Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ACFE CFE-Investigation Exam - Topic 4 Question 121 Discussion

Which of the following is the LEAST ACCURATE statement about seizing a computer for examination?
B) When seizing a computer that is running, it is acceptable for a fraud examiner to review the files contained on the machine prior to seizing it.
A) When taking a computer for examination, if the computer is off. it should remain off when it is removed.
C) Before removing a computer system from a scene for further analysis, it is important to document the system's setup with photographs or diagrams.
D) When seizing a computer for examination, the seizing party should took around the area for passwords because many people leave passwords near their computers

ACFE CFE-Investigation Exam - Topic 4 Question 121 Discussion

Actual exam question for ACFE's CFE-Investigation exam
Question #: 121
Topic #: 4
[All CFE-Investigation Questions]

Which of the following is the LEAST ACCURATE statement about seizing a computer for examination?

Show Suggested Answer Hide Answer
Suggested Answer: B

The manual states:

''When seizing a computer that is running, the party seizing the system should not, in most situations, search the computer for evidence because doing so might damage and taint relevant evidence.''

Thus, B is the least accurate statement.


Contribute your Thoughts:

0/2000 characters
Alaine
26 days ago
Wait, people actually leave passwords around? That's surprising!
upvoted 0 times
...
Ludivina
1 month ago
Totally agree, B is a big no-no.
upvoted 0 times
...
Tuyet
1 month ago
B is definitely the least accurate. You can't just browse files before seizing!
upvoted 0 times
...
Marta
1 month ago
D) sounds a bit far-fetched. Who does that?
upvoted 0 times
...
Dominga
2 months ago
Wait, people actually leave passwords around? That's surprising!
upvoted 0 times
...
Tish
2 months ago
C) makes sense, documentation is key.
upvoted 0 times
...
Evette
2 months ago
Totally agree, B) is a big no-no. You can't tamper with evidence.
upvoted 0 times
...
Shala
2 months ago
A) is definitely the least accurate. You can't just leave it off!
upvoted 0 times
...
Ty
2 months ago
I’m confused about option A; I thought it was okay to turn off a computer if it was running, but maybe it should stay off to avoid data loss?
upvoted 0 times
...
Alaine
2 months ago
I practiced a similar question where documenting the setup was emphasized, so I think option C is definitely accurate.
upvoted 0 times
...
Elly
3 months ago
I'm not entirely sure, but I feel like option D could also be misleading. It seems a bit unprofessional to just look for passwords lying around.
upvoted 0 times
...
Krystal
3 months ago
I think option B might be the least accurate because I remember reading that you shouldn't access files before seizing the computer.
upvoted 0 times
...

Save Cancel