CrFA CrFA Digital Forensics & Data Analysis

Question 1

Which federal standard governs the admissibility of digital evidence in U.S. federal courts?

Accepted Answer

Federal Rules of Evidence Rule 901

Answer

Daubert Standard

Answer

Frye Standard

Answer

Sarbanes-Oxley Act Section 802

Question 2

A forensic accountant uses a write blocker when imaging a hard drive primarily to:

Accepted Answer

Prevent alteration of the original evidence

Answer

Speed up the imaging process

Answer

Encrypt the copied data

Answer

Compress the disk image

Question 3

When analyzing financial data for fraud, which ACL/IDEA function is most useful for identifying duplicate invoice payments?

Accepted Answer

Duplicate key detection

Answer

Stratification

Answer

Benford's Law analysis

Answer

Aging analysis

Question 4

Benford's Law is most effective in detecting fraud when applied to which type of dataset?

Accepted Answer

Naturally occurring financial amounts across a wide range

Answer

Assigned sequential numbers like ZIP codes

Answer

Fixed salary payments

Answer

Inventory count sheets with uniform item quantities

Question 5

During e-discovery in a forensic accounting investigation, metadata is important because it can reveal:

Accepted Answer

When a document was created, modified, or accessed

Answer

The market value of assets in dispute

Answer

The creditworthiness of the defendant

Answer

The tax basis of transferred property

Question 6

A chain of custody document in a digital forensics investigation is maintained to:

Accepted Answer

Track who handled evidence and when, ensuring its integrity

Answer

Summarize findings for the jury

Answer

Record billable hours during the investigation

Answer

Document the client's cooperation with investigators