Free Practice Questions for the ACFE Certified Fraud Examiner CFE-Fraud-Investigations-and-Legal-Issues Exam (2026 Updated)

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about BEST.

The correct answer is D: The courts are bound by codified principles or statures but are not bound by previous court decisions.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The correct answer is B. Relevant evidence. The CFE Manual states that relevant evidence is evidence that tends to make some fact in issue more or less likely than it would be without the evidence. That is the exact definition reflected in the question. In common law systems, relevance is a basic requirement for admissibility, and in civil law systems relevance also affects whether the judge will consider the evidence useful in resolving the dispute.

Option A, authentic evidence, refers to evidence that accurately represents the fact or situation it is offered to prove or disprove. Authenticity deals with whether the item is genuine, not whether it makes a disputed fact more or less probable. Option C, direct evidence, is evidence that proves or disproves a fact directly, such as eyewitness testimony or a confession. Option D, real evidence, refers to tangible physical evidence involved in the matter.

Because the question asks for the term describing evidence that affects the probability of a disputed fact, the proper legal term is relevant evidence. Therefore, B is the correct answer.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, privacy, surveillance, workplace, the question asks about MOST LIKELY.

The correct answer is A: A backpack brought from home.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Under the ACFE Fraud Examiners Manual, Law Section, specifically in The Law Related to Fraud and International Initiatives Against Fraud and Corruption , the OECD Recommendation on Combating Bribery of Foreign Public Officials in International Business Transactions emphasizes strengthening the legal infrastructure of member states.

The Recommendation calls on countries to adopt and enforce effective criminal laws that prohibit the bribery of foreign public officials. It also encourages the enhancement of civil, commercial, and administrative frameworks to support enforcement. This includes corporate liability provisions, adequate sanctions, proper accounting and auditing standards, whistleblower protections, and mechanisms for international cooperation. The goal is to ensure that bribery is clearly defined as a criminal offense and that enforcement mechanisms are robust, coordinated, and effective.

The focus is not on data protection, e-commerce regulations, or general public health and safety laws. Instead, it centers on harmonizing and strengthening anti-bribery statutes and related legal systems to ensure transparency, accountability, and deterrence in international business transactions.

Therefore, the primary area member states are encouraged to improve is their criminal, civil, commercial, and administrative laws, making option B the correct answer.

A key confidentiality practice is to warn those involved in the investigation not to transmit confidential case information through unsecured email or similar insecure channels. Fraud investigations should be handled on a need-to-know basis, and sensitive information should be protected from unnecessary disclosure. Option A is too broad because suspending all involved employees might be unnecessary, disruptive, and unfair. Option B is not required; private investigations do not automatically need government supervision. Option C is also too broad because blanket gag rules can create legal and labor-law problems in some jurisdictions. The better approach is controlled communication, secure handling of information, and limiting access to those who need the information to perform their duties. Therefore, option D is correct.

CFE interview guidance identifies verbal behaviors that often appear when an interviewee is being deceptive. A strong indicator is answering with a question rather than providing a direct denial. When asked directly about misconduct, truthful respondents commonly give a straightforward “no” and may add clarifying facts. Deceptive respondents sometimes deflect, buy time, or attempt to regain control by replying with a question such as, “Why would I do something like that?” This response avoids the substance of the allegation and shifts the burden back to the interviewer, potentially probing how much evidence the interviewer has. While Options A, B, and D are denials (and any denial could be untrue), the CFE materials specifically flag “answering with a question” as a frequent deceptive tactic because it functions as diversion and can indicate discomfort with issuing a clear denial. Therefore, among the choices presented, Option C is most consistent with a deceptive verbal response pattern described in CFE interview methodology.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to inquisitorial, the question asks about the core concepts in this area.

The correct answer is D: The judge.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is A: True.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to GDPR, the question asks about EU, GDPR, NOT.

The correct answer is B: An organization must have a documented lawful basis for collecting or processing personal data..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Asset hiders often prefer financial products that make it difficult to connect illicit proceeds to their final location, owner, or use. A product that obscures the link between initial receipt and final disposition helps conceal the trail of funds. The goal of tracing illicit transactions is to follow the movement of assets from source to destination, identify hidden ownership, and locate recoverable property. Products that create opacity, layers, nominees, or unclear ownership histories are attractive to individuals attempting to hide fraud proceeds. Option A is not necessarily correct because complexity alone is not the core appeal. Option C describes illiquid products, which might be unattractive. Option D is the opposite of what asset hiders want. Therefore, option B is correct.

Best practices emphasize separation:

“Interviews should be conducted one-on-one to reduce the possibility of collusion, contamination, or intimidation of witnesses” (Fraud Examiners Manual – Interviewing Guidelines).This ensures independent and uncontaminated statements.

The Fraud Examiners Manual explains that recommendations in a report are optional, not mandatory. When included, they should cover remedial measures such as control reviews or increased security.

“Finally, the fraud examiner might decide to include a section for recommendations. The recommendations section should contain remedial measures or specific recommendations for follow-up actions … This section is optional”.

Therefore, C is correct. Options A and D are incorrect because recommendations are not required in every report, and B misstates its purpose.

Intentional infliction of emotional distress requires more than ordinary interview stress, embarrassment, or discomfort. The claimant must generally prove that the defendant engaged in extreme and outrageous conduct, acted intentionally or recklessly, and caused actual severe emotional or mental distress. Option A is correct because intent or reckless disregard is an essential element of the claim. Option B describes negligence concepts, not intentional infliction of emotional distress. Option C is incorrect because reputational damage is associated more closely with defamation, not this tort. Option D is also wrong because there is no fixed two-year distress-duration requirement in the CFE materials. In fraud interviews, liability normally requires conduct far beyond ordinary questioning, such as outrageous abuse or coercion.

According to the ACFE Fraud Examiners Manual, Law Section, specifically under The Civil Justice System and Decisions and Remedies in Civil Cases , civil courts may grant provisional remedies to protect a plaintiff’s interests before a final judgment is entered. One such remedy is prejudgment attachment.

Prejudgment attachment allows a plaintiff to request that the court seize or freeze a defendant’s assets during the pendency of litigation. The purpose is to prevent the defendant from dissipating, transferring, or concealing assets that might otherwise be used to satisfy a future judgment. Courts typically require the plaintiff to demonstrate a likelihood of success on the merits and a risk that the defendant will dispose of the property before judgment. In many jurisdictions, the plaintiff may also be required to post a bond to protect the defendant against wrongful attachment.

A preservation order generally relates to safeguarding evidence, not freezing assets. Declaratory relief seeks a judicial declaration of rights without necessarily awarding damages or freezing property. A litigation hold is an internal directive to preserve documents and is not a court-issued remedy.

Therefore, to prevent Brenda from spending the embezzled funds before judgment, Luke should seek a prejudgment attachment.

The Fraud Examiners Manual notes that predictive modeling and data analysis allow fraud examiners to detect fraud by using historical data to forecast future trends and anomalies. This matches option B.

Alternative dispute resolution commonly includes mediation and arbitration. In mediation, an impartial third person helps the parties reach a mutually agreeable resolution, but the mediator does not decide who wins. If the parties reach a mediation agreement, it is generally enforceable as a binding contract, making option C correct. Option A describes mediation, not arbitration. In arbitration, the dispute is submitted to an impartial third person who decides the outcome. Option B is incorrect because arbitration can be binding or nonbinding depending on the agreement and applicable rules. Option D is wrong because a mediator facilitates settlement rather than deciding the merits. Understanding these distinctions is important in civil fraud matters because many disputes are resolved outside trial.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about LEAST ACCURATE, front businesses as a method of laundering money is the LEAST ACCURATE.

The correct answer is A: A red flag of a front business is the observation of a large number of customers during peak operating hours.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Uncategorized.

the question asks about his illicit assets, James deposits $9,000 each day.

The correct answer is D: Structuring scheme.

This question tests your understanding of key fraud examination concepts and legal principles.

The Fraud Examiners Manual notes that when witnesses become hostile or argumentative, the interviewer should generally remain calm and avoid reacting to hostility. Reacting, reasoning, or arguing often escalates the situation. Instead, the interviewer should maintain control and neutrality .

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about MOST ACCURATE, the litigation privilege in common law jurisdictions, which of the following is the MOST ACCURATE statement.

The correct answer is A: The litigation privilege prevents disclosure of documents prepared in anticipation of litigation..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

“Securities regulators… require disclosures that typically include: corporate financial statements, identification of officers and directors, identification of significant owners… and a history of the business”【10:2014 International Fraud Examiners Manual.pdf†L73-L95】.

Thus, regulatory securities records are the best source for financial statements.

CFE interviewing guidance distinguishes among open, closed, and leading questions used during the fact-gathering portion of an interview. Closed questions require a precise, specific answer— commonly “yes/no,” but also specifics such as dates, amounts, and times. The question “What year did you start working in the accounting department?” seeks a specific date-like fact (a particular year) rather than inviting a narrative explanation. That is the hallmark of a closed question: it restricts the response to a narrow factual point and does not encourage expansive detail. By contrast, open questions (e.g., “Please describe the procedures to me”) are designed to elicit a broader, more descriptive answer. Leading questions are framed to suggest the answer and are often used to confirm information already known, whereas Quincy’s question does not embed a suggested response—he is simply requesting a specific historical fact. Therefore, under CFE definitions, this question is most accurately classified as closed.

Cross-examination in adversarial systems is designed to test and challenge a witness’s testimony. The Fraud Examiners Manual explains that opposing counsel may attempt to control the witness, ask leading or complex questions, exploit weaknesses, and use prior statements or testimony to challenge credibility. A key goal is impeachment, which often involves showing that the witness has contradicted earlier statements or is otherwise unreliable. Option A is more consistent with direct examination, where background information is commonly developed. Option B is incorrect because opposing counsel usually does not ask questions unless the answers will help its case. Option C is wrong because a witness should not evade questions; if a question is complex, the witness should ask that it be rephrased.

When preparing to interview subjects across jurisdictions, fraud examiners must consider both legal rights and cultural differences. The Manual advises examiners to:

Research local laws governing the right to counsel during interviews.

Understand cultural norms (e.g., greetings, eye contact).Failing to observe these can damage credibility. Thus, it is most accurate that an examiner must determine whether the subject can legally insist on a lawyer’s presence .

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about examinations of expert witnesses in most inquisitorial jurisdictions is accurate.

The correct answer is B: Both the parties and the judge may question an expert ' s credibility..

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

“Credit card records… show card purchasing limits, previous payment history, account balance, when and where the subject has travelled, restaurants frequented, and assets acquired. In short, these records show the movements and habits of the person”.

Therefore, B is correct.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to misrepresentation, conspiracy, obstruction, the question asks about MOST LIKELY.

The correct answer is A: Obstruction of justice.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATE, the circumstances under which a conflict of interest claim would be actionable against an agent.

The correct answer is B: The agent must have had an undisclosed interest m a matter that could influence their professional role.

This question tests your understanding of key fraud examination concepts and legal principles.

The Fraud Examiners Manual explains that before obtaining or cleansing data, the first step in using data analysis is the planning phase. This includes understanding the data, articulating objectives, and building a profile of potential frauds. Without this, examiners risk inefficient analysis and overlooking key fraud risks.

✅ Answer: C. Build a profile of potential frauds

“Signs of stress do not always mean that a subject is lying… While lying and deception do cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

The Prep guide confirms: “While lying and deception do indeed cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

Therefore, Carlos should not automatically conclude deception from stress behaviors.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about the core concepts in this area.

The correct answer is D: Mya will assist the fact finder by providing specialized knowledge that will help them understand evidence..

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

Real property records are commonly available through public or external records sources and can help fraud examiners identify assets acquired by a subject. These records may reveal ownership, purchase history, liens, mortgages, and other details useful in tracing or recovering illicit proceeds. Wage and salary records are generally maintained by the employer and are not normally available from external public sources without authority. Work email history is internal company information or electronically stored information requiring proper authorization. Personnel file documents are confidential employment records and are not public external records. Because real property records are usually maintained by government recording offices and are often publicly searchable, Maddie is most likely able to obtain information about real property assets without consent or legal order.

“When searching for an individual, the fraud examiner should obtain a past address of the subject, and search activities should begin with that information”.

Therefore, saying a past address is “of no help” is incorrect.

In civil law criminal proceedings, judges usually play a more active role than they do in common law adversarial systems, and a judge often serves as the primary fact finder. However, it is inaccurate to say that judges serve as the fact finder in every criminal case in every civil law jurisdiction. Some civil law jurisdictions use mixed panels made up of professional judges and laypersons, or other forms of lay participation, especially in more serious matters. Option B reverses the general pattern by stating that juries typically serve as fact finders. Options C and D are too absolute because fact-finding structures vary by jurisdiction. Therefore, option A is the most accurate statement.

Marla cannot conclude that the suspect is being deceptive based solely on foot tapping. The ACFE materials warn that no single behavior proves anything. Behavioral observations must be evaluated against the individual’s baseline and interpreted in clusters, not in isolation. Restless behavior might indicate nervousness, discomfort, cultural habits, stress, physical conditions, or other innocent explanations. Although such behavior might be considered during an interview, it cannot safely support a conclusion of deception by itself. Option B is too absolute because restlessness can sometimes be considered a possible behavioral cue. Options C and D are incorrect because they overstate the reliability of nonverbal behavior. Therefore, the proper conclusion is that Marla should not isolate the behavior to infer dishonesty.

The most accurate answer is A. Under the CFE Law materials, the litigation privilege in common law jurisdictions such as the United Kingdom and Canada is described as roughly comparable to the U.S. attorney work-product doctrine. It protects communications made and documents prepared for the purpose of litigation, and it arises once litigation is reasonably anticipated. That means protection is not limited only to materials created after a lawsuit has formally begun; it can attach earlier, as long as litigation was contemplated when the material was created.

Option B is incorrect because the privilege is not restricted to the period after litigation formally commences. Option C is incorrect because the Manual states that the privilege may extend to communications and documents created by third-party agents, including consultants or fraud examiners, in preparation for litigation. Option D describes the purpose of attorney-client, legal advice, or solicitor-client privilege, which protects confidential legal communications—not litigation privilege. Therefore, among the choices provided, A is the best and most accurate statement, even though the privilege can also cover certain communications in addition to documents and materials.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about XYZ, BEST.

The correct answer is C: Counterclaim.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The employee could raise an entrapment defense. Entrapment occurs when law enforcement officers or government agents induce a person to commit a crime that the person was not previously predisposed to commit. The facts state that Mari, a law enforcement officer, posed as a salesperson, offered a kickback, and eventually persuaded the employee to accept after an initial rejection. Those facts support an argument that the criminal act was induced by government conduct. Collusion involves agreement among parties to commit wrongdoing, but it is not the defense described here. Coercion involves compulsion or threats, which are not stated. Fraudulent misrepresentation concerns false material statements, not inducement by law enforcement. Therefore, option C is correct.

The correct answer is D. Obstruction of justice. Obstruction-of-justice offenses commonly include conduct intended to impede, obstruct, influence, or interfere with an investigation or proceeding, including the destruction of records and documents after a defendant learns of the government’s case. The Department of Justice has repeatedly treated destruction of incriminating records during an investigation or pending proceeding as obstruction. In one recent case, DOJ stated that knowingly destroying records to impede a federal investigation constituted obstruction; in another, a former DOJ attorney admitted that destroying documents after release from custody was part of an effort to obstruct the ongoing investigation and proceedings against him.

The other options do not fit the facts. Fraudulent misrepresentation involves false statements or deceptive representations. Misappropriation of evidence is not the standard offense label here. Conspiracy to influence the court would require an agreement with others and does not match the single act described. Angel’s conduct is best understood as an effort to destroy incriminating evidence after being charged, which directly interferes with the justice process. Accordingly, the most likely additional charge would be obstruction of justice.

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

“Deleted files are recoverable until they are overwritten because data is not erased until it is overwritten… Deleted files that have been overwritten generally are not recoverable”.

Other data such as time/date stamps, websites, or chats can often be retrieved.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to insider trading, the question asks about to publicly announce a new joint venture project in China, so he buys shares of Waccamaw stock Assuming that his conduct was illegal m the jurisdiction in which he works and resides, what type of crime did Davis MOST LIKELY commit, MOST LIKELY.

The correct answer is C: Insider trading.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

Wire fraud is the most likely basis because Noah used electronic communications and interstate transmissions to carry out a scheme to obtain money. Phishing emails, remote account access, and electronic transfers of funds are classic uses of wires or electronic communications in furtherance of fraud. Mail fraud would require use of the postal system or covered mail services, which is not described. “Communications fraud” and “interstate fraud” are not the standard charge that best fits the facts. The key facts are that Noah targeted companies across multiple states, used phishing emails to obtain credentials, and transferred funds electronically. In U.S. fraud-law analysis, schemes involving electronic communications and fund transfers are generally prosecuted as wire fraud when the statutory elements are met.

Data quality is important on both the inbound and outbound sides of any data transfer. Fraud examiners must ensure that the data received are complete, readable, accurate, and appropriate for the requested period and fields. They should also consider control totals, missing records, formatting issues, and whether the transfer process affected integrity. Option A is incorrect because many jurisdictions have data privacy laws governing collection, storage, disclosure, and transfer of personal data. Option B is wrong because interoperability matters even when a data sharing agreement exists; the receiving party must be able to read and use the data. Option C is not a necessary feature of every data sharing agreement. The best statement is that data quality must be ensured throughout the transfer.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about TRUE.

The correct answer is D: The purpose of authentication is to ensure that hearsay is not admitted into evidence.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 9.

In the context of Civil Actions, specifically relating to alternative dispute, the question asks about MOST ACCURATE, the different types of alternative dispute resolution ' .

The correct answer is C: The decisions reached in all arbitrations are always binding.

This question focuses on civil action processes. The correct answer accurately describes civil litigation procedures, evidence preservation, or remedies available to fraud victims. Civil recovery is often an important component of fraud resolution.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is D: Existence of an employment contract.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Signs of stress (e.g., shallow breathing, stuttering, shifting posture) do not automatically equal deception. The Fraud Examiners Manual states:

“Signs of stress do not always mean a subject is lying. An honest subject might feel stress simply by being questioned. Conclusions must be based on clusters of behavior and corroborating evidence, not a single indicator”.

The Fraud Examiners Manual advises:

“Do not slow down the interview process for note-taking. Instead, jot down key words … In general, it is better to err on the side of taking too few notes rather than too many.”

Therefore, the best practice is C.

The correct answer is C. The CFE Manual states that the UK Bribery Act has a broader application than the FCPA because it reaches commercial bribery, meaning bribery in the private sector, not just bribery involving foreign public officials. The Manual specifically explains that, unlike the FCPA, the UK Bribery Act includes a general commercial bribery offense and also creates a corporate offense for failure to prevent bribery.

Option A is incorrect because the UK Bribery Act does not contain the same kind of explicit exception for facilitating payments associated with the FCPA framework. Option B is also incorrect because the Manual expressly notes that an anti-corruption program sufficient for FCPA compliance might still be insufficient for UK Bribery Act compliance due to the broader scope of the UK law. Option D is incorrect because both the FCPA and the UK Bribery Act criminalize bribery of foreign public officials in connection with international business transactions; that is not a point of difference. Therefore, the most accurate statement is C, because the UK Bribery Act goes further by criminalizing bribery in the private sector as well.

Court records are frequently used in fraud investigations. Both the Prep Guide and the Manual agree that the court clerk’s office (court authorities) is the original and most reliable source of certified and accurate records.

Although commercial services and online databases exist, the manuals emphasize that reliability and certification are best ensured by going directly to the court where the case was filed.

Thus, the statement is True.

Isaiah is using a rationalization theme based on empathy for perceived unfair treatment. In an admission-seeking interview, the examiner develops a theme that gives the suspect a psychologically acceptable reason to confess. Here, Isaiah suggests that Ruben acted because he was mistreated by his supervisor and denied a raise. By saying he would “probably feel the same,” Isaiah reduces emotional resistance and frames the conduct as understandable, though not justified. Option B would apply if Isaiah suggested Ruben acted to help others. Option C would apply if the misconduct were presented as a one-time mistake. Option D would involve minimizing the seriousness of the offense. The statement primarily empathizes with Ruben’s perceived unfair treatment.

“Even when a victim refers a fraud case for criminal prosecution, the government will usually not disclose the contents of nonpublic records with the victim during the investigation”.

Thus, option D is most accurate.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to inquisitorial, the question asks about the qualifications of expert witnesses in most inquisitorial jurisdictions is CORRECT, CORRECT.

The correct answer is D: The qualification of an expert is generally based on standardized requirements.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about the core concepts in this area.

The correct answer is B: False.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The correct answer is C. Whether an employee is covered by a union contract can significantly affect the employee’s rights during an internal investigation because unionized employees may have representation rights during investigatory interviews. In the United States, the National Labor Relations Board explains that employees in unionized workplaces can have Weingarten rights, meaning they may request union representation during an interview the employee reasonably believes could lead to discipline.

That makes a union or collective bargaining agreement far more relevant to investigation rights than the other choices. Option A, the employee’s length of service, might matter in some human-resources settings but does not usually determine the employee’s legal investigation rights. Option B, a noncompetition agreement, concerns post-employment competition restrictions rather than representation, questioning, or procedural protections during an internal inquiry. Option D, the likelihood of guilt or innocence, is likewise not what determines the employee’s rights; legal protections apply based on the governing employment relationship and applicable labor law, not the employer’s suspicion level. For fraud examiners, this distinction matters because interview procedures can change depending on whether the employee is unionized or otherwise contractually protected. Therefore, the factor most likely to affect the employee’s rights is whether the employee has signed a union contract.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, the question asks about the core concepts in this area.

The correct answer is A: Yes, the evil action can be filed if the jurisdiction permits parallel proceedings..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The correct answer is B. The CFE Manual states that under the ICCPR, everyone accused of a crime shall be presumed innocent until proven guilty according to law. This is one of the core due-process protections recognized in the criminal justice section of the Law materials.

Option A is incorrect because the ICCPR protects the right to a fair and public hearing, not a trial without public disclosure of the results. Option C is also incorrect because the Manual states that the ICCPR gives a convicted person the right to have the conviction and sentence reviewed by a higher tribunal, but it does not provide for unlimited appeals. Option D is too broad because release pending trial is not presented as an automatic right in the way presumption of innocence is. For CFE purposes, the key takeaway is that criminal defendants under the ICCPR are entitled to several important safeguards, and one of the most fundamental is that they must be treated as innocent unless and until guilt is proven according to law. Therefore, B is the correct answer.

This question tests your knowledge of Uncategorized.

the question asks about NOT.

The correct answer is D: The defendant made a false statement in a court of law..

This question tests your understanding of key fraud examination concepts and legal principles.

CFE interviewing guidance emphasizes that legal considerations can materially affect how interviews are conducted and that employee rights and obligations vary by jurisdiction and by case. In particular, whether a subject has a duty to cooperate (and the extent to which an organization can compel cooperation) can differ across jurisdictions and can also be constrained by contractual rights (e.g., union agreements, employment contracts) and local regulations. Because June’s subject is from a different jurisdiction, the most appropriate preparation step is to verify jurisdiction-specific rules that could limit compulsion or otherwise affect the interview’s legal permissibility and risk profile. Option D directly addresses this core cross-jurisdiction concern: what can legally be required of the subject. Option A is not a CFE-recommended preparatory focus; examiners should adapt to legal and procedural requirements rather than “teach” their own cultural practices to the subject. Option B is inappropriate and contrary to professional interviewing principles (the goal is cooperation, not discomfort). Option C is incorrect because consultation with counsel is not limited to “third jurisdiction” scenarios; the guidance underscores that interview-related legal risks and jurisdictional differences often warrant counsel input. Therefore, D best reflects CFE investigation knowledge for cross-jurisdiction interviewing readiness.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is C: A witness testifies that they saw the employee take the money..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Phone records are classified as nonpublic records. The Fraud Examiners Manual explains that personal telephone and mobile records usually require consent, subpoena, or warrant to access. Public records, by contrast, include real property ownership and corporate filings. Therefore, B is correct.

The Fraud Examiners Manual defines double-negative questions as those containing two forms of negation in a single clause. They are confusing and “often suggest an answer opposite to the correct one.” The example given is almost identical to the question here:

“Didn’t you suspect that something wasn’t right?”.

Thus, Sylvia’s question is a double-negative question, which should be avoided.

The digital forensics section of the Fraud Examiners Manual stresses:

No single forensic tool can recover everything.

Each has strengths and weaknesses.

Therefore, it is best to use a combination of tools during analysis.

Additionally, the examiner must look for both inculpatory and exculpatory evidence, while maintaining data integrity.

This aligns exactly with answer B.

Both the CFE Prep Guide and the Fraud Examiners Manual state that every fraud examination must be conducted under the assumption that litigation will result. This ensures that evidence is collected and preserved properly, in compliance with legal standards:

“Each fraud examination should begin with the proposition that the case will end in litigation… If the fraud examiner assumes that litigation will occur, he will conduct the examination in accordance with the proper rules of evidence”.

This principle protects the integrity of the examination and ensures admissibility of evidence if the matter proceeds to court.

Employees generally have a duty to cooperate with reasonable workplace investigations arising from the employer-employee relationship. The Fraud Examiners Manual explains that this duty commonly extends to internal investigations, provided that the employer’s requests are reasonable under the facts and circumstances. Florence is an employee of Q-22, and Virgil is conducting a private internal investigation into suspected fraudulent expense claims. Therefore, Florence likely must cooperate with reasonable interview requests, document requests, or other investigative steps related to her duties. Option B is too broad because employees are not required to comply with unreasonable demands. Options A and D incorrectly suggest that private-company status eliminates the duty to cooperate.

The strongest evidence is the direct deposit payslips showing that Jordan and the fictitious employee share the same bank account details. In a ghost employee or fictitious employee payroll scheme, one key test is whether multiple employees are using the same bank account for direct deposit. This evidence directly links Jordan to the payroll payments issued to the fictitious employee and directly rebuts his denial that he is only paid for his own work. The coworker’s statement about vacations might show lifestyle changes but does not prove the payroll scheme. System-access records show opportunity, not actual diversion of wages. Negative social media posts are irrelevant to whether Jordan created and collected pay for a fictitious employee.

Fraud examiners must not opine on guilt, innocence, intent, or disposition. Reports should focus on facts and expert conclusions within their field. The Manual stresses:

“The fraud examiner should refrain from expressing opinions as to the guilt or innocence of any person or entity. Such conclusions are reserved for the trier of fact” (Fraud Examiners Manual, Reporting section).

Options A, B, and D relate to accounting and internal control assessments, which fall within an accounting expert’s scope. Only C is improper because it speculates about the suspect’s character or intent, which is outside the CFE’s role.

Sylvia’s expensive home, luxury jewelry, and high-end clothing are lifestyle red flags, especially because she is a purchasing manager, a role that can be vulnerable to kickbacks or conflicts of interest. However, red flags alone do not justify a direct accusation or aggressive search without proper authority. Predication means there is a reasonable basis to begin additional inquiry, not proof that fraud occurred. The appropriate next step is to conduct discreet inquiries about Sylvia’s responsibilities, vendor relationships, purchasing authority, and possible explanations for the lifestyle indicators. Searching email may require authorization and legal review. Informing executives that she might have committed fraud or confronting her directly would be premature. Therefore, option D is the proper investigative response.

A follow-up/recommendations section is generally optional and is used to identify issues that remain outstanding, often because they are outside the investigator’s mandate. Examples include recovery of property held by third parties or obtaining information from vendors or suppliers. Option B fits this purpose exactly. Option A belongs in the body or background of the report if a chronological narrative is needed. Option C is improper because fraud examiners should not state conclusions about guilt or innocence; that is for the court or appropriate decision-maker. Option D might appear in a findings, loss calculation, or damages section, but it is not the best example of a follow-up or recommendations item. Therefore, option B is correct.

This question tests your knowledge of Uncategorized.

the question asks about US, FCPA.

The correct answer is C: A private U S company transfers $45,000 to a foreign official to influence the award of a public construction contract..

This question tests your understanding of key fraud examination concepts and legal principles.

The Fraud Examiners Manual notes:

“Fraud examiners are often tasked with tracing illicit transactions… For example, a victim of fraud might want a tracing search to facilitate the recovery of criminal proceeds”.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, administrator, the question asks about MOST ACCURATE, Slater ' s role as bankruptcy administrator is MOST ACCURATE.

The correct answer is C: Slater may collect, preserve, and dispose of the debtor ' s property..

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

During the analysis phase of a digital forensic investigation, Emily’s primary concern should be maintaining the integrity of the data. Digital evidence is fragile, and improper handling can alter files, metadata, logs, or other information. The ACFE materials emphasize that fraud examiners must protect the integrity of digital evidence and should develop procedures to prevent allegations that the collection or analysis methodology damaged or changed the evidence. Option B is incorrect because the examiner should consider both inculpatory and exculpatory evidence objectively. Option C is too absolute because no single software guarantees full recovery of all data. Option D is also incorrect because examiners may use multiple validated tools if appropriate. Integrity, reliability, and defensibility are the key concerns.

When a witness resists an interview with “I’m too busy,” CFE interview guidance treats this as a common barrier that may conceal other causes—reluctance, discomfort, ego concerns, or simply a desire to avoid involvement. The recommended approach is to reduce resistance by emphasizing cooperation, importance, and minimal burden: communicate that the witness’s help is needed, the interview will be brief, and it will not be difficult. Option D directly reflects these recommended diffusion techniques by stressing both the importance of the witness’s assistance and the short duration of the meeting, which lowers the perceived cost of participation. Option A is inappropriate and potentially coercive, may exceed the examiner’s authority, and can create hostility or claims of intimidation—undermining credibility and reliability of information obtained. Option C is confrontational and escalates resistance without advancing the interview. Option B can be helpful as a scheduling accommodation, but CFE guidance for this specific resistance phrase prioritizes overcoming the objection by reassuring brevity and importance, making D the best answer among the options.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is D: Duty of loyalty.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

When preparing for interviews, fraud examiners should avoid scripting detailed questions. Instead, they prepare notes of key points to cover.

From the Fraud Examiners Manual:

“Whenever possible, do not prepare a list of predetermined questions to ask the subject. The interview should flow freely. The interviewer might, however, want to develop a list of key points to cover during the interview”.

Therefore, the best preparation method is to note key points instead of detailed questions.

According to the ACFE Fraud Examiners Manual, Law Section, particularly in the Money Laundering chapter discussing International Anti-Money Laundering Efforts and the FATF Recommendations , financial institutions are required to file suspicious transaction reports STRs when they suspect that funds are the proceeds of criminal activity or are related to money laundering or terrorist financing.

The conduct described—purchasing bearer instruments with cash in amounts just below mandatory reporting thresholds—is commonly known as structuring. Structuring is a recognized money laundering technique designed to evade currency transaction reporting requirements. Under the FATF Recommendations, financial institutions must not rely solely on monetary thresholds to trigger reporting obligations. Instead, they are required to file a suspicious transaction report whenever there is reasonable suspicion of illicit activity, regardless of the amount involved.

A cash transaction report is typically triggered by transactions exceeding a specific monetary threshold, but structuring to avoid that threshold does not eliminate the reporting obligation. If employees suspect money laundering, the bank is obligated to file a suspicious transaction report with the appropriate authorities.

Therefore, the correct answer is that the bank is required to file a report of suspicious transactions because the employees suspect money laundering violations.

The correct answer is A. The primary purpose of expert testimony is to help the fact finder understand the evidence or determine a fact in issue by applying specialized knowledge. Federal Rule of Evidence 702 states that an expert may testify when the expert’s scientific, technical, or other specialized knowledge will help the trier of fact understand the evidence or determine a fact in issue. That captures the classic role of an expert witness in fraud-related litigation.

Option B is incorrect because deciding the admissibility of evidence is generally a matter for the judge, not the expert witness. Option C is also incorrect because experts ordinarily are not called to opine on whether another witness is truthful; credibility determinations are for the fact finder. Option D is incorrect because experts generally do not decide or directly state whether the accused is guilty; that is the function of the judge or jury after considering all admissible evidence. In CFE practice, expert testimony is valuable because complex accounting records, financial analyses, loss calculations, and fraud patterns often require explanation beyond ordinary lay understanding. Therefore, the best statement of Levi’s primary purpose is that he will help the fact finder understand evidence through specialized knowledge, making A the correct answer.

Circumstantial evidence proves a fact indirectly through inference rather than directly proving the disputed fact. The restaurant’s reservation logbook showing no record of the lunch does not directly prove the employee lied, but it strongly supports an inference that the claimed lunch did not occur. That makes option B circumstantial evidence. Option C is direct evidence because the client personally testifies that the lunch never occurred. Option D is also direct evidence because the employee’s own email confession directly addresses the false reimbursement. Option A is stronger documentary evidence that the client paid, but the logbook example best illustrates an indirect proof pattern. Fraud examiners often use circumstantial evidence to support conclusions when direct admissions or eyewitness testimony are unavailable.

The existence of a collective bargaining agreement is most likely to affect an employee’s rights during an internal investigation. The Fraud Examiners Manual explains that employee rights during investigations can vary by jurisdiction, employment contract, collective labor laws, labor-rights protections, company policies, and other applicable legal rules. A collective bargaining agreement may contain restrictions on interview procedures, representation rights, disciplinary processes, notice requirements, or the employer’s ability to compel cooperation. The likelihood that a case will go to trial, the amount of evidence available, and the employee’s length of service might influence investigation strategy, but they do not usually define the employee’s legal rights in the same direct way. Therefore, option B is the best answer.

The Fraud Examiners Manual states:

“The primary concern when analysing digital evidence is to maintain the integrity of the data at all times. Fraud examiners must be careful with computer equipment because a careless investigator might inadvertently alter important evidence”.

Examiners must look for both inculpatory and exculpatory evidence.

Best practices for admission-seeking interviews emphasize building rapport, presenting a morally acceptable reason, and maintaining empathy to encourage a confession. The manual states examiners should “present a morally acceptable reason for the suspect’s behavior” and avoid creating hostility . Minimizing empathy is counterproductive and not recommended.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, the question asks about UN, ICCPR, NOT.

The correct answer is C: Right to a trial by jury.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, privacy, the question asks about BEST.

The correct answer is C: Public disclosure of private facts.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Detailed Explanation with Extracts = The Fraud Examiners Manual states:

“When reporting the results of a fraud examination, it is best to include copies (not originals) of important documents in the formal report”.

Originals should be safeguarded separately for evidence; reports should use copies.

Therefore, the statement is true.

Both the Manual and CFE Prep guides emphasize that forensic imaging is essential because:

“Forensic analysis should not be performed on suspect devices directly because doing so can alter or damage digital evidence, and imaging… allows a fraud examiner to view and analyse… without altering the original data in any way”.

A forensic image is an exact, sector-by-sector copy of the drive. Thus, imaging preserves evidence integrity.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to misrepresentation, the question asks about the core concepts in this area.

The correct answer is C: " Would a reasonable investor wish to know the information to make an informed decision? " .

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is A: Overstating revenues.

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to circumstantial evidence, the question asks about the core concepts in this area.

The correct answer is D: Relevant evidence.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

“Fraud examinations should proceed from the general to the specific. That is, they should begin with general information that is known, starting at the periphery, and then move to the more specific details”.

This method avoids premature assumptions and ensures systematic evidence development.

Jabbar is most likely engaging in e-discovery. Electronic discovery involves identifying, collecting, processing, reviewing, and producing electronically stored information for use in legal proceedings. The question states that Jabbar is part of a legal team, is gathering and reviewing documents found on a suspect’s laptop, and is sorting through electronic documents to locate key information for court. That description fits e-discovery more directly than digital forensics. Digital forensics focuses on preserving, imaging, extracting, and analyzing digital evidence using forensic methods. Data analysis involves examining datasets for patterns, anomalies, and trends. An evidence chronology organizes events in time order. Because the task centers on reviewing electronic documents for litigation use, option B is the best answer.

Civil trials in civil law jurisdictions differ substantially from common law civil trials. They are often conducted as a continuing series of meetings and written communications rather than one single trial event. The common law division between pretrial and trial stages usually does not apply in the same way. Judges play a more active role in managing and evaluating evidence, and it is common for the judge to select an expert witness to address technical matters. The purpose is to obtain a court-appointed expert who is considered less biased than experts hired by the parties. Therefore, options A, B, and C reflect common law or inaccurate assumptions, while option D accurately describes a common feature of civil law proceedings.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, IOSCO, self-regulatory, the question asks about TRUE, IOSCO, the International Organization of Securities Commissions (IOSCO) s TRUE.

The correct answer is D: IOSCO is recognized as the international standard-setter for securities markets.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

The organizational filings with the government of the jurisdiction in which the company is incorporated

Organizational filings (e.g., articles of incorporation) are generally public records and include ownership information, initial shareholders, and the location of the principal office.

Fraud examiners should remain objective and approach the matter from both perspectives: that fraud might have occurred and that it might not have occurred. This reflects professional skepticism and helps prevent confirmation bias. A fraud examination is not designed merely to prove a predetermined allegation; it is a systematic process for resolving signs or allegations of fraud through evidence. The examiner should gather facts that support or refute the allegation and should preserve fairness throughout the engagement. Option C is inconsistent with good interview and investigation sequencing because examiners often begin broadly and move toward specifics. Option D is also incorrect because interviews usually proceed from neutral or less involved witnesses toward more involved individuals and suspects.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, SRO, the question asks about MOST ACCURATE, serf-regulatory organizations (SROs) in the securities industry.

The correct answer is D: In some jurisdictions SROs establish the standards and rules under which members of the securities industry operate.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms. Self-regulatory organizations (SROs) play an important role in the securities industry by establishing standards and rules for their members, but they typically operate under the oversight of government regulators rather than having sole authority.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about civil actions in most jurisdictions is CORRECT, CORRECT.

The correct answer is B: Civil actions begin with the filing of a pleading, usually in the jurisdiction where the defendant resides or where the claim originated..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

In civil law systems, appellate review is generally broader than in common law systems. Appellate courts in civil law jurisdictions may review both legal and factual determinations, and they may obtain additional witness testimony, gather new documentary evidence, or obtain new expert opinions. This differs from many common law systems, where appeals are usually focused on legal errors and the appellate court generally does not retry the facts. Option A describes the common law approach more closely. Option B is incorrect because appellate courts are not required to modify every trial court decision; they may affirm, reverse, remand, or modify depending on the case. Option D is also incorrect because civil law appellate courts are not limited to factual issues only.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about the core concepts in this area.

The correct answer is A: Reorganization bankruptcy.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

“Records obtained from financial institutions are perhaps the single most important financial source available to a fraud examiner for tracing purposes. They can be used as evidence for fraud, uncover criminal profits, identify criminal assets, and locate assets”.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about the core concepts in this area.

The correct answer is B: Placement.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes. Money laundering typically involves three stages: placement (introducing illegal funds into the financial system), layering (creating complex transactions to hide the source), and integration (returning the funds to the launderer in an apparently legitimate form).

Referring to the informant in the memorandum using the informant ' s initials

Best practice requires that informants be identified only by symbols (e.g., I-1, I-2), not by initials, to protect their identity. Cash payments are acceptable but must be accompanied by a receipt.

The Fraud Examiners Manual defines:

“Testimonial evidence is that evidence which is presented in the form of witness statements, whether oral or written, offered in response to questions” (Fraud Examiners Manual – Evidence section).The colleague’s statement overhearing a conversation is testimonial evidence.

CFE guidance on tracing illicit transactions explains that financial institution records—especially account statements—are among the most important sources for tracing because they can reveal transfers, counterparties, and leads to additional evidence. In the cryptocurrency context, the Manual specifically notes that when reviewing account statements, fraud examiners should look for transactions involving cryptocurrency exchanges and for payments to or deposits from such exchanges. Those banking “on-ramps/off-ramps” can connect a real-world identity (account holder) to crypto activity and help establish ownership or control indicators (e.g., exchange deposits/withdrawals, recurring transfers, related payment records). Option B is incorrect because public blockchains show transactions and addresses, but they generally do not contain direct personal identifiers. Option C is too broad and not supported as a “most accurate” statement across jurisdictions; requirements vary and many exchanges apply identification controls. Option D is incorrect because the Manual states that most cryptocurrencies rely on public blockchains that make transactions visible, not private blockchains. Therefore, A is the most accurate statement: ownership clues can sometimes be derived from bank statements that show exchange-related activity and related financial footprints.

For publicly traded companies, the best source for information on officers and directors is regulatory securities records. These records typically include “identification of officers and directors, financial statements, significant owners, and accountants and attorneys”.

The manuals explain that in verbal confessions, subjects often underestimate the amounts to minimize guilt, not overestimate. The process involves moving from accusation to benchmark admission, handling lies tactfully, and obtaining details by chronology, transaction, or event. Thus, option B is NOT true.

The correct answer is D. The CFE Manual lists the basic elements of perjury as follows: the defendant made a false statement, made it under oath, the statement was material or relevant to the proceeding, and the defendant made the statement knowing it was false. Therefore, materiality is a required element, which makes D the correct answer.

Option A is not sufficiently accurate because the Manual explains that perjury does not have to occur strictly in a court of law. A perjurious statement can also occur in other formal settings, such as depositions, bail hearings, venue hearings, suppression hearings, and similar proceedings, so limiting the offense to statements made in court is too narrow. Option B is incorrect because perjury does not require proof that the false statement actually influenced the fact finder’s decision; it is enough that the statement was material to the proceeding. Option C is incorrect because the statement need not be made specifically to a judge. The legal focus is on a knowingly false, material statement under oath in a qualifying proceeding. Thus, among the options provided, D is the required element that must be proven.

The correct answer is D. Official bribery concerns the corruption of a public official in connection with an official act of government. A core element is that the defendant gave, offered, solicited, or received something of value in exchange for influencing official action. ACFE materials describe official bribery as the corruption of a public official to influence an official act, and federal bribery law likewise centers on a thing of value being corruptly given or received in connection with official action.

Option A is incorrect because proof that the government suffered measurable damages is not generally required to establish the offense. The wrong lies in corruptly influencing official action, not in proving a completed financial loss. Option B is incorrect because bribery is not a negligence-based offense; it requires corrupt intent, not mere carelessness. Option C is also incorrect because failure to exercise due care is associated with negligence concepts, not bribery. The defining feature of bribery is the corrupt exchange itself. Therefore, among the choices, the legal element that must be shown is that the defendant gave or received something of value, making D the most accurate answer.

When a respondent says “I’m too busy,” it can be diffused by stressing “the interview will be short, the interviewer is already there, the project is important, [and] the interview will not be difficult”.

Thus, stressing brevity is the recommended reaction.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to mail fraud, wire fraud, the question asks about US, MOST LIKELY.

The correct answer is A: Mail fraud.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The correct answer is A. Whistleblower anti-retaliation laws protect employees from being punished because they engaged in protected reporting activity. They do not generally give the employee immunity for separate misconduct. If Amanda reported suspected false claims to the government, that report can qualify as protected whistleblowing. However, if the employer later discovers that Amanda misappropriated more than $150,000, the employer can generally terminate her for that independent misconduct, so long as the termination is based on the theft and not as retaliation for the report.

Option B is incorrect because whistleblower status does not prevent termination for legitimate, nonretaliatory reasons. Option C is incorrect because terminating Amanda for making the report would be exactly the kind of retaliatory conduct anti-retaliation rules are designed to prohibit. Option D is therefore also incorrect. In CFE terms, the key distinction is between protected activity and independent grounds for discipline. Employers usually remain free to discipline or dismiss a whistleblower for fraud, theft, performance failures, or other valid reasons unrelated to the protected disclosure. Therefore, the legally correct statement is that the employer can terminate Amanda for misappropriating funds. General ACFE materials on whistleblower protections likewise emphasize protection from retaliation, not immunity from consequences for unrelated wrongdoing.

The correct answer is B. The CFE Manual explains that although legal professional privilege generally applies to confidential communications between a lawyer and the client, in most jurisdictions the protection extends to communications with third-party consultants hired to help provide legal advice, including fraud examiners, accountants, bankers, and other experts. Therefore, when an attorney shares privileged material with a fraud examiner who has been retained to assist in the case, that disclosure does not automatically waive the privilege.

Option A is incomplete and therefore not the most accurate. While the client does hold the privilege, the Manual also states that the privilege can be waived by the client’s attorney or a third party in some circumstances. Option C is incorrect because not every disclosure to a third party causes waiver; disclosure to a consultant working within the legal team may remain protected. Option D is also incorrect because the use of email itself does not create waiver. The more important question is whether the communication remained within the privileged relationship and was shared only with those assisting counsel. Since the fraud examiner was hired to work on the case, B is the most accurate answer.

The correct answer is D. The CFE Manual explains that when parties or assets are spread across multiple jurisdictions, a judgment obtained in one country is not automatically effective everywhere else. In fact, a domestic judgment against a foreign defendant may be useful for recovering assets located in the domestic country, but it might be worthless for reaching assets located in a foreign country. The Manual also states that some countries enforce foreign judgments, but others do not, and enforceability often depends on the internal laws of the enforcing jurisdiction and whether there is an enforcement treaty between the relevant countries.

This is why options A and C are incorrect. Enforceability is absolutely affected by the law of the place where enforcement is sought, and foreign judgments are not universally or automatically recognized worldwide. Option B is also too absolute because asset location can matter practically, but the Manual makes clear that enforceability does not always depend solely on where assets are located. The better statement is that a judgment secured in one jurisdiction might not be effective in another jurisdiction where the defendant resides or holds assets. That is the cross-border enforcement problem fraud examiners must understand when asset recovery is involved.

“The interviewer generally should indicate his name and company, but he should avoid stating his title. In general, the more informal the interview, the more relaxed the respondent”.

Introducing oneself only by name and company (not title like CFE or auditor) avoids intimidation and builds cooperation.

The correct answer is: Whether recording is legal depends on consent laws — so the most helpful question is effectively: “Is consent required from one or all parties to record this conversation?”

Among the provided choices, the closest match is NOT listed explicitly. But based on the ACFE manuals, the correct interpretation is that none of the technical details (audio/video, file format, time, duration) matter — only the legal consent requirement matters.

Complete Detailed Explanation with Exact Extracts from Fraud Examiner (CFE) - Investigation Documents: =

The 2014 International Fraud Examiners Manual states:

“In some circumstances, recording an interview might be illegal. Some jurisdictions limit an employer’s right to record employee interviews during an investigation. In fact, in some jurisdictions, audio recording an interview is permitted only with the consent of all parties to the communication. Thus, fraud examiners should always consult with an attorney when deciding whether to record an interview.”

It further emphasizes:

“A telephone recording consent form stipulates where, when, and with whom telephone conversations can be recorded… Be cautioned that the form alone does not make the conduct of recording a telephone conversation illegal or legal.”

???? Interpretation:

The legality of recording has nothing to do with:

Audio vs video (A)

Digital file format (B)

Work hours (C)

Duration (D)

Instead, it depends entirely on jurisdictional consent laws (one-party vs all-party consent).

The Fraud Examiners Manual explains that rather than drafting an exhaustive list of questions, the interviewer should:

“formulate a brief outline of key points to discuss during the interview”.

This helps organize thoughts while allowing flexibility.

Benford’s Law is most useful for naturally occurring numerical data, especially transaction amounts that span several orders of magnitude. Fraud examiners use it to identify unusual digit patterns that might suggest manipulation, fabricated numbers, or other anomalies requiring follow-up. Transaction amounts are appropriate because they are generated through real economic activity and can be tested for expected digit distributions. Retail store numbers, telephone numbers, and government identification numbers are assigned numbers, not naturally occurring values. Assigned numbers usually do not follow Benford’s expected first-digit pattern and would produce misleading results. Benford’s Law does not prove fraud by itself, but it can help identify suspicious records for further examination. Therefore, transaction amounts are the best data type for this analysis.

Fraud examination reports are not written only for internal use. The 2014 International Fraud Examiners Manual clearly emphasizes:

“When drafting a report, fraud examiners must consider who might end up reading it. Fraud examiners should keep in mind that the fraud examination report will be read by the general public and adverse parties. Under no circumstances should the fraud examiner prepare a communication with the idea that the information will not be disclosed to adverse third parties. Fraud examiners should draft their reports with this caveat in mind.”

The manual further specifies the wide range of potential readers:

*“There are many individuals and groups that might end up reading a fraud examination report, including the following parties:

Company insiders (managers, board of directors, owners, investors, etc.)

Attorneys (legal counsel, prosecutors, regulators, and defense counsel)

Defendants and witnesses

Press and media outlets

Judges or juries”*

This aligns with the CFE Prep - Investigations study guide, which also confirms:

“There are many parties that might read a fraud examination report, including company insiders, attorneys, defendants and witnesses, press and media outlets, and judges or juries.”

???? Interpretation:

The media may access the report through litigation disclosures or leaks.

Opposing legal counsel will review the report during discovery or trial.

Investors and owners (company insiders) are primary stakeholders.

Thus, the only correct choice is D. All of the above, because fraud examination reports must be written with all possible audiences in mind, ensuring accuracy, clarity, impartiality, and professionalism to withstand scrutiny from multiple directions.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, whistleblower, the question asks about Allison is CORRECT, CORRECT.

The correct answer is C: Alison cannot be fired for informing the government of her employee’s fraud.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The correct answer is B. False. The CFE Manual clearly distinguishes tax evasion from tax avoidance. It explains that tax evasion refers to fraudulent or illegal actions taken to avoid reporting or paying taxes. By contrast, tax avoidance is a legal means of lowering one’s tax bill through legitimate deductions, credits, and shelters. Therefore, if Mary is using lawful deductions and credits to reduce her taxes, she is not committing tax evasion; she is engaging in tax avoidance.

The Manual emphasizes that the major difference between the two concepts is legality and intent. Tax evasion involves wrongful conduct, false reporting, concealment, or intentional misrepresentation. Tax avoidance, on the other hand, involves using lawful provisions of tax rules to reduce liability. The Manual also notes that a person accused of tax crimes may defend themselves by arguing that they were engaged in avoidance, not evasion, when they used legitimate deductions, credits, or shelters.

Because the question specifically says Mary used legal means and legitimate deductions and credits, her conduct falls squarely within the concept of tax avoidance, not evasion. Therefore, the statement is false, and B is the correct answer.

Banking records are generally nonpublic records and are commonly treated as private and confidential. Fraud examiners usually cannot obtain a subject’s bank records from a financial institution without the subject’s consent, legal process, or another lawful basis. By contrast, bankruptcy court records, divorce records, and real property records are often maintained by courts or government offices and might be publicly accessible depending on the jurisdiction and local privacy rules. Although public access varies by country and locality, bank records are consistently among the most protected types of personal financial information. The Fraud Examiners Manual stresses that external sources often cannot provide certain financial documents without consent or legal authority. Therefore, an individual’s banking records are the best example of private, nonpublic records.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, anti-money laundering, FATF, the question asks about FATF, AML.

The correct answer is C: Is required to file a report of suspicious transactions with appropriate authorities because the employees suspect money laundering violations.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes. Money laundering typically involves three stages: placement (introducing illegal funds into the financial system), layering (creating complex transactions to hide the source), and integration (returning the funds to the launderer in an apparently legitimate form).

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, trustee, bustout, the question asks about the core concepts in this area.

The correct answer is D: Purchases large quantities of goods on credit.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

Cloud computing creates several difficulties for digital forensic investigations, including lack of data control, lack of information accessibility, jurisdictional issues, resource sharing, and chain-of-custody problems. The best answer is A because users and investigators often do not physically control where the data are stored, how they are preserved, who accessed them, or whether they are mixed with other users’ data. This complicates evidence identification, preservation, acquisition, and authentication. Option B is not the main forensic concern because bandwidth limitations are not the core legal or evidentiary problem. Option C is unsupported because prosecutorial interest is not identified as a cloud-forensics challenge. Option D is too absolute because legal orders can apply to cloud providers, although enforcement can be difficult across jurisdictions.

A fraud response plan should be practical, tailored to the organization, and informed by the organization’s risks. It should consider prior fraud incidents, known vulnerabilities, business activities, industry-specific schemes, reporting channels, investigation responsibilities, legal consultation, evidence preservation, and communication protocols. Option A is correct because previous fraud cases and industry-related risks help management design a plan that fits realistic threats. Option B is incorrect because no response plan can completely eliminate all risk. Option C is too rigid; the plan should guide responses, but each fraud examination depends on the facts and must remain flexible. Option D is also incorrect because excessive complexity can make the plan difficult to follow. A useful fraud response plan is clear, usable, and risk-based.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to front business, the question asks about MOST ACCURATE, using front businesses as a method of laundering money is MOST ACCURATE.

The correct answer is D: A front business that conducts legitimate business can provide cover for delivery and transportation related to illegal activity..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Fraud examiners can obtain documentary evidence by consent, subpoena, or other legal means. While oral consent may sometimes be sufficient, bank records from financial institutions generally require written consent. Without written consent, the bank is not required to provide access. As stated in the manual:

“Accessing a subject’s bank records from financial institutions, for instance, generally requires written consent. If no consent is given… legal action might be required, most often a subpoena or other court order”.

Thus, although the suspect gave oral consent, Alex cannot access the bank records without written authorization or legal order.

According to CFE Prep – Investigations:

“In most jurisdictions, income tax records are not public records and cannot be accessed for pre-employment purposes”.

Common public sources include court, property, licensing, and utility records.Thus, searching income tax filings is not a common use of public sources.

The Fraud Examiners Manual and CFE Prep Guide both state:

“In an admission-seeking interview, the interviewer should transition to the verbal confession when the accused furnishes the first detailed information about the offence. There are three approaches to obtaining the confession: chronologically, by transaction, or by event”.

Thus, B is the true statement.

Under the ACFE Fraud Examiners Manual, Law Section, particularly The Civil Justice System and Individual Rights During Examinations , individuals have legally protected privacy interests that can give rise to civil liability when violated. One recognized invasion of privacy tort is intrusion upon seclusion, which occurs when someone intentionally intrudes, physically or otherwise, into another person’s private affairs without authorization and in a manner that would be highly offensive to a reasonable person.

In this scenario, Wilson searched Garcia’s private tablet without legitimate authority or investigative basis. Garcia had a reasonable expectation of privacy in her personal device, and there was no suspicion of wrongdoing to justify the intrusion. Because the wrongful act is the unauthorized access itself, Garcia would most likely assert a claim for intrusion into private matters.

Public disclosure of private facts requires dissemination of private information to third parties, which is not indicated here. Defamation requires a false statement communicated to others that harms reputation, which is also absent. Property damage would require physical harm to the tablet.

Therefore, the most appropriate civil claim is intrusion into an individual’s private matters, as the injury arises from the unauthorized invasion of Garcia’s privacy.

The Fraud Examiners Manual explains:

“A Certified Fraud Examiner should not promise confidentiality or leniency to an informant to obtain testimony… the confidentiality relationship runs first to the client or employer”.

Thus, Lisa cannot guarantee full confidentiality but may state she will do her best.

The best answer is A. A personal mobile phone brought to the office from home. In the CFE Law materials, workplace privacy analysis turns on whether the employee has a reasonable expectation of privacy in the place or item searched and whether the employer’s search is justified, necessary, and proportionate. Personal items that belong to the employee, especially items brought from home and used for private communications or storing personal data, are the strongest candidates for a protected privacy interest.

By contrast, an employer-issued laptop is usually much less private because it is company property and often subject to workplace monitoring policies. A desk drawer in a communal workspace may carry some expectation of privacy in certain situations, but generally less than a personally owned phone, especially if the workspace is shared or subject to employer access. A recycling bin is the weakest option because discarded items usually carry little or no reasonable expectation of privacy. Therefore, among the listed choices, the item an employee is most likely to have a reasonable expectation of privacy in is the personal mobile phone. This answer is also consistent with the broader CFE principle that privacy protection is strongest where the item is personal, private, and not owned or controlled by the employer.

In most adversarial jurisdictions, a person can qualify as an expert based on education, training, skill, knowledge, or experience. Therefore, experience alone may be sufficient if it gives the witness specialized knowledge that will help the fact finder understand evidence or determine a disputed fact. A professional certification can strengthen an expert’s qualifications, but it is not always required. The agreement of all parties is also not required; the judge decides whether the witness is qualified and whether the testimony is relevant and reliable. Education is important, but it is not the sole or primary basis in every case. Fraud examiners can qualify as experts when their practical experience and specialized knowledge meet the court’s standard.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to conspiracy, the question asks about the core concepts in this area.

The correct answer is C: The defendant knew all the details or objectives of the conspiracy.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The correct answer is C. The CFE Manual states that in most jurisdictions, a duty to cooperate exists in every employer-employee relationship, although the precise scope of that duty can vary. In a private-company internal investigation, an employee who is asked to participate will therefore likely have a duty to cooperate as part of the employment relationship.

Option D is incorrect because the Manual specifically explains that the right to remain silent generally applies when a person is being questioned by government authorities or someone acting on the government’s behalf, not when the questioning is conducted by a private employer acting on its own. As a result, the right to remain silent generally does not apply in internal investigations by private companies, and employers can often discipline or even terminate employees who refuse to cooperate. Option B is too broad because, although employees may have some privacy rights, those rights do not generally allow them to categorically refuse all cooperation in a private internal investigation. Option A is also inaccurate because employee duties are not unlimited; requests still must be evaluated in context and can vary by jurisdiction. Therefore, the most accurate statement is that Payne likely has a duty to cooperate as part of the employer-employee relationship.

When filing a civil suit, a plaintiff must consider whether the court has authority to hear the matter and whether the case is filed in a proper location. Venue commonly concerns the proper geographic location for the case, such as where the defendant resides or where the claim originated. In fraud matters, the place where relevant transactions occurred can be an important factor. Court “availability” is not a jurisdictional requirement. A defendant’s consent might affect some personal jurisdiction issues, but it does not cure all jurisdictional defects, especially subject-matter jurisdiction. A court’s prior experience with the parties is also not a valid basis for jurisdiction. Therefore, option A is the best answer.

The manual and CFE Prep list the main limitations:

Coverage varies by jurisdiction.

Searches are limited in area.

Records are often abstracts.

Information may be inaccurate or outdated.

Searches can be erratic.

Nowhere is “difficulty in finding database companies” mentioned.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about money services businesses (MSBs) is INCORRECT, INCORRECT.

The correct answer is B: MSBs are generally less strictly regulated than traditional financial institutions..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The reporting and testifying phase of a digital evidence investigation is where the examiner presents the results of the analysis fairly, objectively, and in a way that supports the reliability of the process. The purpose is not to prove guilt at all costs, but to explain what was done, what was found, and why the evidence and analysis are valid. Option B is correct because digital evidence must be presented in a manner that confirms the soundness of collection, preservation, processing, and analysis. Option A is too conclusory and improperly focuses on proving guilt. Option C is too narrow because live demonstrations are not the primary goal. Option D is educational rather than evidentiary.

The Fraud Examiners Manual warns against phrasing admissions as direct questions using emotive terms:

“The admission-seeking interview begins with a direct accusation… The accusation should be phrased as though the accused’s guilt has already been established. Emotive words such as steal, fraud, and crime should be avoided… Wrong: ‘Did you do this?’”.

Thus, phrasing the question as “Did you steal the money?” is least effective.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about MOST LIKELY.

The correct answer is B: The existence of a collective bargaining agreement..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about CDD, FATF.

The correct answer is B: False.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Admission-seeking questions serve several purposes, including distinguishing innocent individuals from culpable individuals, encouraging a culpable person to confess, and obtaining a signed written statement acknowledging the facts. The admission-seeking interview is not a routine background interview and should be used only when the examiner has a reasonable basis to believe the subject committed the act and other reasonable investigative steps have been completed. Remorse might arise during the interview, but measuring remorse is not its primary purpose. Asset recovery is also important in fraud examinations, but it is not the main purpose of an admission-seeking interview. Gathering background information is usually handled through introductory or informational questions. Therefore, option C best reflects the purpose stated in the CFE materials.

The correct answer is A. The CFE Manual explains that to recover for intentional infliction of emotional distress, the plaintiff must prove that the defendant engaged in extreme and outrageous conduct, that the defendant acted intentionally or recklessly, and that the victim actually suffered emotional or mental distress as a result of the defendant’s conduct. These core elements match options B, C, and D.

There is no general requirement that the distress must have lasted for at least two years. That time-based condition is not one of the recognized elements listed in the CFE Law section. The Manual instead focuses on the nature of the conduct and the causal connection between that conduct and the victim’s injury. It also notes that the conduct must be sufficiently outrageous to exceed the bounds tolerated by civilized society and that mere insults or ordinary upset are not enough. Additionally, the Manual emphasizes that actionable claims require proof of serious, visible, and provable harm. Still, none of those requirements impose a fixed minimum duration such as two years. Accordingly, A is the only choice that is not a required element of this common law tort.

“Opinions or conclusions concerning the guilt or innocence of a fraud suspect is outside the scope of a fraud examination and should never be included in a report”.

Functions of a fraud examination report include presenting evidence, corroborating facts, and supporting credibility. Communicating the examiner’s qualifications to provide opinions is not a function.

Therefore, option D is not a function of a fraud examination report.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, cross-examination, the question asks about MOST ACCURATE, cross-examination of witnesses in adversarial systems.

The correct answer is A: If opposing counsel asks an overly complex question during cross-examination, witnesses should ask for the question to be rephrased.

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases.

The Manual and Prep Guide state:

“Before conducting a covert operation, it is essential that the basis for the operation be committed to writing, preferably in a memo. The memorandum should clearly state: the information upon which the covert operation will be based; the information that is expected to be gained from the operation; the identities of suspects, if known; operatives under the fraud examiner’s care, custody, or control. Confidential sources’ identities should not be disclosed.”

Thus, expected information belongs, but confidential source identities must not

The attorney is using a bias attack. In cross-examination, opposing counsel might try to show that an expert witness’s work, report, or opinion is not independent, but instead was influenced by the party that hired or paid the expert. Suggesting that Llewellyn was directed to reach a particular conclusion attacks impartiality and implies that the testimony was purchased or shaped to favor the hiring party. Contradiction focuses on inconsistent statements or conflicts with prior testimony or documents. Myopic vision focuses on excessive attention to one area while ignoring another. A sounding board technique attempts to use the witness to support the opposing side’s theory. Because the question attacks Llewellyn’s neutrality, answer A is correct.