Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ACFE CFE-Investigation Exam - Topic 4 Question 121 Discussion

Which of the following is the LEAST ACCURATE statement about seizing a computer for examination?
B) When seizing a computer that is running, it is acceptable for a fraud examiner to review the files contained on the machine prior to seizing it.
A) When taking a computer for examination, if the computer is off. it should remain off when it is removed.
C) Before removing a computer system from a scene for further analysis, it is important to document the system's setup with photographs or diagrams.
D) When seizing a computer for examination, the seizing party should took around the area for passwords because many people leave passwords near their computers

ACFE CFE-Investigation Exam - Topic 4 Question 121 Discussion

Actual exam question for ACFE's CFE-Investigation exam
Question #: 121
Topic #: 4
[All CFE-Investigation Questions]

Which of the following is the LEAST ACCURATE statement about seizing a computer for examination?

Show Suggested Answer Hide Answer
Suggested Answer: B

The manual states:

''When seizing a computer that is running, the party seizing the system should not, in most situations, search the computer for evidence because doing so might damage and taint relevant evidence.''

Thus, B is the least accurate statement.


Contribute your Thoughts:

0/2000 characters
Marsha
11 hours ago
D seems off too. Not all people leave passwords out.
upvoted 0 times
...
Na
6 days ago
C is important too, but I feel A is misleading. Off means off, right?
upvoted 0 times
...
Sue
11 days ago
Agreed, B is risky. It could alter evidence.
upvoted 0 times
...
Gerald
16 days ago
I think B is the least accurate. You shouldn't review files before seizing.
upvoted 0 times
...
Leota
21 days ago
I think D is a common misconception. Not everyone does that!
upvoted 0 times
...
Ryan
26 days ago
A and C are solid practices, but D seems a bit sketchy.
upvoted 0 times
...
Alaine
2 months ago
Wait, people actually leave passwords around? That's surprising!
upvoted 0 times
...
Ludivina
3 months ago
Totally agree, B is a big no-no.
upvoted 0 times
...
Tuyet
3 months ago
B is definitely the least accurate. You can't just browse files before seizing!
upvoted 0 times
...
Marta
3 months ago
D) sounds a bit far-fetched. Who does that?
upvoted 0 times
...
Dominga
3 months ago
Wait, people actually leave passwords around? That's surprising!
upvoted 0 times
...
Tish
3 months ago
C) makes sense, documentation is key.
upvoted 0 times
...
Evette
3 months ago
Totally agree, B) is a big no-no. You can't tamper with evidence.
upvoted 0 times
...
Shala
4 months ago
A) is definitely the least accurate. You can't just leave it off!
upvoted 0 times
...
Ty
4 months ago
I’m confused about option A; I thought it was okay to turn off a computer if it was running, but maybe it should stay off to avoid data loss?
upvoted 0 times
...
Alaine
4 months ago
I practiced a similar question where documenting the setup was emphasized, so I think option C is definitely accurate.
upvoted 0 times
...
Elly
4 months ago
I'm not entirely sure, but I feel like option D could also be misleading. It seems a bit unprofessional to just look for passwords lying around.
upvoted 0 times
...
Krystal
4 months ago
I think option B might be the least accurate because I remember reading that you shouldn't access files before seizing the computer.
upvoted 0 times
...

Save Cancel