CFC Evidence Collection & Case Analysis 3

Question 1

When analyzing blood spatter evidence, a 'cast-off' pattern most likely indicates which type of event?

Accepted Answer

Blood flung from a weapon during a backswing or follow-through motion

Answer

Cast-off patterns are created when blood is flung in an arc from a bloody object such as a weapon being swung.

Question 2

A forensic consultant reviewing financial records notices that expense amounts cluster just below $10,000. What fraudulent scheme does this suggest?

Accepted Answer

Structuring (smurfing) to avoid Bank Secrecy Act reporting thresholds

Answer

Structuring involves breaking transactions into amounts below $10,000 to avoid mandatory CTR filing under the Bank Secrecy Act.

Question 3

Which forensic technique is used to recover deleted files from a hard drive when file system entries have been overwritten?

Accepted Answer

File carving based on file header and footer signatures

Answer

File carving searches raw disk data for known file signatures (headers/footers) to reconstruct files even when directory entries are gone.

Question 4

In conducting a forensic interview, which technique is MOST consistent with evidence-based best practices for obtaining reliable information?

Accepted Answer

Using open-ended questions and the cognitive interview method

Answer

Cognitive interview techniques using open-ended questions are empirically validated to produce more accurate and complete recall.

Question 5

A forensic consultant must testify about digital timestamps found in metadata. Which limitation must the expert disclose to the court?

Accepted Answer

System clocks can be inaccurate or deliberately manipulated, affecting timestamp reliability

Answer

System clocks may be incorrect or intentionally altered, so metadata timestamps should be corroborated with other evidence rather than treated as absolute.

(CFC) Certified Forensic Consultant Practice Test

(CFC) Certified Forensic Consultant Practice Test

CFC Evidence Collection & Case Analysis 3