CrFA CrFA Digital Forensics & Data Analysis 1

Question 1

Which federal standard governs the admissibility of digital evidence in U.S. federal courts?

Accepted Answer

Federal Rules of Evidence Rule 901

Answer

Federal Rules of Evidence Rule 901 requires authentication of digital evidence by showing it is what the proponent claims it to be.

Question 2

A forensic accountant uses a write blocker when imaging a hard drive primarily to:

Accepted Answer

Prevent alteration of the original evidence

Answer

A write blocker prevents any data from being written to the original drive, preserving the integrity of the evidence.

Question 3

When analyzing financial data for fraud, which ACL/IDEA function is most useful for identifying duplicate invoice payments?

Accepted Answer

Duplicate key detection

Answer

Duplicate key detection compares fields such as invoice number, vendor, and amount to flag transactions that appear more than once.

Question 4

Benford's Law is most effective in detecting fraud when applied to which type of dataset?

Accepted Answer

Naturally occurring financial amounts across a wide range

Answer

Benford's Law applies to naturally occurring data spanning several orders of magnitude, where the leading digits follow a predictable logarithmic distribution.

Question 5

During e-discovery in a forensic accounting investigation, metadata is important because it can reveal:

Accepted Answer

When a document was created, modified, or accessed

Answer

File metadata such as creation date, last modified date, and author information can help establish timelines and detect document tampering.

CrFA - Certified Forensic Accountant Practice Test

CrFA - Certified Forensic Accountant Practice Test

CrFA CrFA Digital Forensics & Data Analysis 1