Treasury Enforcement Agent Exam Technology & Digital Applications 2 â Questions and Answers
Question 1: A Treasury Enforcement Agent is investigating a cryptocurrency money laundering case. Which blockchain characteristic is most useful for tracing illicit transactions?
- Transactions are anonymous and untraceable
- The public ledger records every transaction permanently (Correct answer)
- Cryptocurrency wallets require government registration
- Blockchain data is stored only on private servers
Correct answer: The public ledger records every transaction permanently
Blockchain's immutable public ledger records every transaction, allowing investigators to trace fund flows even across multiple wallets.
Question 2: When conducting a digital forensic examination of a seized computer, what is the first step an agent should take to preserve evidence integrity?
- Search the hard drive directly for incriminating files
- Create a forensic image (bit-for-bit copy) of the storage media (Correct answer)
- Power off the device and transport it immediately
- Connect the drive to an agency workstation and begin searching
Correct answer: Create a forensic image (bit-for-bit copy) of the storage media
Creating a verified forensic image preserves the original evidence unchanged, allowing analysis without risking alteration of the original.
Question 3: Which federal database allows Treasury Enforcement Agents to query financial institution reports of suspicious activity?
- NCIC (National Crime Information Center)
- FinCEN's BSA E-Filing System (Correct answer)
- CODIS (Combined DNA Index System)
- PACER (Public Access to Court Electronic Records)
Correct answer: FinCEN's BSA E-Filing System
FinCEN's BSA E-Filing System houses Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs) filed by financial institutions.
Question 4: An agent discovers a suspect is using a VPN to obscure online financial transactions. What technique can still help identify the suspect's real IP address?
- VPN users cannot be identified under any circumstances
- Requesting logs from the VPN provider via legal process (Correct answer)
- Blocking all VPN traffic at the national level
- Scanning the suspect's home network remotely
Correct answer: Requesting logs from the VPN provider via legal process
A legal process such as a subpoena or court order can compel a VPN provider to produce connection logs that reveal the subscriber's true IP address.
Question 5: Under the Electronic Communications Privacy Act (ECPA), what is generally required to access stored electronic communications held by a third-party provider?
- A verbal authorization from a senior agent
- A valid warrant, court order, or subpoena depending on communication type and age (Correct answer)
- Notification to the suspect before access is granted
- International treaty approval for cloud-stored data
Correct answer: A valid warrant, court order, or subpoena depending on communication type and age
ECPA establishes tiered requirementsâwarrants, court orders, or subpoenasâbased on the type and age of electronic communications sought.
Question 6: A suspect is structuring cash deposits to avoid Currency Transaction Report (CTR) thresholds. Which technology tool best helps agents detect this pattern?
- Manual review of paper bank statements
- Automated pattern-recognition software analyzing transaction data (Correct answer)
- Physical surveillance of bank teller interactions only
- Interviewing bank managers about unusual customers
Correct answer: Automated pattern-recognition software analyzing transaction data
Automated analytics platforms can flag structuring patterns across thousands of transactions far faster and more accurately than manual review.
Question 7: What does the term 'metadata' refer to in the context of digital evidence?
- The visible text content of a document or email
- Data that describes attributes of a file, such as creation date, author, and modification history (Correct answer)
- Encrypted data that cannot be read without a key
- The file size of a digital document
Correct answer: Data that describes attributes of a file, such as creation date, author, and modification history
Metadata is embedded data describing a file's properties, such as timestamps and author information, which can be critical investigative evidence.
Treasury Enforcement Agent Exam Technology & Digital Applications 2
A Treasury Enforcement Agent is investigating a cryptocurrency money laundering case.
Which blockchain characteristic is most useful for tracing illicit transactions?