ACFE CFE-Fraud-Investigations-and-Legal-Issues Certified Fraud Examiner (CFE) - Fraud Investigations and Legal Issues Exam Practice Test

Greg should conduct the fraud examination as though the case will result in litigation. This principle ensures that evidence is collected, preserved, documented, and analyzed in a manner consistent with legal standards. Even if the organization ultimately handles the matter internally, the examiner should assume that the evidence, report, notes, and testimony might later be examined in court, arbitration, regulatory proceedings, or employment litigation. Option A is too narrow because internal discipline is only one possible outcome. Option C is incorrect because the examiner must remain objective, not assume innocence or guilt. Option D may be possible, but media attention is not the controlling assumption. The proper investigative mindset is to prepare the matter as if legal proceedings will follow.

Beth’s strongest claim is public disclosure of private facts. The Fraud Examiners Manual explains that this civil wrong occurs when someone publicizes private facts about another person’s life that are not of public concern and would be highly offensive to a reasonable person. Medical information about surgery and a chronic illness is private, and Eric disclosed it to coworkers who were not involved in the investigation. Defamation and slander require false statements that harm reputation, but the facts here state that Eric disclosed true information. Negligent misrepresentation involves false information supplied carelessly, usually in a business or transactional setting. Because liability can arise even when private facts are true, option B is the best answer.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to privacy, the question asks about the core concepts in this area.

The correct answer is C: Establish a contract between the entities exchanging the information.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about large cash transactions with customers as provided by the Financial Action Task Force (FATF) Recommendations, which of the following transactions would require a report to be filed with the government, FATF.

The correct answer is C: A single cash purchase of casino credits for a sum that is above the jurisdiction ' s designated threshold..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Banking records are generally nonpublic records and are commonly treated as private and confidential. Fraud examiners usually cannot obtain a subject’s bank records from a financial institution without the subject’s consent, legal process, or another lawful basis. By contrast, bankruptcy court records, divorce records, and real property records are often maintained by courts or government offices and might be publicly accessible depending on the jurisdiction and local privacy rules. Although public access varies by country and locality, bank records are consistently among the most protected types of personal financial information. The Fraud Examiners Manual stresses that external sources often cannot provide certain financial documents without consent or legal authority. Therefore, an individual’s banking records are the best example of private, nonpublic records.

Wire transfer records include specific transactional details:

“The information contained on a wire transfer generally will include… the amount of the transfer, the date, the name of the sender, the routing number of the originating bank, the identity of the beneficiary, [and] the routing number of the recipient bank”.

They do not list things like the type of money order, customs port of entry, or government ID numbers (CFE Prep explicitly states that recipient government IDs are not typically included).

The most relevant factor is whether the social media page or profile is publicly available. Fraud examiners may generally search and extract information from a subject’s page if it is open to the public. However, privacy settings and privacy laws limit what information may be accessed. Examiners should avoid pretexting, password cracking, social engineering, or other unethical means to access restricted material. Platform ownership and the likelihood of finding incriminating evidence do not determine legality. The type of content might affect relevance, but legality turns primarily on whether the information was lawfully available to the public or obtained through proper legal process. Therefore, option B is the best answer.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is A: True.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The CFE Prep – Investigations states:

“If a fraud examiner gets a verbal confession from the fraudster, it does not matter whether the fraudster claims his conduct was an accident. The following items of information should be obtained … admission that the accused knew the conduct was wrong, facts known only to the confessor, the accused’s motive, approximate dates, involvement of others, physical evidence, and disposition of illicit income.”

Thus, the examiner does not need a statement about accident.

Court records are frequently used in fraud investigations. Both the Prep Guide and the Manual agree that the court clerk’s office (court authorities) is the original and most reliable source of certified and accurate records.

Although commercial services and online databases exist, the manuals emphasize that reliability and certification are best ensured by going directly to the court where the case was filed.

Thus, the statement is True.

When obtaining a verbal confession, the fraud examiner should secure details such as: admission of wrongdoing, number of instances, amount involved, dates, involvement of others, residual assets, and motive. However, it does not matter whether the suspect claims the conduct was an accident; that is not necessary to record.

The correct answer is D. Banking and accounting requirements and practices. Under the CFE Law topics addressing anti-bribery and corruption, the OECD Recommendation focuses heavily on strengthening the systems that help detect, prevent, and document improper payments to foreign public officials. A core part of that framework is the improvement of banking transparency, accounting standards, recordkeeping, internal controls, and audit-related practices. These areas are critical because bribery is often concealed through false entries, off-the-books accounts, sham invoices, disguised consulting fees, or misleading payment descriptions.

This emphasis is consistent with the fraud examiner’s role in identifying how corrupt payments move through an organization’s financial systems. By improving accounting and banking requirements, member states make it harder for individuals and entities to hide bribes and easier for investigators to trace suspicious transactions. The other choices are not the primary focus of the Recommendation in this context. Public safety and public health are unrelated to the OECD’s principal anti-bribery infrastructure goals, and although criminal laws are important, the Recommendation is especially known for encouraging stronger financial reporting and accounting controls as anti-corruption tools. Therefore, D is the most accurate choice.

The Fraud Examiners Manual and CFE Prep Guide explain that tracing loan proceeds is a key investigative tool, but its scope is limited. Specifically, it helps determine:

if proceeds were deposited into hidden accounts,

if hidden accounts were used for loan payments, and

if loans were secured by hidden assets or unknown witnesses.

However, the manuals do not state that tracing loan proceeds can identify internal control weaknesses. That is a different aspect of fraud examination, often addressed through audit procedures or control assessments.

Thus, option D is NOT true.

This question tests your knowledge of Domain 8.

In the context of Criminal Prosecutions, specifically relating to deferred prosecution, the question asks about NOT.

The correct answer is A: To postpone prosecution until a company conducts an extensive internal investigation.

This question addresses criminal prosecution concepts. The correct answer correctly identifies aspects of criminal proceedings, burdens of proof, or sentencing options. Understanding the criminal justice process is essential for fraud examiners working with law enforcement.

According to the Fraud Examiners Manual:

“Credit card records are important in tracing assets… information on credit card charges might provide leads to identifying hidden assets. For example, if a fraud examiner notices that the subject used his credit card to purchase items at a marina, the fraud examiner should investigate further to determine if the subject owns a boat”.

Therefore, A is correct.

Search-warrant requirements generally apply to government authorities, not private parties acting independently. The Fraud Examiners Manual explains that search warrants grant government authorities the right to search premises or property for evidence. It also states that investigations by private parties may be conducted without special authority when the examiner acts prudently, lawfully, and in good faith. Because Beau is a private-company investigator and is not acting as a government agent, he generally does not need a search warrant to search company property such as an employee workstation, subject to privacy laws and company policy. Option D is especially risky because involving law enforcement could convert the search into government action. Option C is not required.

Tree maps are a data visualization technique that display hierarchical data using rectangles divided into smaller regions. The size, color, or placement of each rectangle can help communicate relative volume, grouping, or importance within the hierarchy. Option A is incorrect because keyword size and frequency are associated more closely with word clouds, not geospatial analysis. Geospatial analysis concerns location-based data. Option C is incorrect because color-coding and compatibility may improve visual communication, but they are not the core objectives of data visualization. Option D confuses link analysis with geospatial mapping; link analysis is used to show relationships among people, entities, transactions, accounts, or events. Therefore, the statement about tree maps is the accurate description.

Link analysis is described as a visual analytic tool that:

“Tracks the movement of money,”

“Demonstrates complex networks,”

“Helps identify indirect relationships with several degrees of separation,” and

“Discovers communications, patterns, and trends.”

It does not display financial ratios—that belongs to traditional financial statement/ratio analysis.

A best practice when collecting and organizing documents is to establish a document database early in the investigation. A document database helps the examiner track what was collected, where it came from, who provided it, when it was obtained, and how it relates to issues in the case. It also supports indexing, retrieval, review, and later report preparation. Option A is poor practice because originals and working copies should be controlled carefully and not mixed in a way that risks alteration or loss. Option B may be useful for some documents, but chronological order alone is not sufficient. Option D is inefficient and not the best general practice. Therefore, establishing a document database early is the strongest answer.

The best introduction is truthful but nonthreatening. The Fraud Examiners Manual explains that interviewers should introduce themselves, generally provide their name and company, avoid unnecessary titles that create fear, establish rapport, and state the interview purpose in general terms. Option A is accurate because Ralph truthfully identifies himself as an investigator hired by Pippy Inc. and asks for help gathering information about an issue. Options B and C unnecessarily use the title “Certified Fraud Examiner” and refer to “possible fraud,” which could make the employee defensive or overly cautious. Option D is inaccurate because Ralph was hired by Pippy Inc.; it states that he works for Pippy Inc., which might mislead the interviewee. Therefore, option A best follows interview theory.

In admission-seeking interviews, one rationalization technique is to depersonalize the victim (e.g., shifting the perception so the harm was against a company, not individuals). The example in the question—“It isn’t like you took something from a friend or neighbor”—is exactly this technique.

Body language alone (e.g., avoiding eye contact) cannot be taken as proof of deception. The Manual warns against drawing conclusions from a single behavioral cue:

“Avoiding eye contact is not directly linked to deception. Such behavior could stem from cultural norms, nervousness, or personality traits. Examiners should consider clusters of behavior, context, and corroborating evidence before concluding deception”.

Therefore, C is correct.

In jurisdictions that allow criminal bargaining agreements, the prosecution generally has discretion to decide whether to offer a bargain. The Fraud Examiners Manual explains that bargaining agreements occur when a defendant agrees with prosecutors to plead guilty or provide a confession in exchange for lesser charges, a reduced sentence, or another negotiated resolution. Such agreements are used to make criminal justice processes more efficient by reducing the need for full trials. Judges may need to approve or accept the final agreement depending on local law, but the offer itself usually comes from the prosecution. Defense counsel may request or negotiate a bargain, but counsel does not control whether one is offered. Therefore, option B is the most accurate statement.

“Distractions should be kept to a minimum. Ideally, there should be no photographs, windows, or other objects in the room. Chairs should be placed about four to six feet apart, and the accused should not be permitted to sit behind any physical barriers, such as chairs, tables, or desks” .

The door should be closed (but not locked), not open .

Tables or desks should not be between interviewer and suspect .

Thus, the correct adjustment is removing distractions (pictures/posters).

The Fraud Examiners Manual defines:

“Testimonial evidence is that evidence which is presented in the form of witness statements, whether oral or written, offered in response to questions” (Fraud Examiners Manual – Evidence section).The colleague’s statement overhearing a conversation is testimonial evidence.

When the objective is asset recovery through civil legal action, the practical value of litigation depends heavily on collectability—whether a favorable judgment can be satisfied. CFE guidance on tracing and asset recovery highlights that tracing engagements are commonly undertaken specifically to determine whether a potential defendant can pay a court-ordered sum if judgment is entered, and to locate assets that can be used to satisfy a judgment. If the defendant is judgment-proof or has insufficient reachable assets, the legal action might be economically irrational even if liability is strong. While statute of limitations (D) is legally important, the question asks what is most important before moving forward with a recovery action; from an investigative and recovery perspective, the threshold question is whether there are assets to recover or a realistic path to enforcement. Past arrests (B) do not answer the recovery feasibility question. Option C misframes the decision: legal actions proceed based on evidence and counsel’s assessment, but recoverability often drives whether to invest in litigation. Therefore, assessing whether the defendant has sufficient money or property to satisfy a judgment is the most important preliminary question.

The Fraud Examiners Manual notes:

“Fraud examiners are often tasked with tracing illicit transactions… For example, a victim of fraud might want a tracing search to facilitate the recovery of criminal proceeds”.

The tracing process begins by profiling the subject. The Fraud Examiners Manual identifies “Profile the Subject” as an early step in tracing illicit transactions, followed by reviewing information for leads, prioritizing those leads, and tracing the transactions. A proper profile includes financial information, such as assets, liabilities, income, and expenses, along with behavioral indicators such as lifestyle, habits, residences, vehicles, and spending patterns. Option A is incorrect because tracing is not a one-time collection event; it is iterative and lead-driven. Option B is incomplete because recovery considerations should influence the tracing strategy throughout the matter, not only after tracing is finished. Option D is inefficient because leads should be prioritized by relevance, reliability, and likely value, not simply handled in order received.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about the core concepts in this area.

The correct answer is B: False.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

According to the ACFE Fraud Examiners Manual, Law Section, under The Criminal Justice System and The Law Related to Fraud , obstruction of justice occurs when a person corruptly interferes with the administration of law or the proper functioning of the judicial process. This includes attempting to improperly influence, intimidate, or tamper with witnesses in a pending proceeding.

Offering money to witnesses in exchange for changing their testimony constitutes witness tampering, which is a classic form of obstruction of justice. The essence of obstruction is not merely the success of the interference but the corrupt attempt to impede the due administration of justice. The legal system depends on truthful testimony, and any effort to alter or influence witness statements through bribery undermines the integrity of judicial proceedings.

“Conspiracy to influence the court” is not a standard standalone criminal charge in this context, and fraudulent misrepresentation typically relates to deception for financial or property gain, not interference with judicial proceedings. Judicial extortion involves coercion under color of official authority, which does not apply here.

Therefore, Monique’s conduct—offering payment to alter testimony—would most likely result in additional charges for obstruction of justice because she is attempting to corruptly interfere with the criminal trial process.

Under the ACFE Fraud Examiners Manual, Law Section, particularly Individual Rights During Examinations and The Law Relating to Government Search and Seizure , constitutional protections against unreasonable search and seizure generally apply to actions taken by government authorities, not private employers. The right to be free from unreasonable searches typically restricts state action and requires government officials to obtain a warrant when conducting searches in areas where an individual has a reasonable expectation of privacy.

In this scenario, Steven is an investigator employed by a private company, not a government agent. Because he is acting on behalf of a private employer and not as an instrument or agent of the government, the constitutional requirement to obtain a search warrant does not apply. Private employers generally have broader authority to search company property, such as offices, desks, or equipment, particularly when investigating workplace misconduct.

Although civil liability could arise if the search violated employment agreements or privacy laws, the failure to obtain a search warrant does not itself constitute a constitutional violation in a purely private workplace investigation. Therefore, Steven did not violate Callie’s constitutional rights by failing to obtain a warrant before conducting the search.

Accordingly, the correct answer is False.

Cross-examination in adversarial systems is designed to test and challenge a witness’s testimony. The Fraud Examiners Manual explains that opposing counsel may attempt to control the witness, ask leading or complex questions, exploit weaknesses, and use prior statements or testimony to challenge credibility. A key goal is impeachment, which often involves showing that the witness has contradicted earlier statements or is otherwise unreliable. Option A is more consistent with direct examination, where background information is commonly developed. Option B is incorrect because opposing counsel usually does not ask questions unless the answers will help its case. Option C is wrong because a witness should not evade questions; if a question is complex, the witness should ask that it be rephrased.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, bustout, the question asks about CEO, MOST LIKELY.

The correct answer is D: A concealed transfer.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

Under the ACFE Fraud Examiners Manual, Law Section, specifically in The Law Related to Fraud and International Initiatives Against Fraud and Corruption , the OECD Recommendation on Combating Bribery of Foreign Public Officials in International Business Transactions emphasizes strengthening the legal infrastructure of member states.

The Recommendation calls on countries to adopt and enforce effective criminal laws that prohibit the bribery of foreign public officials. It also encourages the enhancement of civil, commercial, and administrative frameworks to support enforcement. This includes corporate liability provisions, adequate sanctions, proper accounting and auditing standards, whistleblower protections, and mechanisms for international cooperation. The goal is to ensure that bribery is clearly defined as a criminal offense and that enforcement mechanisms are robust, coordinated, and effective.

The focus is not on data protection, e-commerce regulations, or general public health and safety laws. Instead, it centers on harmonizing and strengthening anti-bribery statutes and related legal systems to ensure transparency, accountability, and deterrence in international business transactions.

Therefore, the primary area member states are encouraged to improve is their criminal, civil, commercial, and administrative laws, making option B the correct answer.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about civil actions in most jurisdictions is CORRECT, CORRECT.

The correct answer is B: Civil actions begin with the filing of a pleading, usually in the jurisdiction where the defendant resides or where the claim originated..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Perjury generally involves knowingly making a false statement under oath or affirmation about a material or relevant matter in an official proceeding. The best answer is C because the false statement must be relevant or material to the proceeding. Option A is too broad because statements to opposing counsel are not automatically perjury unless made under oath in an authorized proceeding, such as a deposition, and satisfy the other elements. Option B is incomplete because not every false statement in court establishes perjury; the statement must be made knowingly, under oath, and concern a relevant or material matter. Option D is incorrect because statements to one’s attorney before litigation are not perjury. Therefore, relevance to the proceeding is a required element.

The manuals explain that in verbal confessions, subjects often underestimate the amounts to minimize guilt, not overestimate. The process involves moving from accusation to benchmark admission, handling lies tactfully, and obtaining details by chronology, transaction, or event. Thus, option B is NOT true.

“Fraud examinations should proceed from the general to the specific. That is, they should begin with general information that is known, starting at the periphery, and then move to the more specific details”.

This method avoids premature assumptions and ensures systematic evidence development.

The CFE Prep – Investigations notes:

“Court records are best obtained from the jurisdiction in which they were filed… The most accurate records are maintained by the court of original jurisdiction, not global or aggregated databases.”

Thus, the best place for Sam is the local court of jurisdiction, not a global database.

The Fraud Examiners Manual states:

“Duplicate testing is used to identify transactions with duplicate values in specified fields … fields such as cheque numbers, invoice numbers, and government identification numbers … searching for duplicates within these fields can help the fraud examiner find anomalies that merit further examination”.

This directly addresses Tony’s need to ensure no two invoices have the same number.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about MOST ACCURATE, the litigation privilege in common law jurisdictions.

The correct answer is A: The primary purpose of the litigation privilege is to protect confidential communications between a client and the client ' s legal representative.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Before a formal fraud investigation begins, the organization should prepare carefully while preserving confidentiality. The Fraud Examiners Manual explains that key decision-makers and the organization’s in-house or outside counsel should be notified when the investigation is about to commence. This allows management and counsel to address authority, scope, legal risks, privilege, and evidence-preservation issues. Option A is too broad because all managers do not need to know the purpose of the investigation. Option B is improper because alerting the subject can compromise evidence and allow concealment. Option C is also poor practice because broad email notices can spread confidential information and damage the investigation. Fraud investigations should be controlled on a need-to-know basis from the outset.

The digital forensics section of the Fraud Examiners Manual stresses:

No single forensic tool can recover everything.

Each has strengths and weaknesses.

Therefore, it is best to use a combination of tools during analysis.

Additionally, the examiner must look for both inculpatory and exculpatory evidence, while maintaining data integrity.

This aligns exactly with answer B.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about cross-border transfers of currency recommend that countries do which of the following, FATF.

The correct answer is C: Establish reporting thresholds for physically carrying currency or currency equivalents into or out of a country..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The correct answer is D. The CFE Manual explains that in most common law jurisdictions, the jury is typically responsible for finding the facts in criminal cases, while the judge applies the law and rules on evidence. However, this is not always the case. The Manual also states that for some criminal matters, usually minor offenses, a jury trial might not be available, and in many jurisdictions the defendant may also waive the right to a jury trial. When no jury is present, the judge serves as the fact finder.

This is why A and B are both too absolute; neither judges nor juries serve as fact finders in all criminal cases. Option C reverses the usual pattern by suggesting that judges typically serve as fact finders, which is inconsistent with the Manual’s explanation of common law criminal proceedings. The more accurate statement is that juries usually serve as fact finders, but judges may do so in bench trials, waiver situations, or cases where jury trials are unavailable. Therefore, D is the best and most precise answer under the CFE Law topics.

The calibration (or norming) process in interviews is meant to establish a baseline of the subject’s normal verbal and nonverbal behavior. This is done by asking noncritical background questions so that later deviations can be more reliably identified.

From the CFE Prep guide:

“The proper way an interviewer should start the calibration (norming) of a witness is through the use of: Noncritical questions on background information. … Examples of noncritical questions include ‘When did you start with the company?’ and ‘How long is your commute?’”.

Thus, the correct answer is D. “How many jobs have you had before this one?” since it is a nonthreatening background question.

The Fraud Examiners Manual specifies:

“Fraud examinations should proceed from the general to the specific. That is, they should begin with general information that is known and then move to more specific details.”

Therefore, statement B is false, making it the correct answer.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, the question asks about UN, ICCPR.

The correct answer is D: Right of the accused to be informed of criminal charges.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The correct answer is C. The CFE Manual states that in most jurisdictions, a duty to cooperate exists in every employer-employee relationship, although the precise scope of that duty can vary. In a private-company internal investigation, an employee who is asked to participate will therefore likely have a duty to cooperate as part of the employment relationship.

Option D is incorrect because the Manual specifically explains that the right to remain silent generally applies when a person is being questioned by government authorities or someone acting on the government’s behalf, not when the questioning is conducted by a private employer acting on its own. As a result, the right to remain silent generally does not apply in internal investigations by private companies, and employers can often discipline or even terminate employees who refuse to cooperate. Option B is too broad because, although employees may have some privacy rights, those rights do not generally allow them to categorically refuse all cooperation in a private internal investigation. Option A is also inaccurate because employee duties are not unlimited; requests still must be evaluated in context and can vary by jurisdiction. Therefore, the most accurate statement is that Payne likely has a duty to cooperate as part of the employer-employee relationship.

According to the ACFE Fraud Examiners Manual, Law Section, specifically under Basic Principles of Evidence and Admissibility of Evidence , relevant evidence is defined as evidence having any tendency to make a fact that is of consequence to the determination of the action more or less probable than it would be without the evidence. This definition focuses on the logical relationship between the evidence and a disputed issue in the case.

Relevance is a foundational requirement for admissibility. If evidence does not bear on a material fact in dispute, it is generally inadmissible because it does not assist the trier of fact in resolving the matter. The threshold for relevance is relatively low; the evidence need only slightly increase or decrease the probability of a consequential fact.

Circumstantial evidence refers to indirect evidence that requires inference to connect it to a conclusion of fact, while testimonial evidence consists of statements made by a witness under oath. Demonstrative evidence includes physical objects, models, or visual aids used to illustrate testimony. Although these are types or forms of evidence, they are not definitions of the concept described in the question.

Therefore, the correct term for evidence that makes a disputed fact more or less likely is relevant evidence.

According to the CFE Prep - Investigations study guide:

“It is recommended that any witnesses who are considered potentially volatile be interviewed without advance notice. Surprise should be employed in any interview that is considered potentially volatile. In many instances, the potentially volatile respondent is unaware that he is going to be questioned, and will therefore be unprepared. If the interview is not conducted by surprise, the interviewer runs the risk of the respondent not showing up, showing up with a witness, or being present with counsel. A target’s friends, relatives, and romantic interests often make for a difficult interview. They perceive that the fraud examiner is deliberately targeting someone close to them.”

???? Interpretation for this scenario:

Brianna is described as very protective of her boyfriend, making her a potentially volatile witness.

Best practice is to avoid giving her advance notice (which might increase hostility, resentment, or allow preparation).

Conducting the interview with little or no notice reduces the risk of interference, ensures she is unprepared, and prevents her from appearing with legal counsel or allies.

A memorandum recording a whistleblower tip is a written record. The Fraud Examiners Manual defines documentary evidence as evidence “presented in the form of documents such as memoranda, contracts, emails, or other records”. Testimonial evidence comes from oral statements; here, the memorandum itself is the evidence, so it is documentary.

The correct answer is B. Duty of care. The CFE Manual states that the duty of care means people in a fiduciary relationship must act with the care that an ordinarily prudent person would employ in similar positions. It further explains that corporate officers, directors, high-level employees, and other fiduciaries must conduct business affairs prudently, using the skill and attention normally exercised by people in comparable roles.

This standard is different from the duty of loyalty, which focuses on faithfulness to the principal and avoiding self-dealing, kickbacks, undisclosed conflicts of interest, and other disloyal conduct. The duty of care instead addresses the quality of decision-making and oversight. Fiduciaries who act carelessly, recklessly, or without proper prudence can be held responsible for resulting losses, including losses tied to negligence, mismanagement, or waste of corporate assets.

The other options are not the correct doctrinal label used in the CFE Law materials. Because the question specifically describes acting with the skill and attention of an ordinarily prudent person in a similar position, it is describing the duty of care. Therefore, B is the correct answer.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to insider trading, the question asks about MOST LIKELY.

The correct answer is B: Insider trading.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, anti-money laundering, FATF, the question asks about EXCEPT, FATF.

The correct answer is C: Require financial institutions to monitor their customers ' political affiliations..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Fraud examination is the process or methodology of resolving allegations or signs of fraud from inception to disposition. The ACFE materials describe fraud examination as a structured, legal, evidence-based process that moves from general information to specific conclusions. It includes obtaining evidence, reporting findings, testifying when necessary, and assisting in fraud prevention and detection. Fraud response is broader organizational action after suspected fraud arises. Fraud deterrence focuses on discouraging fraud through controls, ethics, governance, and consequences. Fraud management is not the precise term used for this investigative methodology. Because the question asks for the methodology that resolves fraud allegations from beginning to end and also assists with prevention and detection, the correct answer is fraud examination.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is D: Existence of an employment contract.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about XYZ, BEST.

The correct answer is C: Counterclaim.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The most likely claim is intrusion into an individual’s private matters, also known as intrusion upon seclusion. This civil wrong occurs when someone intentionally intrudes into an area where another person has a reasonable expectation of privacy and the intrusion would be highly offensive or objectionable to a reasonable person. Vasquez’s personal workbag is more private than ordinary company property, and the facts state that Ben lacked legitimate interest or authority. Public disclosure of private facts requires publicity of private information, which is not described. Defamation requires a false statement harming reputation, and false accusations are not the issue. Because the claim arises from an improper search of personal property where privacy was reasonably expected, option D is correct.

The correct answer is B. False. A defendant does not ordinarily file the initial lawsuit. In a civil action, the plaintiff—here, Mary—is the party who begins the case by filing a complaint or similar pleading in a court that has proper jurisdiction. The CFE Law materials explain that civil actions generally begin with the filing of a pleading by the plaintiff, usually in the jurisdiction where the defendant resides or where the claim arose. That directly contradicts the statement in the question.

The statement is also inaccurate because a lawsuit cannot simply be filed in any court in either country. A proper court must have jurisdiction over the parties and the subject matter, and venue rules must also be satisfied. In cross-border disputes, those issues can become even more complex, especially where the parties live in different countries. The core error, however, is enough to make the statement false: Keith, as the defendant, does not get to initiate the case merely because he is the defendant. Mary, as the party claiming legal relief, would normally be the one to file. Therefore, under basic civil procedure principles used in the CFE Law topics, the answer is False.

This question tests your knowledge of Domain 9.

In the context of Civil Actions, specifically relating to trial, the question asks about the core concepts in this area.

The correct answer is A: Myopic vision.

This question focuses on civil action processes. The correct answer accurately describes civil litigation procedures, evidence preservation, or remedies available to fraud victims. Civil recovery is often an important component of fraud resolution. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

Benford’s Law is most useful for naturally occurring numerical data, especially transaction amounts that span several orders of magnitude. Fraud examiners use it to identify unusual digit patterns that might suggest manipulation, fabricated numbers, or other anomalies requiring follow-up. Transaction amounts are appropriate because they are generated through real economic activity and can be tested for expected digit distributions. Retail store numbers, telephone numbers, and government identification numbers are assigned numbers, not naturally occurring values. Assigned numbers usually do not follow Benford’s expected first-digit pattern and would produce misleading results. Benford’s Law does not prove fraud by itself, but it can help identify suspicious records for further examination. Therefore, transaction amounts are the best data type for this analysis.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, bustout, the question asks about the core concepts in this area.

The correct answer is C: Uses credit to purchase a considerable amount of goods.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

Fraudulent misrepresentation of material facts generally requires proof that the defendant made a false statement of fact, the statement was material, the defendant knew the representation was false, the victim relied on the misrepresentation, and the victim suffered damages as a result. The key difference between fraudulent misrepresentation and negligent misrepresentation is the defendant’s knowledge or intent. Gross negligence or a general duty to provide information might relate to other legal theories, but they are not the best answer for fraudulent misrepresentation. The defendant also does not need to personally benefit from the misrepresentation for the victim to prove the claim. Therefore, the required element in this question is that the defendant knew the representation was false.

From the 2014 International Fraud Examiners Manual, under the section related to tracing financial transactions, specifically tracing the disposition of loan proceeds, the following objectives of tracing activities are explicitly outlined:

“Tracing the disposition of loan proceeds can help fraud examiners:

Determine whether loan proceeds were deposited into hidden or unknown accounts

Determine whether loan proceeds were used to pay off other loans

Identify the involvement of previously unknown individuals (potential witnesses)

Determine whether payments were made from hidden accounts

Identify undisclosed related-party transactions”

There is no mention that tracing loan proceeds can uncover previous civil offenses committed by the subject. Civil offenses refer to non-criminal violations (e.g., breach of contract, torts), which tracing of financial transactions like loan proceeds is not directly designed to uncover.

This is not a recognized purpose of tracing as taught in the CFE Investigation section. The core objectives revolve around uncovering hidden assets, hidden accounts, payments, and potential witnesses — not prior legal infractions.

Therefore, the correct answer is A, as it is the only option that is NOT true according to official CFE investigation materials.

The CFE Prep Guide clarifies:

“A fraud response plan outlines the actions… when suspicions of fraud have arisen. Because every fraud is different, the response plan should not outline how a fraud examination should be conducted. Instead, response plans should help organizations manage their responses and create environments to minimize risk and maximize the potential for success”.

Thus, statement D is false.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about the core concepts in this area.

The correct answer is B: The defendant gave or received a thing of value..

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The correct answer is: Whether recording is legal depends on consent laws — so the most helpful question is effectively: “Is consent required from one or all parties to record this conversation?”

Among the provided choices, the closest match is NOT listed explicitly. But based on the ACFE manuals, the correct interpretation is that none of the technical details (audio/video, file format, time, duration) matter — only the legal consent requirement matters.

Complete Detailed Explanation with Exact Extracts from Fraud Examiner (CFE) - Investigation Documents: =

The 2014 International Fraud Examiners Manual states:

“In some circumstances, recording an interview might be illegal. Some jurisdictions limit an employer’s right to record employee interviews during an investigation. In fact, in some jurisdictions, audio recording an interview is permitted only with the consent of all parties to the communication. Thus, fraud examiners should always consult with an attorney when deciding whether to record an interview.”

It further emphasizes:

“A telephone recording consent form stipulates where, when, and with whom telephone conversations can be recorded… Be cautioned that the form alone does not make the conduct of recording a telephone conversation illegal or legal.”

???? Interpretation:

The legality of recording has nothing to do with:

Audio vs video (A)

Digital file format (B)

Work hours (C)

Duration (D)

Instead, it depends entirely on jurisdictional consent laws (one-party vs all-party consent).

Circumstantial evidence proves a fact indirectly through inference rather than directly proving the disputed fact. The restaurant’s reservation logbook showing no record of the lunch does not directly prove the employee lied, but it strongly supports an inference that the claimed lunch did not occur. That makes option B circumstantial evidence. Option C is direct evidence because the client personally testifies that the lunch never occurred. Option D is also direct evidence because the employee’s own email confession directly addresses the false reimbursement. Option A is stronger documentary evidence that the client paid, but the logbook example best illustrates an indirect proof pattern. Fraud examiners often use circumstantial evidence to support conclusions when direct admissions or eyewitness testimony are unavailable.

Capturing social media content with a specialized program that preserves metadata is the most effective method for establishing authenticity. Social media evidence can change quickly because users can edit, delete, or restrict access to posts. Traditional methods such as screenshots, summaries, printed pages, or saved URLs might preserve visible content, but they often fail to preserve underlying metadata needed to authenticate the evidence. Specialized collection tools can capture information in a searchable native format, preserve key metadata, and support a defensible chain of custody. Witness interviews and summaries may help corroborate what was seen, but they are weaker than a technically sound capture that preserves the digital evidence’s original characteristics and context.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about the core concepts in this area.

The correct answer is D: An independent insolvency representative.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

Before seizing digital evidence, fraud examiners must plan carefully because digital evidence is volatile and can be altered easily. The Fraud Examiners Manual explains that examiners should ensure forensic equipment is legitimate and reliable, including using licensed software, independently validating forensic equipment, and maintaining validation on file. This helps preserve the integrity and admissibility of the evidence. Option B is incorrect because tools should be used only by properly trained personnel, not simply assigned to every team member. Option C is wrong because delaying digital collection until all documents and interviews are completed can risk loss or alteration of evidence. Option D is too narrow because remote collection may be appropriate in some circumstances if properly planned and legally authorized.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is C: A witness testifies that they saw the employee take the money..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

False imprisonment occurs when one person restrains another person’s physical liberty without consent or legal justification. In workplace interviews, liability can arise if an interviewer locks the interview room, blocks the exit, refuses to allow the employee to leave, or otherwise creates involuntary confinement. Jordan wanted to leave, but Sam locked the door and continued the interview. If a trier of fact concludes that this restrained Jordan against his will and without legal justification, Sam would likely lose. Option A is incorrect because ignorance of the law is not a reliable defense. Option B misstates the issue; the key issue is unlawful restraint, not failure to explain cooperation duties. Option C is wrong because acting for the company does not excuse unlawful confinement.

To confirm ownership of a building, real estate and permit records are most useful. The Manual notes that real property records and related permits identify the owner, provide legal descriptions, and show improvements such as construction of commercial buildings. Court or voter registration records would not typically establish property ownership.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about the core concepts in this area.

The correct answer is B: False.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about civil lawsuits in most jurisdictions is CORRECT, CORRECT.

The correct answer is B: Civil lawsuits begin with the filing of a pleading, usually in the jurisdiction in which the defendant resides or where the claim arose.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about TRUE.

The correct answer is D: The purpose of authentication is to ensure that hearsay is not admitted into evidence.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Uncategorized.

the question asks about NOT.

The correct answer is B: Profits derived solely from the investor ' s management activity.

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about money services businesses (MSBs) is INCORRECT, INCORRECT.

The correct answer is B: MSBs are generally less strictly regulated than traditional financial institutions..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The manual and CFE Prep list the main limitations:

Coverage varies by jurisdiction.

Searches are limited in area.

Records are often abstracts.

Information may be inaccurate or outdated.

Searches can be erratic.

Nowhere is “difficulty in finding database companies” mentioned.

Jim most likely committed obstruction of justice. Obstruction occurs when a person engages in conduct intended to impede or obstruct an investigation, proceeding, or trial related to another offense. Here, Jim is already being investigated for fraudulent health care claims. When the government auditor arrives, Jim stages a fake emergency to stop the review and then continues to evade the auditor. Those actions are designed to interfere with the government’s investigative process. Fraudulent misrepresentation concerns false statements used to induce another party to act, but the stronger and more specific offense here is interference with an official review. Conspiracy requires an agreement with at least one other person, which is not stated. Misappropriation of evidence is not the best description.

The strongest evidence is the direct deposit payslips showing that Jordan and the fictitious employee share the same bank account details. In a ghost employee or fictitious employee payroll scheme, one key test is whether multiple employees are using the same bank account for direct deposit. This evidence directly links Jordan to the payroll payments issued to the fictitious employee and directly rebuts his denial that he is only paid for his own work. The coworker’s statement about vacations might show lifestyle changes but does not prove the payroll scheme. System-access records show opportunity, not actual diversion of wages. Negative social media posts are irrelevant to whether Jordan created and collected pay for a fictitious employee.

Admission-seeking questions serve several purposes, including distinguishing innocent individuals from culpable individuals, encouraging a culpable person to confess, and obtaining a signed written statement acknowledging the facts. The admission-seeking interview is not a routine background interview and should be used only when the examiner has a reasonable basis to believe the subject committed the act and other reasonable investigative steps have been completed. Remorse might arise during the interview, but measuring remorse is not its primary purpose. Asset recovery is also important in fraud examinations, but it is not the main purpose of an admission-seeking interview. Gathering background information is usually handled through introductory or informational questions. Therefore, option C best reflects the purpose stated in the CFE materials.

Anita’s question is a closed question because it calls for a narrow, specific answer rather than a broad narrative. “How many years have you been working as a contractor in this city?” asks for a number or short factual response. Open questions invite broader explanations and are often useful when the examiner wants the respondent to provide a narrative. A leading question suggests the answer or assumes facts not yet established. A complex question combines multiple subjects or requires multiple answers. Anita’s question is simple, factual, and limited in scope, so it is best classified as closed. Closed questions can be useful in interviews when the examiner needs precise background details or confirmation of specific facts.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about the core concepts in this area.

The correct answer is B: Exclusive control of the proceeding is entrusted to an independent insolvency representative..

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

This question tests your knowledge of Domain 6.

In the context of Tax Fraud, specifically relating to tax avoidance, tax evasion, the question asks about EXCEPT.

The correct answer is B: Death of the taxpayer.

This question focuses on tax fraud concepts. The correct answer distinguishes between legal tax avoidance and illegal tax evasion, or identifies specific tax evasion schemes. Tax fraud investigations require specialized knowledge of tax laws and common evasion techniques.

Isla is attempting to create rapport. Introductory questions should help establish trust, cooperation, and communication before the examiner moves into the fact-gathering portion of the interview. The Fraud Examiners Manual describes rapport as a harmonious relationship that fosters cooperation and trust. Asking a simple, friendly question about coffee or tea is casual conversation designed to make Doug comfortable and create common ground. Option A is too broad because the facts do not show she is structuring a questioning pattern. Option B is different; the interview theme states the general purpose of the interview. Option D is incorrect because the question is not meant to distract Doug, but to relax him and encourage open communication.

Explanation with Extracts = Predication requires sufficient circumstances to suggest fraud. The CFE Prep Guide explains:

“Fraud examiners should not investigate beyond the available predication… There is insufficient predication to confront Wallace or to make any direct allegations about fraud, but Carter does have adequate predication to make discreet inquiries”.Similarly, Arnold may discreetly inquire but not accuse or search property without further evidence.

The correct answer is A. Adversarial process. In an adversarial system, the parties are primarily responsible for investigating the case, gathering evidence, presenting proof, and examining witnesses. Their lawyers drive the presentation of the case, while the judge usually serves as a neutral decision-maker who oversees procedure, rules on objections, and applies the law. This description matches the facts in the question exactly.

By contrast, an inquisitorial process generally gives the judge a much more active role in developing the factual record, directing the inquiry, and often controlling much of the witness examination. That is why option B is not the best fit. Option C, civil law process, refers to a broad family of legal systems and is not the precise procedural label for the fact pattern described. Option D, unitary process, is not the recognized term used here. The CFE Law materials treat this distinction as a fundamental comparison between the two major procedural models: adversarial systems rely heavily on party presentation, while inquisitorial systems rely more heavily on judicial investigation. Therefore, because the parties gather the evidence and conduct the questioning, A is the most accurate answer. The CFE exam outline also distinguishes these procedural frameworks within the Law section.

This question tests your knowledge of Uncategorized.

the question asks about willfully ' , NOT.

The correct answer is A: True.

This question tests your understanding of key fraud examination concepts and legal principles.

Before conducting surveillance, a memorandum should document the basis for the covert operation, including: (1) the information the operation is based on, (2) expected information to be gained, (3) identities of suspects (subjects) if known, and (4) operatives under the examiner’s control. Confidential sources should not be identified by name but referred to symbolically.

Authentication is the process of showing that evidence is what its proponent claims it to be. In common law evidence systems, digital records may be authenticated through testimony from a witness with personal knowledge, circumstantial evidence showing distinctive characteristics, or certified business-record procedures. A witness might authenticate digital records by explaining how the records were created, obtained, maintained, and preserved. Option A is incorrect because certification by a court clerk is not the universal requirement for authentication. Option C is wrong because unauthenticated exhibits are generally inadmissible regardless of whether they are direct or circumstantial evidence. Option D confuses authentication with relevance; authentication concerns genuineness, not whether the evidence tends to prove a material issue.

The Fraud Examiners Manual explains that before obtaining or cleansing data, the first step in using data analysis is the planning phase. This includes understanding the data, articulating objectives, and building a profile of potential frauds. Without this, examiners risk inefficient analysis and overlooking key fraud risks.

✅ Answer: C. Build a profile of potential frauds

“To locate people using online records… First, when searching for an individual, the fraud examiner should obtain a past address of the subject, and search activities should begin with that information”.

This aligns with the Prep guide: “Obtaining a past address of the subject should be the first step in trying to locate a subject using online records”.

Thus, B is correct.

“Introductory questions should be designed to establish rapport… Interviewers usually establish rapport by spending a few minutes with the respondent in an informal dialogue”.

Jason’s small talk about sports and compliments is clearly rapport building

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to privilege, the question asks about NOT.

The correct answer is D: A lawsuit has been filed.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

The correct answer is B. The CFE Manual states that under the ICCPR, everyone accused of a crime shall be presumed innocent until proven guilty according to law. This is one of the core due-process protections recognized in the criminal justice section of the Law materials.

Option A is incorrect because the ICCPR protects the right to a fair and public hearing, not a trial without public disclosure of the results. Option C is also incorrect because the Manual states that the ICCPR gives a convicted person the right to have the conviction and sentence reviewed by a higher tribunal, but it does not provide for unlimited appeals. Option D is too broad because release pending trial is not presented as an automatic right in the way presumption of innocence is. For CFE purposes, the key takeaway is that criminal defendants under the ICCPR are entitled to several important safeguards, and one of the most fundamental is that they must be treated as innocent unless and until guilt is proven according to law. Therefore, B is the correct answer.

The correct answer is C. Whether an employee is covered by a union contract can significantly affect the employee’s rights during an internal investigation because unionized employees may have representation rights during investigatory interviews. In the United States, the National Labor Relations Board explains that employees in unionized workplaces can have Weingarten rights, meaning they may request union representation during an interview the employee reasonably believes could lead to discipline.

That makes a union or collective bargaining agreement far more relevant to investigation rights than the other choices. Option A, the employee’s length of service, might matter in some human-resources settings but does not usually determine the employee’s legal investigation rights. Option B, a noncompetition agreement, concerns post-employment competition restrictions rather than representation, questioning, or procedural protections during an internal inquiry. Option D, the likelihood of guilt or innocence, is likewise not what determines the employee’s rights; legal protections apply based on the governing employment relationship and applicable labor law, not the employer’s suspicion level. For fraud examiners, this distinction matters because interview procedures can change depending on whether the employee is unionized or otherwise contractually protected. Therefore, the factor most likely to affect the employee’s rights is whether the employee has signed a union contract.

The correct answer is C. Debarment. In fraud, corruption, and procurement-related enforcement, debarment is the administrative penalty that bars a person or company from participating in government contracting for a specified period. The key fact in this question is that the vendor is prohibited from bidding on government contracts for three years. That is the classic effect of a debarment order.

This differs from license suspension or license revocation, which relate to permission to engage in a regulated activity or profession, not specifically to eligibility for public contracting. Delisting is also not the most accurate term here because it usually refers more generally to removal from an approved list or roster, while debarment specifically denotes exclusion from government contracts or procurement opportunities. The CFE Law materials discuss debarment as a significant administrative consequence in anti-corruption enforcement contexts, particularly where misconduct affects public contracting and business with government entities. A time-limited ban on bidding is therefore best described as debarment, not a licensing action. Because the question directly describes exclusion from government contract bidding for a stated period, C is the most accurate answer.

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

The correct answer is C. The CFE Manual explains that in adversarial systems, one of the most common methods of impeachment is to show that the witness made prior inconsistent statements. Impeachment is used to attack a witness’s credibility, reliability, or truthfulness. If a witness previously said something materially different from what the witness now says at trial, opposing counsel can use that inconsistency to suggest that the testimony is unreliable or false.

The other options do not describe impeachment. Option A, testifying from personal knowledge, generally supports credibility rather than undermines it. Option B, having a reputation for truthfulness, also strengthens credibility and is the opposite of impeachment. Option D, possessing a strong ability to observe, similarly suggests reliability rather than weakness. The Manual lists several common impeachment methods, including showing bias, impaired ability to observe, felony convictions, a reputation for untruthfulness, and prior inconsistent statements. Among the choices provided, only C matches one of those recognized impeachment techniques. Therefore, in an adversarial process, an attorney may impeach an opposing witness by proving that the witness previously made inconsistent statements, making C the correct answer.

Fraud examiners should generally avoid allowing unnecessary observers in interviews. Additional observers can affect the interviewee’s responses, create confidentiality concerns, increase the chance of later disputes, and potentially expose the organization or examiner to legal claims. The Fraud Examiners Manual emphasizes that interviews should be controlled and that the interviewer should avoid unnecessary third-party participation unless the law, a collective bargaining agreement, language needs, or similar requirements make an observer necessary. The HR manager’s desire to observe is not, by itself, a sufficient reason to permit attendance. Option D is still risky because silent presence can influence the interview. Option A is based on comfort rather than investigative control. Therefore, if the law permits, Ana should not allow the HR manager to witness the interview.

The Fraud Examiners Manual notes that when witnesses become hostile or argumentative, the interviewer should generally remain calm and avoid reacting to hostility. Reacting, reasoning, or arguing often escalates the situation. Instead, the interviewer should maintain control and neutrality .

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to privilege, the question asks about the core concepts in this area.

The correct answer is C: Fidelity insurance.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

The Fraud Examiners Manual states:

“Interviewers are encouraged to formulate their questions in a way that will not bring about a strong emotional reaction… emotive words of all types should be avoided during the introductory phase. Such words put people on the defensive”.

Thus, statement C is NOT true.

The employee is most likely to have a reasonable expectation of privacy in the company-gifted backpack. The key issue is not strictly who owns the item, but whether a reasonable person would expect the area or item to be free from intrusion. The ACFE materials explain that employees tend to regard purses, briefcases, backpacks, and other personal effects as private. Even if the employer gifted the backpack, the employee brings it to the office and uses it as a personal container. By contrast, shared company vehicle compartments, department filing cabinets, and company-issued laptops are more closely connected to business use and can be subject to company policies. Therefore, the backpack is the strongest privacy item.

The correct answer is B. The CFE Manual states that authenticity is supported by establishing a chain of custody, which is both a process and a document showing who had possession of an item and what was done with it. The chain of custody is important because it helps prove that the evidence has not been materially altered or changed from the time it was collected until it is produced in court. That is exactly the concern raised in this question.

The Manual further explains that establishing chain of custody generally involves documenting each person who had control of the evidence, when and how it was received, how it was stored, whether any changes occurred while it was in that person’s possession, and how it left that person’s custody. It is therefore the primary method for preserving and proving authenticity.

The other options do not address authenticity as directly. Limiting release only to a judge is not the standard legal requirement. Requiring court orders from opposing parties may relate to access disputes, not authenticity. Preventing all others from ever handling the evidence is also unrealistic and unnecessary if possession is properly documented. For CFE purposes, the best practice is to maintain a clear, documented chain of custody, so B is the correct answer.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to misrepresentation, the question asks about the core concepts in this area.

The correct answer is C: " Would a reasonable investor wish to know the information to make an informed decision? " .

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

The manual defines:

“Open questions are those worded in a way that makes it difficult for the respondent to answer ‘yes’ or ‘no.’ The typical open question calls for a monologue response and can be answered in several different ways.”

Example given: “Please tell me about your job.”

Allison’s question (“Why did you choose to do business with that vendor?”) invites explanation, not a yes/no response — making it an open question.

The Fraud Examiners Manual clarifies:

“The recommendations section is optional, and there might be instances where the fraud examiner wishes to discuss remedial measures or specific recommendations in a separate document”.

The Prep guide also states: “A written report might include a section for recommendations”.Thus, it is not required in every report.

Nonpublic records include banking, tax, credit, phone, credit card, and health care records.

Business entity organisational filings (corporate constitutions, articles of incorporation) are generally public records and can be obtained from the government.

Therefore, reviewing a company’s business filings does not require access to nonpublic records.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about the core concepts in this area.

The correct answer is A: An importer and an exporter conspire to conceal illicit funds by creating invoices that understate the quantity of goods shipped internationally.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes. Money laundering typically involves three stages: placement (introducing illegal funds into the financial system), layering (creating complex transactions to hide the source), and integration (returning the funds to the launderer in an apparently legitimate form).

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about NOT.

The correct answer is B: The victim was an employee of the defendant.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, common law, the question asks about MOST ACCURATE, civil trials in common law jurisdictions is MOST ACCURATE.

The correct answer is C: Jury verdicts m civil trials must always be unanimous.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The correct answer is D. Civil law system. A civil law system is generally characterized by reliance on codified statutes and written legal codes as the primary source of law. In these systems, courts apply legislative codes to the facts of each case, and judicial decisions from prior cases usually do not bind future courts in the same way that precedent operates in common law systems. This description matches the facts given in the question exactly.

Option B, the common law system, is incorrect because common law jurisdictions place much greater weight on judicial precedent, meaning earlier court decisions can be binding on later cases involving similar legal issues. Options A and C sound plausible, but they are not the standard legal-system labels used in comparative law. For CFE purposes, the recognized contrast is generally between civil law and common law systems. Understanding this distinction is important in fraud examinations because legal procedure, evidentiary practices, court structure, and the investigator’s interaction with attorneys and judges can differ significantly depending on the type of legal system involved. Since the question emphasizes codified law and the absence of binding precedent, civil law system is the most accurate answer.

The manual explains:

“Link analysis is very effective for identifying indirect relationships… and is particularly useful when conducting a money laundering investigation because it can track the placement, layering, and integration of money” .

Therefore, statement A is false, making it the correct choice.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to adversarial, inquisitorial, the question asks about the appointment of expert witnesses at that is accurate.

The answer is not provided in the original document. Based on analysis of the question and options:

A: Generally, the court appoints the primary expert witnesses in inquisitorial jurisdictions. B: Generally, only the parties may select expert witnesses in inquisitional jurisdictions. C: Generally the court selects the primary expert witnesses in adversarial jurisdictions. D: Generally, only the parties may select experts to introduce testimony in adversarial jurisdictions

Based on CFE Law principles, the most likely correct answer would be A.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data. In inquisitorial jurisdictions, the court typically appoints expert witnesses who are considered neutral and objective, while in adversarial systems, the parties generally select their own expert witnesses to support their respective positions.

Cross-border enforcement of judgments depends on the laws, treaties, and recognition rules of the jurisdiction where the assets are located. The Fraud Examiners Manual explains that a domestic judgment might help recover assets located domestically, but it may be worthless for assets located abroad unless the foreign jurisdiction recognizes and enforces the judgment. Some countries enforce foreign judgments involving parties or assets within their territory, while others do not. Recognition may depend on internal law, reciprocity, or an enforcement treaty between the countries. Option A is incorrect because consent of both parties and the judge is not the general rule. Option B is too broad because foreign enforcement is not automatic. Option C incorrectly limits recognition to criminal matters.

 “As a general rule, questioning should proceed from the general to the specific; it is best to seek general information before details. A variation… is to begin with known information and work towards unknown areas”【9:2014 International Fraud Examiners Manual.pdf†L39-L51】.

 Random order is not recommended and breaks the logical flow.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about large cash transactions with customers which of the following transactions would require a report to be Wed with the government, FATF.

The correct answer is D: A lump-sum cash deposit to a bank above the jurisdiction ' s designated threshold.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about OECD.

The correct answer is B: Laws and regulations related to public subsidies licenses, and contract procurement.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The correct answer is C. Structuring scheme. The CFE Manual explains that structuring occurs when a person breaks up money into smaller transactions specifically designed to avoid regulatory reporting requirements or internal financial-institution controls. It notes that many countries require reporting of currency transactions above a certain threshold, such as more than $10,000, and that a common red flag is a customer making many deposits just under the reporting threshold.

That is exactly what Tammy is doing. Her repeated deposits of $9,000 to $9,900 over several weeks strongly suggest that she is intentionally keeping each transaction below the reporting threshold to avoid government scrutiny. Option D, integration, refers to a later laundering phase in which illicit money is reintroduced into the economy as apparently legitimate funds. Options A and B do not match this conduct. In money laundering cases, fraud examiners are trained to identify transaction patterns that appear deliberately calibrated to evade mandatory reporting rules. Repeated cash deposits just below a legal threshold are one of the clearest examples. Therefore, Tammy is most likely engaged in a structuring scheme, making C the correct answer.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is D: Duty of loyalty.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

“Due to the risks of illicit transactions, most jurisdictions require financial institutions to obtain information about the ownership and control of the foreign bank with which they maintain correspondent relationships”.

The 2014 International Fraud Examiners Manual and CFE Prep - Investigations explicitly state:

“Like some printers, copiers and other multifunction machines might have internal storage devices that store relevant data. In fact, almost every copier built since 2002 has a hard drive that stores images of documents the machines have copied, scanned, or emailed. Some copiers store user access records and a history of copies made. … when seizing a computer for forensic analysis, it is generally necessary to seize any copiers and scanners connected to it.”

Thus, the correct answer is C.

Best practice for signed statements:

Fraud examiners should prepare the statement, keep it concise, and ensure voluntariness and intent are clear.

While not legally required, it is recommended that two individuals witness the signing.✅ Answer: C. Have two individuals witness the signing of the document when possible

The CFE Prep – Investigations explains:

“Metadata is a type of computer-generated data that can be helpful in a fraud investigation. Metadata information can help determine who wrote a document; who received, opened, copied, edited, moved, or printed the document; and when these events occurred” .

Thus, metadata is the most useful for identifying who created a document.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, adversarial, inquisitorial, the question asks about BEST.

The correct answer is A: Adversarial process.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The Fraud Examiners Manual advises that fraud examiners should preserve and organize evidence, and one of the key steps is to establish a document database early. This allows examiners to track documents, index them, and link them to findings. Dusting for fingerprints, leaving originals behind, or organizing solely in chronological order are not standard best practices .

The 2014 International Fraud Examiners Manual explains:

“Often, the most important evidence exists only in the form of volatile data (e.g., RAM)… If the evidence that a formally trained computer investigator needs to collect exists only in the form of volatile data stored in volatile computer memory such as RAM, and the data is expected to disappear when the computer is shut down, he should collect the data live from the suspect computer.”

Also,

“If the computer is off, leave it off… Booting up a system can alter its files… Accordingly, turning a system on could damage and taint any evidence.”

Thus, the most accurate statement is D — live data collection may be performed directly if volatile data is required.

“Deleted files are recoverable until they are overwritten because data is not erased until it is overwritten… Deleted files that have been overwritten generally are not recoverable”.

Other data such as time/date stamps, websites, or chats can often be retrieved.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is D: Counterclaim.

This question tests your understanding of key fraud examination concepts and legal principles.

The most likely claim is violation of the duty of care. Directors and officers generally owe fiduciary duties to act with reasonable care, diligence, and prudence in managing corporate affairs. Willa’s problem is inattentiveness: she fell behind on her board duties, and her failure to act likely allowed preventable shareholder losses. That fact pattern concerns failure to exercise adequate oversight and care. The duty of loyalty involves acting in the organization’s best interests and avoiding self-dealing, conflicts of interest, or improper personal benefit. The facts do not indicate that Willa acted for personal gain or against ACME’s interests intentionally. “Duty of transparency” and “duty of responsibility” are not the best fiduciary theories described here. Therefore, option B is correct.

The correct answer is D. The CFE Manual explains that when parties or assets are spread across multiple jurisdictions, a judgment obtained in one country is not automatically effective everywhere else. In fact, a domestic judgment against a foreign defendant may be useful for recovering assets located in the domestic country, but it might be worthless for reaching assets located in a foreign country. The Manual also states that some countries enforce foreign judgments, but others do not, and enforceability often depends on the internal laws of the enforcing jurisdiction and whether there is an enforcement treaty between the relevant countries.

This is why options A and C are incorrect. Enforceability is absolutely affected by the law of the place where enforcement is sought, and foreign judgments are not universally or automatically recognized worldwide. Option B is also too absolute because asset location can matter practically, but the Manual makes clear that enforceability does not always depend solely on where assets are located. The better statement is that a judgment secured in one jurisdiction might not be effective in another jurisdiction where the defendant resides or holds assets. That is the cross-border enforcement problem fraud examiners must understand when asset recovery is involved.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, concealment of assets, the question asks about the core concepts in this area.

The correct answer is A: Bankruptcy fraud.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

“Credit card records… show card purchasing limits, previous payment history, account balance, when and where the subject has travelled, restaurants frequented, and assets acquired. In short, these records show the movements and habits of the person”.

Therefore, B is correct.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about MOST LIKELY.

The correct answer is B: The existence of a collective bargaining agreement..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Textual analytics is used to extract investigative insight from unstructured data—communications and documents that are not stored in standard database fields—such as emails, chats, memos, and other narrative text. CFE investigative guidance explains that textual analysis applies linguistic methods and statistical techniques to identify themes, anomalies, and linkages within large volumes of text. Its purpose is not to determine truthfulness or deception with certainty (Option A), because text analytics cannot reliably “detect lies” in a definitive way. Nor is its primary objective to guarantee discovery of a confession (Option B); admissions can appear, but that is not the defining function of the approach. Option C aligns more with flow-of-funds visualization or link/relationship charting for financial movements rather than analyzing language content. Instead, textual analysis is performed to categorize and structure text so patterns, sentiments, recurring topics, and relationships between people and events become visible—helping examiners prioritize leads, identify risk indicators, and focus investigative testing on communications most indicative of potential fraud.

During admission-seeking interviews, fraud examiners often employ rationalization techniques to help the suspect justify their misconduct and make it easier to confess. One of these rationalizations is the altruistic appeal.

From the 2014 International Fraud Examiners Manual:

“Facilitators of communication are those socio-psychological forces that make conversations, including interviews, easier to accomplish. These facilitators require a basic understanding of what motivates people. The facilitators are: fulfilling expectations, recognition, altruistic appeals, sympathetic understanding, new experience, catharsis, need for meaning, and extrinsic rewards.”

From the CFE Prep - Investigations study guide:

“Facilitators of communication… include fulfilling expectations, recognition, altruistic appeals, sympathetic understanding, new experience, catharsis, need for meaning, and extrinsic rewards.”

???? Application to Scenario:

Beta says: “I know you didn’t do this for yourself; it was for your family.”

This is a classic altruistic appeal — reframing the suspect’s motive as selfless or for the benefit of others, rather than selfish wrongdoing.

The purpose is to reduce internal resistance to confessing by allowing the suspect to rationalize the act as being for a noble reason.

Signs of stress (e.g., shallow breathing, stuttering, shifting posture) do not automatically equal deception. The Fraud Examiners Manual states:

“Signs of stress do not always mean a subject is lying. An honest subject might feel stress simply by being questioned. Conclusions must be based on clusters of behavior and corroborating evidence, not a single indicator”.

The Fraud Examiners Manual explains that rather than drafting an exhaustive list of questions, the interviewer should:

“formulate a brief outline of key points to discuss during the interview”.

This helps organize thoughts while allowing flexibility.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, adversarial, the question asks about TRUE, criminal proceedings and discovery in adversarial jurisdictions.

The correct answer is D: The judge is the primary driver of the discovery process in criminal proceedings..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases.

The Fraud Examiners Manual lists specific queries for accounts payable analysis, including:

“Review recurring monthly expenses and compare to posted/paid invoices.”.

While comparing book vs. tax depreciation applies to asset management (not A/P), and identifying paycheck anomalies applies to payroll (not A/P), the most effective A/P-specific test is the recurring expense comparison. Hence, C is correct.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, preserve evidence, the question asks about MOST LIKELY.

The correct answer is A: An employee intentionally destroys a relevant document prior to the company announcing the possibility of litigation..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

CFE interviewing guidance distinguishes among open, closed, and leading questions used during the fact-gathering portion of an interview. Closed questions require a precise, specific answer— commonly “yes/no,” but also specifics such as dates, amounts, and times. The question “What year did you start working in the accounting department?” seeks a specific date-like fact (a particular year) rather than inviting a narrative explanation. That is the hallmark of a closed question: it restricts the response to a narrow factual point and does not encourage expansive detail. By contrast, open questions (e.g., “Please describe the procedures to me”) are designed to elicit a broader, more descriptive answer. Leading questions are framed to suggest the answer and are often used to confirm information already known, whereas Quincy’s question does not embed a suggested response—he is simply requesting a specific historical fact. Therefore, under CFE definitions, this question is most accurately classified as closed.

The Manual defines leading questions as those that contain or suggest the answer:

“Leading questions… are framed in a way that evokes a specific reply… most commonly used to confirm facts already known… Example: ‘You got promoted, right?’”

Nathaniel’s question, “When were you promoted to manager?” presumes the promotion occurred. This leads the subject by suggesting a fact that may not be true. It is not open (does not invite free narration), not complex (it asks one thing), and not closed (doesn’t call for yes/no but presumes an answer).

According to the ACFE Fraud Examiners Manual, Law Section, particularly in discussions related to public corruption and remedies in criminal and administrative proceedings , debarment is an administrative sanction that prohibits an individual or entity from participating in government contracts or programs for a specified period of time. Debarment is commonly imposed after convictions involving fraud, bribery, collusion, or other misconduct affecting the integrity of the procurement process.

In this case, Freya was convicted of colluding to manipulate the competitive bidding process. As a result, she was placed on a list prohibiting her from bidding on government contracts for five years. This exclusion from government contracting is the defining characteristic of debarment. The purpose of debarment is not merely punitive but also protective—it safeguards public funds and ensures that only responsible and ethical contractors conduct business with the government.

License revocation or suspension would involve withdrawing or temporarily removing a professional or business license. Disenfranchisement refers to the loss of voting rights. Neither accurately describes exclusion from government contracting opportunities.

Therefore, the administrative penalty imposed on Freya is best described as debarment.

Observing signs of wealth (sports car, home remodeling) may raise suspicion, but by itself it does not provide sufficient predication to accuse or notify management of fraud. The proper next step is to conduct discreet inquiries to determine if further evidence exists before escalating.

Oral consent is generally not sufficient to obtain a suspect’s bank records. The CFE Prep - Investigations states:

“Accessing a subject’s bank records from financial institutions generally requires written consent. Oral consent is the least effective way to obtain permission”.

The Fraud Examiners Manual also notes that bank information can usually only be obtained with subpoena, search warrant, or written consent.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is B: As part of her sentence for bribery a defendant is ordered to transfer a car she received as a bribe to the government.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.