Free CFE-Investigation Practice Test Questions 2026

Antonio is the former boyfriend of Hannah, a fraud suspect. He approaches Ashley, a fraud examiner at Hannah's company, and offers to provide critical information about Hannah's fraud in exchange for full confidentiality. Which of the following is the MOST APPROPRIATE response for Ashley to make?

A. Ashley should explain that Antonio may have qualified confidentiality but that she cannot make any absolute assurances

B. Ashley should promise Antonio unqualified confidentiality over all information provided

C. Ashley should explain that all information must be disclosed to management so nothing Antonio says will be confidential

D. Ashley should promise Antonio that his identity will not become known.

When a fraud examiner is conducting an examination and is in the process of collecting documents, the fraud examiner should:

A. Dust all physical key documents for fingerprints

B. Establish a document database early in the investigation

C. Make copies of originals and leave the originals where they were found

D. Organize all the documents obtained in chronological order

Which of the following can be obtained from a wire transfer record?

A. The amount of the transfer in question

B. The type of money order used to make the transfer

C. The location of the customs port of entry for the transfer

D. The recipient's government identification number

Sylvia, a novice interviewer, asks Adam, the respondent, the following question: "Didn't you know that something wasn't right?" This kind of question is called a_____________question.

A. Double-negative

B. Free narrative

C. Controlled answer

D. Complex

Caroline, a fraud examiner, is conducting an admission-seeking interview with John, an employee suspected of stealing cash. Which of the following is the MOST effective phrasing for Caroline to use when posing an admission-seeking question to John?

A. "Why did you take the money?"

B. "What do you know about the stolen money?"

C. "Do you know who took the money''"

D. "Did you steal the money?"

Which of the following questions would be most effective when starting the calibration process during an interview?

A. "Did you commit any misconduct against the company?"

B. "Do you know what the punishment is for violations like this'5"

C. "Do you know who might have defrauded the company?"

D. "How many jobs have you had before this one?’

Which of the following statements concerning access to nonpublic records is MOST ACCURATE?

A. Once a criminal case is filed, all records obtained by the government are considered public records

B. Nonpublic records cannot be obtained by subpoena or legal order in a civil action

C. In most junsdictions. banks are allowed to turn over a suspect's account information directly to a fraud victim when there is adequate evidence of wrongdoing.

D. The government usually will not share nonpublic records with a fraud victim during an investigation into the underlying fraud.

Amanda needs to know the location of the principal office and the date of incorporation of a company she is investigating. Which of the following would be the BEST source of this information?

A. The organizational filing with the government of the jurisdiction in which the company is incorporated

B. The company's income tax filings

C. The contractual records of any real property owned by the corporation

D. The comprehensive litigation file in the local court in the jurisdiction in which the company is headquartered

Delta, an interviewer with little experience, asks Sigma, the respondent, the following question: "Were you aware that the signature was forged, and why didn't you tell anyone earlier?" This kind of question is called a_____________question

A. Complex

B. Controlled answer

C. Free narrative

D. Double-negative

Lisa, a fraud examiner at a private company, receives an anonymous call from a potential whistleblower. The whistleblower is hesitant to reveal their identity but will do so if it can be Kept fully confidential. Which of the following statements is MOST ACCURATE?

A. Lisa may offer the whistleblower full confidentiality because they are not a suspect

B. Lisa should explain that she will try her best to keep the whistleblower"s identity confidential.

C. Lisa should state that she will not be able to keep the whistleblower's identity confidential because all information must be disclosed to management

D. Lisa may promise the whistleblower full confidentiality, even if she knows her statement is untrue, because the lie is ultimately beneficial to her employer.

Cynthia is preparing to conduct a covert investigation. Prior to conducting surveillance of her subject, she creates a memorandum outlining the basis for her operation Which of the following pieces of information should she include in her memorandum?

A. The name of the subject she will be observing

B. Her first impression regarding the subject's culpability

C. The identities of any confidential sources to be used in the operation

D. All of the above

Which of the following is a unique challenge of cloud forensics that is not encountered in traditional forensic practices?

A. Lack of corroborating evidence

B. Lack of data control

C. Lack of trust from cloud providers

D. Lack of relevant data