Question 1

Several factors are considered in deciding whether or not to investigate fraud.Which of the following is NOT one of them?

Accepted Answer

A) The signal that investigation or noninvestigation will send to others in the organization. 
B) Perceived cost of the investigation. 
C) Exposure or amount that could have been taken. 
D) Perceived strength of the predication. 
E) Preparation of a surveillance log. 
A) The signal that investigation or noninvestigation will send to others in the organization. 
B) Perceived cost of the investigation. 
C) Exposure or amount that could have been taken. 
D) Perceived strength of the predication. 
E) Preparation of a surveillance log. E

Question 2

Electronic surveillance may have only limited value in the investigation of employee frauds and many other white-collar crimes.Why?

Accepted Answer

A) Lack of adequate technology 
B) Concerns regarding employees' privacy 
C) Prohibitively high cost of installation and maintenance 
D) Relative ease of tampering evidence 
A) Lack of adequate technology 
B) Concerns regarding employees' privacy 
C) Prohibitively high cost of installation and maintenance 
D) Relative ease of tampering evidence B

Question 3

Surveillance is usually used to investigate:

Accepted Answer

A) Theft acts. 
B) Concealment possibilities. 
C) Conversion possibilities. 
D) Key internal controls. 
A) Theft acts. 
B) Concealment possibilities. 
C) Conversion possibilities. 
D) Key internal controls. A

Question 4

Which of the following is the last step in an investigation?

Accepted Answer

A) Interview suspect 
B) Interview former employees 
C) Interview former buyers 
D) Perform surveillance 
A) Interview suspect 
B) Interview former employees 
C) Interview former buyers 
D) Perform surveillance

Question 5

​Which of the following is a benefit of creating a vulnerability chart?

Accepted Answer

A) ​It forces the investigators to explicitly consider all aspects of a fraud act. 
B) ​It conveys a warning to all employees that fraud will not be tolerated. 
C) ​It lists/coordinates the steps the investigator must take to uncover the perpetrator. 
D) ​It shows management where controls are weak. 
A) ​It forces the investigators to explicitly consider all aspects of a fraud act. 
B) ​It conveys a warning to all employees that fraud will not be tolerated. 
C) ​It lists/coordinates the steps the investigator must take to uncover the perpetrator. 
D) ​It shows management where controls are weak.

Question 6

When investigating fraud,investigators should usually interview suspects:

Accepted Answer

A) at the beginning of the investigation process to really put the heat on them. 
B) in the middle of the investigation process to make them feel that they are not really a suspect. 
C) at the end of the investigation process so that they can gather sufficient evidence against them. 
D) any time during the investigation process to avoid creating undue stress and suspicion among other employees. 
A) at the beginning of the investigation process to really put the heat on them. 
B) in the middle of the investigation process to make them feel that they are not really a suspect. 
C) at the end of the investigation process so that they can gather sufficient evidence against them. 
D) any time during the investigation process to avoid creating undue stress and suspicion among other employees.

Question 7

​Which checksum method is considered more advanced and secure than the method it replaced?

Accepted Answer

A) ​MD5 
B) ​CRC-1 
C) ​SHA-1 
D) ​CRC-2 
A) ​MD5 
B) ​CRC-1 
C) ​SHA-1 
D) ​CRC-2

Question 8

​Which of the following indicates an observed symptom (red flag)of fraud?

Accepted Answer

A) An employee is unhappy with her pay. 
B) ​An employee is undergoing a messy divorce. 
C) ​An employee has bought a luxury car and some expensive jewelry. 
D) An employee was seen shredding documents after hours. 
A) An employee is unhappy with her pay. 
B) ​An employee is undergoing a messy divorce. 
C) ​An employee has bought a luxury car and some expensive jewelry. 
D) An employee was seen shredding documents after hours.

Question 9

Which investigation technique usually does not work well in kickback situations?

Accepted Answer

A) Concealment 
B) Theft 
C) Inquiry 
D) Conversion 
A) Concealment 
B) Theft 
C) Inquiry 
D) Conversion

Question 10

The two primary checksum methods used today are:

Accepted Answer

A) E-TTL I and E-TTL II. 
B) SSFDC and SDHC. 
C) MD5 and SHA-1. 
D) SSFDC and RS-232. 
A) E-TTL I and E-TTL II. 
B) SSFDC and SDHC. 
C) MD5 and SHA-1. 
D) SSFDC and RS-232.

Question 11

Which of the following is true about invigilation?

Accepted Answer

A) The strict controls imposed are temporary in nature. 
B) During the period of invigilation, evidence is presented to suspects with the hopes of getting a confession. 
C) When invigilation is conducted, it is best to cover all aspects of the business. 
D) Invigilation should be accomplished in 5-7 days. 
A) The strict controls imposed are temporary in nature. 
B) During the period of invigilation, evidence is presented to suspects with the hopes of getting a confession. 
C) When invigilation is conducted, it is best to cover all aspects of the business. 
D) Invigilation should be accomplished in 5-7 days.

Question 12

Identify the first step in any electronic evidence collection process.

Accepted Answer

A) Seizure of the device 
B) Automated search of the device 
C) Clone the device 
D) Do a manual reconnaissance 
A) Seizure of the device 
B) Automated search of the device 
C) Clone the device 
D) Do a manual reconnaissance

Question 13

Which general term refers to the gathering of electronic evidence?

Accepted Answer

A) Checksum 
B) Online verification 
C) Electronic audit 
D) Computer forensics 
A) Checksum 
B) Online verification 
C) Electronic audit 
D) Computer forensics

Question 14

Which step in the electronic evidence collection process is important to ensure that the original disk is kept in its seized state?

Accepted Answer

A) Evidence mapping 
B) Search 
C) Seizure 
D) Cloning 
A) Evidence mapping 
B) Search 
C) Seizure 
D) Cloning

Question 15

______ means that there are symptoms or red flags that a fraud may be occurring.

Accepted Answer

A) Predication 
B) Vulnerability 
C) Audit 
D) Presumption 
A) Predication 
B) Vulnerability 
C) Audit 
D) Presumption

Question 16

​Which of the following is NOT a component of a vulnerability chart?

Accepted Answer

A) ​listing assets that are missing 
B) ​concealment possibilities 
C) ​internal controls that had to be compromised 
D) ​identification of the suspected perpetrator 
A) ​listing assets that are missing 
B) ​concealment possibilities 
C) ​internal controls that had to be compromised 
D) ​identification of the suspected perpetrator

Question 17

A divisional manager is suspected of adding ghost employees to the payroll.Which investigative method can most easily uncover this type of fraud?

Accepted Answer

A) Undercover operations 
B) Theft 
C) Concealment 
D) Conversion 
A) Undercover operations 
B) Theft 
C) Concealment 
D) Conversion

Question 18

An investigator locates the scene that should be observed,anticipates the action that is most likely to occur at the scene,and keeps detailed notes on all activities involving the suspect.Which type of surveillance is being used here?

Accepted Answer

A) Static surveillance 
B) Electronic surveillance 
C) Stationary surveillance 
D) Moving surveillance 
A) Static surveillance 
B) Electronic surveillance 
C) Stationary surveillance 
D) Moving surveillance

Question 19

Subjects of covert operations are protected against unreasonable breaches of privacy under the ______ of the constitution.

Accepted Answer

A) Fourth Amendment 
B) Fifth Amendment 
C) Second Amendment 
D) Seventh Amendment 
A) Fourth Amendment 
B) Fifth Amendment 
C) Second Amendment 
D) Seventh Amendment

Question 20

Identify the best pattern/order to go about a theft investigation.

Accepted Answer

A) Search public records, check personal records, interview suspect, interview former employers, and interview other buyers. 
B) Check personnel records, interview former employers, search public records, ,interview other buyers, and interview suspect. 
C) Interview suspect, interview former employers, search public records, check personal records, and interview other buyers. 
D) Interview other buyers, check personal records, interview former employers, interview suspect, and search public records. 
A) Search public records, check personal records, interview suspect, interview former employers, and interview other buyers. 
B) Check personnel records, interview former employers, search public records, ,interview other buyers, and interview suspect. 
C) Interview suspect, interview former employers, search public records, check personal records, and interview other buyers. 
D) Interview other buyers, check personal records, interview former employers, interview suspect, and search public records.

Several factors are considered in deciding whether or not to investigate fraud.Which of the following is NOT one of them?

Electronic surveillance may have only limited value in the investigation of employee frauds and many other white-collar crimes.Why?

Surveillance is usually used to investigate:

Which of the following is the last step in an investigation?

Which of the following is a benefit of creating a vulnerability chart?

When investigating fraud,investigators should usually interview suspects:

Which checksum method is considered more advanced and secure than the method it replaced?

Which of the following indicates an observed symptom (red flag)of fraud?

Which investigation technique usually does not work well in kickback situations?

The two primary checksum methods used today are:

Which of the following is true about invigilation?

Identify the first step in any electronic evidence collection process.

Which general term refers to the gathering of electronic evidence?

Which step in the electronic evidence collection process is important to ensure that the original disk is kept in its seized state?

______ means that there are symptoms or red flags that a fraud may be occurring.

Which of the following is NOT a component of a vulnerability chart?

A divisional manager is suspected of adding ghost employees to the payroll.Which investigative method can most easily uncover this type of fraud?

An investigator locates the scene that should be observed,anticipates the action that is most likely to occur at the scene,and keeps detailed notes on all activities involving the suspect.Which type of surveillance is being used here?

Subjects of covert operations are protected against unreasonable breaches of privacy under the ______ of the constitution.

Identify the best pattern/order to go about a theft investigation.

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, divorce, and Tax Fraud

E-Commerce Fraud

Legal Follow-Up

Filters

Exam 7: Investigating Theft Acts

Several factors are considered in deciding whether or not to investigate fraud.Which of the following is NOT one of them?

Electronic surveillance may have only limited value in the investigation of employee frauds and many other white-collar crimes.Why?

Surveillance is usually used to investigate:

Which of the following is the last step in an investigation?

​Which of the following is a benefit of creating a vulnerability chart?

When investigating fraud,investigators should usually interview suspects:

​Which checksum method is considered more advanced and secure than the method it replaced?

​Which of the following indicates an observed symptom (red flag)of fraud?

Which investigation technique usually does not work well in kickback situations?

The two primary checksum methods used today are:

Which of the following is true about invigilation?

Identify the first step in any electronic evidence collection process.

Which general term refers to the gathering of electronic evidence?

Which step in the electronic evidence collection process is important to ensure that the original disk is kept in its seized state?

______ means that there are symptoms or red flags that a fraud may be occurring.

​Which of the following is NOT a component of a vulnerability chart?

A divisional manager is suspected of adding ghost employees to the payroll.Which investigative method can most easily uncover this type of fraud?

An investigator locates the scene that should be observed,anticipates the action that is most likely to occur at the scene,and keeps detailed notes on all activities involving the suspect.Which type of surveillance is being used here?

Subjects of covert operations are protected against unreasonable breaches of privacy under the ______ of the constitution.

Identify the best pattern/order to go about a theft investigation.

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, divorce, and Tax Fraud

E-Commerce Fraud

Legal Follow-Up

Filters

Which of the following is a benefit of creating a vulnerability chart?

Which checksum method is considered more advanced and secure than the method it replaced?

Which of the following indicates an observed symptom (red flag)of fraud?

Which of the following is NOT a component of a vulnerability chart?