CFC Evidence Collection & Case Analysis 5

Question 1

A forensic consultant is analyzing a questioned will to determine if it was backdated. Which physical evidence would be MOST probative?

Accepted Answer

Ink chemistry analysis showing ink components not commercially available until after the document's stated date

Answer

Ink dating using chemical analysis can identify components introduced to the market after a document's purported date, proving backdating.

Question 2

During an autopsy-linked forensic investigation, a consultant needs to determine if injuries are consistent with a fall or a beating. Which characteristic BEST differentiates defensive wounds from impact injuries?

Accepted Answer

Defensive wounds typically appear on forearms, hands, and outer aspects of arms from protective posturing

Answer

Defensive wounds occur on the forearms, palms, and outer arms because victims instinctively raise their arms to protect themselves from blows.

Question 3

A forensic consultant analyzing network intrusion evidence discovers logs showing repeated failed login attempts followed by a successful login. What attack pattern does this indicate?

Accepted Answer

Brute-force or credential stuffing attack

Answer

Multiple failed login attempts followed by success is the hallmark signature of a brute-force or credential stuffing attack.

Question 4

In forensic accounting, the 'net worth method' for detecting unreported income compares which two factors?

Accepted Answer

Increase in net worth plus personal living expenses against known legitimate income sources

Answer

The net worth method detects unreported income by showing that a taxpayer's wealth increased and expenses were incurred beyond what their reported income could explain.

Question 5

A forensic consultant is asked to review surveillance footage as evidence. Which factor would MOST undermine the footage's evidentiary value?

Accepted Answer

A gap in the recording timestamp sequence suggesting possible deletion or editing

Answer

Timestamp gaps in surveillance footage suggest potential tampering, raising serious questions about the recording's authenticity and completeness.

(CFC) Certified Forensic Consultant Practice Test

(CFC) Certified Forensic Consultant Practice Test

CFC Evidence Collection & Case Analysis 5