Which of the following types of files is the most difficult to recover during a digital forensic examination?

• A.Overwritten files
• B.Deleted until
• C.Deleted link (shortcut) files
• D.Hidden files

Comment: *

Name: *

Email: *

Verification: *

Which of the following pieces of information should be documented in a memorandum that details the basis for a covert investigation?

• A.A description of all known associates of the parties to be surveilled.
• B.Dates and locations of all expected interactions with the subject.
• C.A description of the process used to determine the cause for investigation.
• D.The information that is expected to be gained from the covert investigation.

Comment: *

Name: *

Email: *

Verification: *

The Financial Action Task Force (FATF) Recommendations suggest that countries should do which of the following?

• A.Use a risk-based approach when creating and establishing their anti-money laundering policies.
• B.Require financial institutions to monitor their customers ' social media activity for signs of money laundering.
• C.Only conduct business with other countries that comply with the anti-money laundering recommendations.
• D.Impose a sentence of five years of imprisonment for all money laundering and terrorist financing convictions.

Comment: *

Name: *

Email: *

Verification: *

Which of the following questions would be MOST EFFECTIVE when establishing a baseline during an interview?

• A." Do you know who had access to the file? "
• B." Are you familiar with the company ' s policies regarding ethics? "
• C." Have you committed any misconduct against the company? "
• D." How long have you been in this department? "

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about fraud examination reports is TRUE?

• A.One purpose of a fraud examination report is to confirm a party's liability for losses caused by fraud and initiate the recovery process.
• B.One purpose of a fraud examination report is to share the fraud examiner's opinions and the basis for those opinions.
• C.Fraud examiners should assume that access to their fraud examination reports is limited to parties directly involved in the case.
• D.Fraud examiners should assume that their fraud examination reports might be shared with members of the media.

Comment: *

Name: *

Email: *

Verification: *