Question 1

Identify the first step in any electronic evidence collection process.

Accepted Answer

A)  Seizure of the device 
B)  Automated search of the device 
C)  Clone the device 
D)  Do a manual reconnaissance 
A)  Seizure of the device 
B)  Automated search of the device 
C)  Clone the device 
D)  Do a manual reconnaissance

Question 2

Undercover operations are costly and time-consuming and should be used with extreme care. In which of the following situations would it be ineffective to conduct an undercover operation?

Accepted Answer

A)  When law enforcement authorities are informed 
B)  When the investigation can be closely monitored 
C)  When other investigation methods are available 
D)  When the investigation can remain secretive 
A)  When law enforcement authorities are informed 
B)  When the investigation can be closely monitored 
C)  When other investigation methods are available 
D)  When the investigation can remain secretive

Question 3

Web-based e-mail within a user's browser:

Accepted Answer

A)  is especially difficult to search. 
B)  is especially easy to search, requiring no search warrant. 
C)  can only be searched from the suspect's laptop. 
D)  cannot be searched. 
A)  is especially difficult to search. 
B)  is especially easy to search, requiring no search warrant. 
C)  can only be searched from the suspect's laptop. 
D)  cannot be searched.

Question 4

Which of the following is important regarding invigilation?

Accepted Answer

A)  Invigilation should include all areas of the business. 
B)  The time period for the invigilation should be at least one month. 
C)  Past records should be analyzed in order to establish an operating profile for the invigilation. 
D)  The investigator should make the decision regarding the temporary controls to be put in place for the invigilation. 
A)  Invigilation should include all areas of the business. 
B)  The time period for the invigilation should be at least one month. 
C)  Past records should be analyzed in order to establish an operating profile for the invigilation. 
D)  The investigator should make the decision regarding the temporary controls to be put in place for the invigilation.

Question 5

Which of the following is the last step in an investigation?

Accepted Answer

A)  Interview suspect 
B)  Interview former employees 
C)  Interview former buyers 
D)  Perform surveillance 
A)  Interview suspect 
B)  Interview former employees 
C)  Interview former buyers 
D)  Perform surveillance

Question 6

Which of the following statements regarding invigilation is accurate?

Accepted Answer

A)  It is a method of creating a loosely monitored environment to catch fraudulent activities. 
B)  It is an inexpensive method of monitoring all employees during the investigation process. 
C)  It is most commonly used in such high-risk areas such 'as expensive inventory. 
D)  It is a method of watching and recording physical facts, acts, and movements. 
A)  It is a method of creating a loosely monitored environment to catch fraudulent activities. 
B)  It is an inexpensive method of monitoring all employees during the investigation process. 
C)  It is most commonly used in such high-risk areas such 'as expensive inventory. 
D)  It is a method of watching and recording physical facts, acts, and movements.

Question 7

Concealment investigative techniques do not work well in kickback situations. Why?

Accepted Answer

A)  The parties in the transaction will be hard to trace. 
B)  Results of concealment investigative techniques are not admissible as evidence in courts. 
C)  There is usually no direct documentary evidence. 
D)  The risk involved in such investigations is unusually high. 
A)  The parties in the transaction will be hard to trace. 
B)  Results of concealment investigative techniques are not admissible as evidence in courts. 
C)  There is usually no direct documentary evidence. 
D)  The risk involved in such investigations is unusually high.

Question 8

Electronic surveillance may have only limited value in the investigation of employee frauds and many other white- collar crimes. Why?

Accepted Answer

A)  Lack of adequate technology 
B)  Concerns regarding employees' privacy 
C)  Prohibitively high cost of installation and maintenance 
D)  Relative ease of tampering with evidence 
A)  Lack of adequate technology 
B)  Concerns regarding employees' privacy 
C)  Prohibitively high cost of installation and maintenance 
D)  Relative ease of tampering with evidence

Question 9

Which of the following is NOT a method for theft investigation?

Accepted Answer

A)  Covert operations (surveillance) 
B)  Electronic searches 
C)  Invigilation 
D)  Physical evidence 
A)  Covert operations (surveillance) 
B)  Electronic searches 
C)  Invigilation 
D)  Physical evidence

Question 10

Which of the following is NOT a component of a vulnerability chart?

Accepted Answer

A)  Listing assets that are missing 
B)  Concealment possibilities 
C)  Internal controls that had to be compromised 
D)  Identification of the suspected perpetrator 
A)  Listing assets that are missing 
B)  Concealment possibilities 
C)  Internal controls that had to be compromised 
D)  Identification of the suspected perpetrator

Question 11

Which checksum method is considered more advanced and secure than the method it replaced?

Accepted Answer

A)  MD5 
B)  CRC-1 
C)  SHA-1 
D)  CRC-2 
A)  MD5 
B)  CRC-1 
C)  SHA-1 
D)  CRC-2

Question 12

In most investigations of a fraud suspect, investigators should begin by:

Accepted Answer

A)  confronting the suspect. 
B)  checking personal and company records. 
C)  interviewing co-workers. 
D)  performing invigilation. 
A)  confronting the suspect. 
B)  checking personal and company records. 
C)  interviewing co-workers. 
D)  performing invigilation.

Question 13

Experts recommend that invigilation must continue:

Accepted Answer

A)  for at least 7 days. 
B)  for at least 14 days. 
C)  for at least 21 days. 
D)  for an indefinite period determined by the individual investigator. 
A)  for at least 7 days. 
B)  for at least 14 days. 
C)  for at least 21 days. 
D)  for an indefinite period determined by the individual investigator.

Question 14

Subjects of covert operations are protected against unreasonable breaches of privacy under the of the Constitution.

Accepted Answer

A)  Fourth Amendment 
B)  Fifth Amendment 
C)  Second Amendment 
D)  Seventh Amendment 
A)  Fourth Amendment 
B)  Fifth Amendment 
C)  Second Amendment 
D)  Seventh Amendment

Question 15

For fraud to occur, usually three elements are necessary: pressure, opportunity, and:

Accepted Answer

A)  excitement. 
B)  guidance. 
C)  rationalization. 
D)  money. 
A)  excitement. 
B)  guidance. 
C)  rationalization. 
D)  money.

Question 16

Several factors are considered in deciding whether or not to investigate fraud. Which of the following is NOT one of them?

Accepted Answer

A)  Perceived cost of the investigation 
B)  Exposure or amount that could have been taken 
C)  Perceived strength of the predication 
D)  Preparation of a surveillance log 
A)  Perceived cost of the investigation 
B)  Exposure or amount that could have been taken 
C)  Perceived strength of the predication 
D)  Preparation of a surveillance log

Question 17

Undercover operations should be used only when:

Accepted Answer

A)  large-scale fraud is likely and other investigation methods fail. 
B)  controls are made so strict that opportunities to commit fraud are virtually impossible. 
C)  the investigation cannot be kept a secret. 
D)  there is a need to develop theories about what kind of fraud has occurred. 
A)  large-scale fraud is likely and other investigation methods fail. 
B)  controls are made so strict that opportunities to commit fraud are virtually impossible. 
C)  the investigation cannot be kept a secret. 
D)  there is a need to develop theories about what kind of fraud has occurred.

Question 18

Which of the following is an increasingly popular form of gathering physical evidence of fraud?

Accepted Answer

A)  Reviewing spending habits of all those possibly involved 
B)  Confiscating and searching computers 
C)  Tracking missing inventory through bar codes 
D)  Creating and viewing surveillance tapes 
A)  Reviewing spending habits of all those possibly involved 
B)  Confiscating and searching computers 
C)  Tracking missing inventory through bar codes 
D)  Creating and viewing surveillance tapes

Question 19

Which of the following indicates an observed symptom (red flag) of fraud?

Accepted Answer

A)  An employee is unhappy with her pay. 
B)  An employee is undergoing a messy divorce. 
C)  An employee has bought a luxury car and some expensive jewelry. 
D)  An employee was seen shredding documents after hours. 
A)  An employee is unhappy with her pay. 
B)  An employee is undergoing a messy divorce. 
C)  An employee has bought a luxury car and some expensive jewelry. 
D)  An employee was seen shredding documents after hours.

Question 20

An investigator locates the scene that should be observed, anticipates the action that is most likely to occur at the scene, and keeps detailed notes on all activities involving the suspect. Which type of surveillance is being used here?

Accepted Answer

A)  Static surveillance 
B)  Electronic surveillance 
C)  Stationary surveillance 
D)  Moving surveillance 
A)  Static surveillance 
B)  Electronic surveillance 
C)  Stationary surveillance 
D)  Moving surveillance

Identify the first step in any electronic evidence collection process.

Undercover operations are costly and time-consuming and should be used with extreme care. In which of the following situations would it be ineffective to conduct an undercover operation?

Web-based e-mail within a user's browser:

Which of the following is important regarding invigilation?

Which of the following is the last step in an investigation?

Which of the following statements regarding invigilation is accurate?

Concealment investigative techniques do not work well in kickback situations. Why?

Electronic surveillance may have only limited value in the investigation of employee frauds and many other white- collar crimes. Why?

Which of the following is NOT a method for theft investigation?

Which of the following is NOT a component of a vulnerability chart?

Which checksum method is considered more advanced and secure than the method it replaced?

In most investigations of a fraud suspect, investigators should begin by:

Experts recommend that invigilation must continue:

Subjects of covert operations are protected against unreasonable breaches of privacy under the of the Constitution.

For fraud to occur, usually three elements are necessary: pressure, opportunity, and:

Several factors are considered in deciding whether or not to investigate fraud. Which of the following is NOT one of them?

Undercover operations should be used only when:

Which of the following is an increasingly popular form of gathering physical evidence of fraud?

Which of the following indicates an observed symptom (red flag) of fraud?

An investigator locates the scene that should be observed, anticipates the action that is most likely to occur at the scene, and keeps detailed notes on all activities involving the suspect. Which type of surveillance is being used here?

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, Asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, Divorce, and Tax Fraud

E-Commerce Fraud

Legal Follow-Up

Filters

Exam 7: Investigating Theft Acts

Identify the first step in any electronic evidence collection process.

Undercover operations are costly and time-consuming and should be used with extreme care. In which of the following situations would it be ineffective to conduct an undercover operation?

Web-based e-mail within a user's browser:

Which of the following is important regarding invigilation?

Which of the following is the last step in an investigation?

Which of the following statements regarding invigilation is accurate?

Concealment investigative techniques do not work well in kickback situations. Why?

Electronic surveillance may have only limited value in the investigation of employee frauds and many other white- collar crimes. Why?

Which of the following is NOT a method for theft investigation?

Which of the following is NOT a component of a vulnerability chart?

Which checksum method is considered more advanced and secure than the method it replaced?

In most investigations of a fraud suspect, investigators should begin by:

Experts recommend that invigilation must continue:

Subjects of covert operations are protected against unreasonable breaches of privacy under the of the Constitution.

For fraud to occur, usually three elements are necessary: pressure, opportunity, and:

Several factors are considered in deciding whether or not to investigate fraud. Which of the following is NOT one of them?

Undercover operations should be used only when:

Which of the following is an increasingly popular form of gathering physical evidence of fraud?

Which of the following indicates an observed symptom (red flag) of fraud?

An investigator locates the scene that should be observed, anticipates the action that is most likely to occur at the scene, and keeps detailed notes on all activities involving the suspect. Which type of surveillance is being used here?

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, Asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, Divorce, and Tax Fraud

E-Commerce Fraud

Legal Follow-Up

Filters