Treasury Enforcement Agent Exam Technology & Digital Applications 5 — Questions and Answers
Question 1: A Treasury agent is investigating a tax evasion scheme using offshore bank accounts. Which international framework enables automatic exchange of financial account information between countries?
- SWIFT messaging standards
- The OECD's Common Reporting Standard (CRS) and FATCA (Correct answer)
- The Basel III banking regulations
- The UN Convention Against Corruption (UNCAC)
Correct answer: The OECD's Common Reporting Standard (CRS) and FATCA
FATCA (U.S.) and the OECD's CRS require foreign financial institutions to report account information on foreign nationals to their respective tax authorities.
Question 2: In digital investigations, what is the significance of 'write blockers' when examining seized storage media?
- They encrypt the evidence to prevent unauthorized viewing
- They prevent any data from being written to the original media during examination, preserving evidence integrity (Correct answer)
- They block network access to prevent remote wiping of the device
- They speed up the forensic imaging process significantly
Correct answer: They prevent any data from being written to the original media during examination, preserving evidence integrity
Write blockers physically or logically prevent any writes to the original storage device, ensuring the forensic examination does not alter or contaminate the evidence.
Question 3: What is 'smurfing' in the context of financial crimes technology investigations?
- Using compromised social media accounts to solicit fraudulent investments
- Breaking large sums of illicit money into smaller deposits made by multiple individuals to avoid detection thresholds (Correct answer)
- Exploiting vulnerabilities in ATM software to withdraw excess cash
- Using proxy servers to anonymize wire transfer instructions
Correct answer: Breaking large sums of illicit money into smaller deposits made by multiple individuals to avoid detection thresholds
Smurfing is a form of structuring where multiple individuals each deposit amounts below the $10,000 CTR threshold to launder larger sums undetected.
Question 4: When an agent encounters a running computer during a search, which forensic principle guides whether to pull the power or perform a 'live acquisition'?
- Always pull power immediately to prevent data modification
- Consider whether volatile data (RAM contents, active network connections) has higher investigative value than risks of powering down (Correct answer)
- Live acquisition is illegal without a separate court order
- Running computers must be left on and returned to the suspect after imaging
Correct answer: Consider whether volatile data (RAM contents, active network connections) has higher investigative value than risks of powering down
RAM contains volatile data like encryption keys and running processes that disappear on shutdown, so agents must weigh the value of live acquisition against evidence risks.
Question 5: Which tool is commonly used by financial investigators to visualize connections between entities, bank accounts, and transactions in complex money laundering networks?
- Standard spreadsheet software like Microsoft Excel
- Link analysis software such as Analyst's Notebook or Palantir (Correct answer)
- Basic text editors for reviewing transaction logs
- Word processing software for report generation
Correct answer: Link analysis software such as Analyst's Notebook or Palantir
Link analysis tools like Analyst's Notebook visualize relationships between entities, helping investigators map complex criminal networks and financial flows.
Question 6: A suspect is using prepaid debit cards purchased with cash to move illicit funds. Which regulatory requirement was designed to increase traceability of these instruments?
- Prepaid cards are entirely unregulated under federal law
- FinCEN rules requiring registration and identity verification for prepaid cards above certain thresholds (Correct answer)
- IRS rules requiring prepaid card issuers to report all transactions over $600
- The Federal Reserve's Regulation E covering only bank-issued debit cards
Correct answer: FinCEN rules requiring registration and identity verification for prepaid cards above certain thresholds
FinCEN regulations under the BSA require prepaid card programs to implement AML programs including identity verification for cards above threshold values.
Question 7: What is the primary purpose of the Financial Action Task Force (FATF) in relation to technology-enabled financial crimes?
- To directly arrest international financial criminals
- To set international standards and promote implementation of measures to combat money laundering and terrorist financing, including for virtual assets (Correct answer)
- To provide technology tools directly to national law enforcement agencies
- To operate the global SWIFT interbank messaging network
Correct answer: To set international standards and promote implementation of measures to combat money laundering and terrorist financing, including for virtual assets
FATF issues global standards (Recommendations) that countries must implement, including Recommendation 15 on virtual assets and virtual asset service providers.
Treasury Enforcement Agent Exam Technology & Digital Applications 5
A Treasury agent is investigating a tax evasion scheme using offshore bank accounts.
Which international framework enables automatic exchange of financial account information between countries?