formal audit log after receiving valid legal process. What is crucial before relying on it?

  1. Custodian and export foundation
  2. Tool validation and reconciliation
  3. Physical-context evidence
  4. Timestamp interpretation

Explanation

Correct Answer

A:

The proponent should establish what data were retained, how export occurred and what the log fields mean to avoid overclaiming completeness.

Incorrect Answers

B:

Investigators should examine tool methods and artifacts, replicate results where possible and explain discrepancies rather than select a preferred number blindly; those prerequisites should not be confused with Custodian and export foundation.

C:

Scene position and association can matter to ownership or opportunity and should be recorded contemporaneously rather than reconstructed later; custodian and export foundation addresses the distinct legal requirement stated in the facts.

D:

Digital timelines may depend on device clock, time-zone and synchronization information, so a raw value is not always a reliable event time; custodian and export foundation raises a different threshold from this alternative.

Question 318

An examiner recovers a deleted chat fragment but cannot establish time-zone settings. Which evidentiary risk is present?

  1. Custodian and export foundation
  2. Timestamp interpretation
  3. Tool validation and reconciliation
  4. Physical-context evidence

Explanation

Correct Answer

B:

Digital timelines may depend on device clock, time-zone and synchronization information, so a raw value is not always a reliable event time.

Incorrect Answers

A:

The proponent should establish what data were retained, how export occurred and what the log fields mean to avoid overclaiming completeness; the circumstances point to Timestamp interpretation rather than that separate test.

C:

Investigators should examine tool methods and artifacts, replicate results where possible and explain discrepancies rather than select a preferred number blindly; timestamp interpretation is the issue raised by the described conduct.

D:

Scene position and association can matter to ownership or opportunity and should be recorded contemporaneously rather than reconstructed later; the inquiry instead concerns Timestamp interpretation, with its own elements.

Question 319

Two forensic tools report different deleted-file counts from one disk image. Which response best protects reliability?

  1. Tool validation and reconciliation
  2. Physical-context evidence
  3. Custodian and export foundation
  4. Timestamp interpretation

Explanation

Correct Answer

A:

Investigators should examine tool methods and artifacts, replicate results where possible and explain discrepancies rather than select a preferred number blindly.

Incorrect Answers

B:

Scene position and association can matter to ownership or opportunity and should be recorded contemporaneously rather than reconstructed later; here the operative distinction is Tool validation and reconciliation.

C:

The proponent should establish what data were retained, how export occurred and what the log fields mean to avoid overclaiming completeness; those prerequisites should not be confused with Tool validation and reconciliation.

D:

Digital timelines may depend on device clock, time-zone and synchronization information, so a raw value is not always a reliable event time; tool validation and reconciliation addresses the distinct legal requirement stated in the facts.

Question 320

A forensic collector failed to record the original location of a USB drive found on a desk. Which deficiency is most direct?

  1. Tool validation and reconciliation
  2. Custodian and export foundation
  3. Physical-context evidence
  4. Timestamp interpretation

Explanation

Correct Answer

C:

Scene position and association can matter to ownership or opportunity and should be recorded contemporaneously rather than reconstructed later.

Incorrect Answers

A:

Investigators should examine tool methods and artifacts, replicate results where possible and explain discrepancies rather than select a preferred number blindly; that concept must be distinguished from Physical-context evidence here.

B:

The proponent should establish what data were retained, how export occurred and what the log fields mean to avoid overclaiming completeness; the circumstances point to Physical-context evidence rather than that separate test.

D:

Digital timelines may depend on device clock, time-zone and synchronization information, so a raw value is not always a reliable event time; physical-context evidence is the issue raised by the described conduct.

Certified Fraud Examiner - Law (CFE - Law) Practice Tests