BMO Forensic Science & Analysis 3 — Questions and Answers
Question 1: An employee submits expense reports for business meals that never occurred. Under the ACFE fraud tree, this is categorized as which type of occupational fraud?
- Asset misappropriation (Correct answer)
- Corruption
- Financial statement fraud
- Money laundering
Correct answer: Asset misappropriation
Fictitious expense reimbursements fall under asset misappropriation, the most common category of occupational fraud where employees steal or misuse organizational resources.
Question 2: What is the purpose of a 'write blocker' device in digital forensic investigations?
- To encrypt data on a seized device
- To prevent any data from being written to the original evidence device (Correct answer)
- To copy data faster from seized devices
- To block wireless transmissions from the device
Correct answer: To prevent any data from being written to the original evidence device
A write blocker prevents any data from being written to an original evidence drive during imaging, preserving the original state of the evidence.
Question 3: Which blood spatter pattern indicates that blood fell from a stationary source straight down onto a horizontal surface?
- Satellite spatter
- Passive drop (Correct answer)
- Cast-off pattern
- Transfer stain
Correct answer: Passive drop
A passive drop occurs when blood drips due to gravity from a stationary or slowly moving source, creating a circular pattern on a horizontal surface.
Question 4: In forensic document examination, what technique is used to detect alterations in printed documents by analyzing toner and ink composition?
- Infrared spectroscopy
- Electrostatic detection apparatus (ESDA)
- Thin-layer chromatography (Correct answer)
- Raman spectroscopy
Correct answer: Thin-layer chromatography
Thin-layer chromatography separates ink and toner components to identify different compositions, revealing whether different inks were used in the same document.
Question 5: A company's auditors discover that the CFO has been recording fictitious sales to inflate revenue. This is an example of which fraud scheme?
- Larceny
- Revenue overstatement (Correct answer)
- Accounts payable fraud
- Ghost employee scheme
Correct answer: Revenue overstatement
Recording fictitious sales to inflate reported revenue is a financial statement fraud scheme specifically categorized as revenue overstatement or fictitious revenue.
Question 6: What does 'chain of custody' documentation establish in a forensic investigation?
- The hierarchy of investigators assigned to the case
- A chronological record of who handled evidence and when (Correct answer)
- The sequence of crimes committed by a suspect
- The order in which evidence was discovered
Correct answer: A chronological record of who handled evidence and when
Chain of custody documents every person who handled evidence, when, and for what purpose, ensuring the evidence remains admissible in court.
Question 7: Which forensic technique uses the unique pattern of an individual's iris for identification purposes?
- Retinal scanning
- Iris recognition biometrics (Correct answer)
- Ocular tomography
- Pupillometry
Correct answer: Iris recognition biometrics
Iris recognition biometrics uses the unique, complex patterns in the colored ring of the eye, which remain stable throughout an individual's lifetime.
BMO Forensic Science & Analysis 3
An employee submits expense reports for business meals that never occurred.
Under the ACFE fraud tree, this is categorized as which type of occupational fraud?