CrFA CrFA Digital Forensics & Data Analysis 2

Question 1

In data analytics for fraud detection, stratification of transactions is used to:

Accepted Answer

Group transactions into ranges to identify unusual concentrations

Answer

Stratification organizes data into layers or bands so the examiner can see where transaction volumes or amounts cluster abnormally.

Question 2

Which hashing algorithm is most commonly used to verify the integrity of a forensic disk image?

Accepted Answer

SHA-256

Answer

SHA-256 produces a unique cryptographic hash of the original data, allowing the examiner to confirm the copy is bit-for-bit identical to the source.

Question 3

A forensic accountant discovers that journal entries were systematically posted at 2:00 a.m. by a generic user account. This finding most likely indicates:

Accepted Answer

Possible unauthorized or fraudulent entries made to avoid detection

Answer

Unusual posting times combined with generic credentials are red flags suggesting entries may have been made deliberately outside business hours to evade oversight.

Question 4

Which technique involves comparing a company's reported financial ratios to industry benchmarks to identify anomalies?

Accepted Answer

Ratio analysis

Answer

Ratio analysis compares key financial metrics such as gross margin or days payable outstanding against peer companies to highlight deviations that may signal fraud.

Question 5

When recovering deleted files during a forensic investigation, the examiner looks for data in which area of a hard drive?

Accepted Answer

Unallocated clusters or slack space

Answer

Deleted files are often recoverable from unallocated clusters and file slack space before those areas are overwritten by new data.

CrFA - Certified Forensic Accountant Practice Test

CrFA - Certified Forensic Accountant Practice Test

CrFA CrFA Digital Forensics & Data Analysis 2