CFE-Fraud-Investigations-and-Legal-Issues ACFE Certified Fraud Examiner (CFE) - Fraud Investigations and Legal Issues Free Practice Exam Questions (2026 Updated)

The conviction intime standard, also called the inner-conviction standard, is used in many civil law systems. It requires the fact finder to be convinced on an inner, deep-seated level that the defendant is guilty. This differs from the common law “beyond a reasonable doubt” standard, which requires the fact finder to be as sure as possible but does not demand absolute certainty. Option A is incorrect because no criminal burden of proof requires philosophical absolute certainty. Option B more closely describes the common law reasonable-doubt concept, not conviction intime. Option C uses the phrase “reasonable intuition,” which is not the standard described in the legal materials. Therefore, option D accurately states the civil law burden.

The correct answer is A. The CFE Manual explains that to recover for intentional infliction of emotional distress, the plaintiff must prove that the defendant engaged in extreme and outrageous conduct, that the defendant acted intentionally or recklessly, and that the victim actually suffered emotional or mental distress as a result of the defendant’s conduct. These core elements match options B, C, and D.

There is no general requirement that the distress must have lasted for at least two years. That time-based condition is not one of the recognized elements listed in the CFE Law section. The Manual instead focuses on the nature of the conduct and the causal connection between that conduct and the victim’s injury. It also notes that the conduct must be sufficiently outrageous to exceed the bounds tolerated by civilized society and that mere insults or ordinary upset are not enough. Additionally, the Manual emphasizes that actionable claims require proof of serious, visible, and provable harm. Still, none of those requirements impose a fixed minimum duration such as two years. Accordingly, A is the only choice that is not a required element of this common law tort.

The correct answer is B. To prove a conspiracy claim, the government generally must show that the defendant knew the unlawful purpose of the conspiracy and intentionally joined it. A conspiracy does not require proof that the defendant personally completed the intended crime. The offense is based on the unlawful agreement and the defendant’s knowing participation in that agreement.

Option A is incorrect because a conspirator does not need to know every detail, objective, or step in the overall scheme. Many conspiracies involve participants with limited knowledge of the full operation, yet they can still be criminally liable if they knowingly join the unlawful plan. Option C is also incorrect because a defendant does not need to know the identity of every other participant. Conspiracy law focuses on intentional participation in the common unlawful purpose, not complete familiarity with all members. Option D is incorrect because the government usually does not need to prove that the defendant actually accomplished the conspiracy’s goal. Joining the conspiracy with the required criminal intent is enough. In fraud-related prosecutions, conspiracy is especially important because it allows liability to attach to coordinated misconduct even when one participant did not personally perform every act in the scheme. Therefore, B is the most accurate statement.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is D: Existence of an employment contract.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The correct answer is C. In most inquisitorial jurisdictions, expert witnesses are often appointed or closely supervised by the court, and the judge typically has a central role in defining the expert’s mission, the materials the expert may review, and the issues to be addressed. Even so, the parties are usually allowed to challenge the expert in meaningful ways, including raising concerns about the expert’s bias, neutrality, qualifications, methodology, or conclusions. That makes C the most accurate statement.

Option A is incorrect because, in inquisitorial systems, the parties do not ordinarily control the scope of the expert’s authority in the same way they often do in adversarial systems; the judge commonly exercises that control. Option B is too absolute because although the judge plays the dominant role, it is not generally true that only the judge may question the expert’s analysis. Option D is also inaccurate because the ultimate decision about the weight to assign to expert testimony is generally for the judge, not jointly for the judge and the parties.

Thus, the best statement is that the parties are usually permitted to raise objections concerning the expert’s possible biases, making C the correct choice.

CFE methodology stresses that fraud examinations should be conducted with the assumption that the matter could end in litigation, which directly affects evidence-handling decisions. If litigation is reasonably anticipated, organizations often must preserve potentially relevant records through measures such as litigation holds and suspension of normal record-retention/destruction practices. Disposing of evidence while litigation is likely (or while a duty to preserve could exist) can create serious consequences, including sanctions, adverse inferences, monetary penalties, and other legal repercussions for spoliation or failure to preserve evidence. Because the central risk is future legal proceedings—civil, criminal, regulatory, or employment-related—the most important consideration when deciding whether evidence can be disposed of is whether additional litigation is likely or could reasonably arise. The physical form of evidence (A) affects preservation techniques, but it is not the key decision driver for disposal. Reporting summaries (C) do not replace original evidence. Whether evidence is direct or circumstantial (D) is not the deciding factor; both can be critical depending on the case. Thus, likelihood of future litigation is the most important factor.

Oral consent is generally not sufficient to obtain a suspect’s bank records. The CFE Prep - Investigations states:

“Accessing a subject’s bank records from financial institutions generally requires written consent. Oral consent is the least effective way to obtain permission”.

The Fraud Examiners Manual also notes that bank information can usually only be obtained with subpoena, search warrant, or written consent.

The correct answer is D. The CFE Manual explains that when parties or assets are spread across multiple jurisdictions, a judgment obtained in one country is not automatically effective everywhere else. In fact, a domestic judgment against a foreign defendant may be useful for recovering assets located in the domestic country, but it might be worthless for reaching assets located in a foreign country. The Manual also states that some countries enforce foreign judgments, but others do not, and enforceability often depends on the internal laws of the enforcing jurisdiction and whether there is an enforcement treaty between the relevant countries.

This is why options A and C are incorrect. Enforceability is absolutely affected by the law of the place where enforcement is sought, and foreign judgments are not universally or automatically recognized worldwide. Option B is also too absolute because asset location can matter practically, but the Manual makes clear that enforceability does not always depend solely on where assets are located. The better statement is that a judgment secured in one jurisdiction might not be effective in another jurisdiction where the defendant resides or holds assets. That is the cross-border enforcement problem fraud examiners must understand when asset recovery is involved.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about FATF, cross-border transfers of currency Trevor is traveling from Country A to Country B while carrying $16,000 in cash which exceeds Country B ' s reporting threshold Trevor is required to disclose the amount of currency he is carrying to authorities in Country B.

The correct answer is A: True.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The correct answer is B. Duty of care. The CFE Manual states that the duty of care means people in a fiduciary relationship must act with the care that an ordinarily prudent person would employ in similar positions. It further explains that corporate officers, directors, high-level employees, and other fiduciaries must conduct business affairs prudently, using the skill and attention normally exercised by people in comparable roles.

This standard is different from the duty of loyalty, which focuses on faithfulness to the principal and avoiding self-dealing, kickbacks, undisclosed conflicts of interest, and other disloyal conduct. The duty of care instead addresses the quality of decision-making and oversight. Fiduciaries who act carelessly, recklessly, or without proper prudence can be held responsible for resulting losses, including losses tied to negligence, mismanagement, or waste of corporate assets.

The other options are not the correct doctrinal label used in the CFE Law materials. Because the question specifically describes acting with the skill and attention of an ordinarily prudent person in a similar position, it is describing the duty of care. Therefore, B is the correct answer.

CFE interviewing guidance distinguishes among open, closed, and leading questions used during the fact-gathering portion of an interview. Closed questions require a precise, specific answer— commonly “yes/no,” but also specifics such as dates, amounts, and times. The question “What year did you start working in the accounting department?” seeks a specific date-like fact (a particular year) rather than inviting a narrative explanation. That is the hallmark of a closed question: it restricts the response to a narrow factual point and does not encourage expansive detail. By contrast, open questions (e.g., “Please describe the procedures to me”) are designed to elicit a broader, more descriptive answer. Leading questions are framed to suggest the answer and are often used to confirm information already known, whereas Quincy’s question does not embed a suggested response—he is simply requesting a specific historical fact. Therefore, under CFE definitions, this question is most accurately classified as closed.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to conspiracy, the question asks about the core concepts in this area.

The correct answer is B: The defendant entered into an agreement to commit an illegal act with at least one other person..

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

A fraud response plan should be practical, tailored to the organization, and informed by the organization’s risks. It should consider prior fraud incidents, known vulnerabilities, business activities, industry-specific schemes, reporting channels, investigation responsibilities, legal consultation, evidence preservation, and communication protocols. Option A is correct because previous fraud cases and industry-related risks help management design a plan that fits realistic threats. Option B is incorrect because no response plan can completely eliminate all risk. Option C is too rigid; the plan should guide responses, but each fraud examination depends on the facts and must remain flexible. Option D is also incorrect because excessive complexity can make the plan difficult to follow. A useful fraud response plan is clear, usable, and risk-based.

Digital evidence is more volatile than tangible evidence because electronic data can be altered, overwritten, deleted, or destroyed very easily. Even ordinary system activity can change metadata, access logs, temporary files, or other important information. This is why fraud examiners must preserve digital evidence carefully, often by using forensic imaging, write-blocking tools, and validated procedures. Option A is incorrect because once integrity is compromised, the evidence usually cannot simply be restored to its original evidentiary condition. Option B is wrong because digital evidence is also subject to spoliation concerns. Option D is false because failure to preserve integrity can affect admissibility or weight in legal proceedings. Therefore, option C is the most accurate statement.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, common law, the question asks about MOST LIKELY.

The correct answer is B: Civil law.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Whistleblower antiretaliation laws generally protect employees from adverse action because they made a protected disclosure. Therefore, Ted’s employer should not terminate him merely for reporting fraud to the contracting government agency. However, whistleblower protection does not give an employee immunity for independent misconduct. The investigation revealed that Ted threatened violence against employees accused of fraud because they failed to include him in the scheme. Those threats are separate misconduct and can justify discipline or termination if handled consistently with law and company policy. Option B is wrong because firing him for protected reporting could be retaliatory. Option C is too broad because whistleblowers can still be disciplined for legitimate, nonretaliatory reasons. Option D reverses the correct rule. Therefore, option A is most accurate.

The Fraud Examiners Manual stresses confidentiality:

“To preserve confidentiality, investigators should avoid transmitting confidential information by email or other electronic means whenever possible, as these are susceptible to interception or unauthorized access.”

Suspending employees or blanket bans on discussion are not best practices. Confidentiality is preserved primarily by secure communication and controlled access to information.

The 2014 International Fraud Examiners Manual provides examples of data analysis for accounts payable:

“Examples of data analysis queries that can be performed to help detect fraud through examination of accounts payable include:

• Audit paid invoices for manual comparison with actual invoices.

• Summarise large invoices by amount, vendor, etc.

• Identify debits to expense accounts outside of set default accounts.

• Reconcile cheque registers to disbursements by vendor invoice.”

While other functions apply to payroll or asset management, the most effective function for accounts payable fraud detection is to summarize large invoices by amount and vendor.

Covert operations must be carefully planned and documented because they involve legal, safety, financial, and reputational risks. The Fraud Examiners Manual states that before conducting a covert operation, the basis for the operation should be committed to writing, preferably in a memorandum. The memorandum should identify the information upon which the operation is based, the information expected to be gained, known suspects, and operatives under the examiner’s control. Option D is therefore directly supported. Option A is too broad because all known associates are not necessarily required. Option B may be useful in planning but is not the best statement of the memorandum’s required basis. Option C is vague and less directly tied to the manual’s listed documentation points.