Collecting Evidence Flashcards
In which of the following situations would a fraud examiner MOST LIKELY need to obtain a court order to access a suspect’s financial records?
A. A fraud examiner would likely need to obtain a court order if the suspect refuses to provide consent.
B. A fraud examiner would likely need to obtain a court order if the suspect provides both oral and written consent.
C. A fraud examiner would likely need to obtain a court order if the suspect only provides written consent.
D. A fraud examiner would likely need to obtain a court order any time that records are requested from a financial institution
A. A fraud examiner would likely need to obtain a court order if the suspect refuses to provide consent.
When collecting physical documents, a fraud examiner should limit their contact with original documents as much as possible to preserve their forensic integrity.
A. True
B. False
True
Jones, a Certified Fraud Examiner (CFE) and director of security for ABC Inc., obtained several boxes of documents while conducting a fraud examination. While inventorying the boxes and marking the evidence, Jones discovers a stock certificate he feels will be damaged if he marks it with his initials and the date. To maintain the proper chain of custody, Jones should:
A. Photograph and store the document.
B. Mark the document regardless of the potential for damage.
C. Place the document in a marked envelope.
D. Copy the document, and initial and date the copy.
C. Place the document in a marked envelope.
Which of the following is NOT one of the primary types of evidence that fraud examiners must consider or gather when conducting investigations?
A. Incriminating evidence
B. Digital evidence
C. Testimonial evidence
D. Documentary evidence
A. Incriminating evidence
A fraud examiner needs to protect an evidentiary document with a latent fingerprint on it by placing it into a protective container. Which of the following should the fraud examiner include on the container’s label?
A. The date the item was placed in the container
B. The location where the document was obtained
C. The fraud examiner’s initials
D. All of the above
D. All of the above
A statement collected by a fraud examiner during an interview would be considered an example of which of the following types of evidence?
A. Documentary evidence
B. Testimonial evidence
C. Inconclusive evidence
D. Digital evidence
B. Testimonial evidence
Which of the following is a factor that might affect whether a fraud examiner should dispose of evidence following the conclusion of a fraud examination?
A. The requirements in an organization’s document retention policy
B. The personal information about suspects or witnesses documented in the evidence
C. The likelihood of further litigation related to the engagement
D. All of the above
D. All of the above
A fraud examiner discovers a paper document believed to include both the suspect’s indented writings and latent fingerprints. Which of the following is the BEST preservation method to use when collecting the document?
A. Leave the document in place for a forensic document examiner to collect later.
B. Place the document into a sealable, acid-free paper envelope while handling it with protective gloves.
C. Insert the document into a plastic bag using a pair of tweezers.
D. Put the document in a briefcase for analysis at a later time.
B. Place the document into a sealable, acid-free paper envelope while handling it with protective gloves.
Which of the following methods can be used to obtain documentary evidence?
A. Court order
B. Written consent
C. Oral consent
D. All of the above
D. All of the above
Memoranda, canceled checks, invoices, and receipts are all examples of which of the following types of evidence?
A. Relevant evidence
B. Digital evidence
C. Documentary evidence
D. Testimonial evidence
C. Documentary evidence
Black, a Certified Fraud Examiner (CFE), has obtained an oral confession from Green, a fraud suspect. Black wants to examine Green’s bank accounts. Which of the following would be the LEAST EFFECTIVE way to obtain permission to examine Green’s bank records?
A. Obtain Green’s oral consent.
B. Obtain a subpoena.
C. Obtain Green’s written consent.
D. Obtain a court order.
A. Obtain Green’s oral consent.
Which of the following is generally NOT a recommended practice when organizing physical evidence?
A. Segregating original documents from working copies
B. Making a key document file with the most relevant documents
C. Establishing a database early in the investigation
D. Filing all documents in chronological order
D. Filing all documents in chronological order
Which of the following is typically the MOST EFFECTIVE way to document the chain of custody for a piece of evidence?
A. An affidavit signed by the fraud examiner swearing to the evidence’s contents
B. A memorandum created with the custodian of the evidence when the evidence is received
C. A photograph of the evidence that clearly shows what the evidence is and where it was originally found
D. A video recording of the fraud examiner explaining the process used to collect the evidence
B. A memorandum created with the custodian of the evidence when the evidence is received
Hafsa, a fraud examiner, collects a computer hard drive as potential evidence in an investigation. She creates a memorandum to record the chain of custody and documents what item was received, when it was received, and from whom it was received. To meet the minimum standard for a chain of custody memorandum, what else would Hafsa need to include?
A. An explanation of why the item was collected
B. The name of the judge who signed the seizure order, if applicable
C. The value of the noncash item received
D. Where the item is maintained
D. Where the item is maintained
