Which of the following is the MOST ACCURATE statement regarding the analysis phase in digital forensic investigations?

• A.The analysis phase of digital forensic investigations should not commence unless it is venfied that the suspect devices do not contain relevant data
• B.When analyzing data for evidence, fraud examiners should look for exculpatory evidence But not inculpatory evidence
• C.The primary concern when analyzing digital evidence is to maintain the integrity of the data at all times
• D.During the analysis phase, it is best to use just one forensic tool for identifying, extracting, and collecting digital evidence

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements concerning a well-written fraud examination report is most accurate?

• A.The report should convoy all information provided by witness
• B.The report writer should avoid technical jargon where possible
• C.Signed copies of the fraud examiner s Interview notes should be used to report interview details
• D.Only relevant facts that support the fraud allegation should be included in the report

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about the process of obtaining a verbal confession is NOT true?

• A.The transition from the accusation to the confession should occur when the accused supplies the first detailed information about the offense.
• B.Fraudsters tend to overestimate the amount of funds involved in the offense to relieve themselves of the guilt of their dishonest actions.
• C.If the subject lies about an aspect of the offense in the process of confessing, it is best to proceed initially as if the falsehood has been accepted as truth.
• D.The three general approaches to obtaining a verbal confession are chronologically, by transaction, or by event.

Comment: *

Name: *

Email: *

Verification: *

Shane, a Certified Fraud Examiner (CFF) is investigating Larsen, who is active on various social networking sites. Shane wants to search and extract information from Larsen s social media postings so that it can be used in court as evidence. Which of the following is the MOST ACCURATE statement regarding what Shane should do when conducting a social media investigation of Larsen?

• A.Shane should preserve the Information from the social networking sites so that it can be established as authentic if used in court.
• B.Shane should conduct a forensic shutdown of his computer to preserve the metadata in the social networking sites.
• C.Shane should email himself the links of the postings so that he can retrieve them later.
• D.Shane should preserve the information by saving the links of ate postings in his 'bookmarks "

Comment: *

Name: *

Email: *

Verification: *

Which of the following sets of numbers could a fraud examiner most likely benefit from running a Benford's Law analysis on?

• A.Telephone numbers
• B.Vendor invoice amounts
• C.Bank account numbers
• D.Employee identification numbers

Comment: *

Name: *

Email: *

Verification: *