CFE Evidence and Legal Systems 4

Question 1

When examining digital evidence in a fraud case, what is the first critical step a forensic examiner should take upon receiving a digital device?

Accepted Answer

Create a forensic bit-for-bit image of the original media

Answer

Creating a verified forensic image (bit-for-bit copy) preserves the original evidence, allows analysis without risk of altering the original, and supports chain of custody.

Question 2

Under the Federal Rules of Civil Procedure, what term describes the pre-trial process requiring parties to disclose electronically stored information relevant to the case?

Accepted Answer

Electronic discovery (e-discovery)

Answer

Electronic discovery (e-discovery) governs the identification, preservation, collection, and production of electronically stored information during litigation under FRCP Rule 26.

Question 3

Which type of documentary evidence in a fraud case is most likely to be challenged on authentication grounds?

Accepted Answer

Printed screenshots of email conversations

Answer

Printed screenshots are easily manipulated and lack inherent authentication markers, making them more vulnerable to challenges than documents obtained directly from authoritative sources.

Question 4

In a fraud investigation, 'metadata' from electronic documents can be valuable primarily because it reveals what information?

Accepted Answer

Data about when a file was created, modified, and by whom

Answer

Metadata (data about data) embedded in electronic files can reveal creation dates, modification history, author names, and version history — often crucial for detecting document fraud or backdating.

Question 5

A fraud examiner needs to obtain bank records from a financial institution without tipping off the suspect. Which legal mechanism is most appropriate in a civil investigation?

Accepted Answer

Civil subpoena duces tecum

Answer

A civil subpoena duces tecum compels third-party institutions to produce records in civil proceedings and can be served directly on the bank without notifying the suspect.

Certified Fraud Examiner Exam Practice Test

Certified Fraud Examiner Exam Practice Test

CFE Evidence and Legal Systems 4