Question 1

An association matrix is not useful for identifying major players who are central to an investigation and to identify linkages between those players.

Accepted Answer

An association matrix is useful for identifying major players who are central to an investigation and to identify linkages between those players. The association matrix is a tool used in social network analysis to identify patterns of relationships between entities such as individuals, organizations, or countries. By analyzing the associations between entities, the matrix can reveal key players who are central to the network and identify linkages between clusters of entities.

Question 2

Generally, a warrant or subpoena is not required to obtain digital evidence.

Accepted Answer

Generally, a warrant or subpoena is required to obtain digital evidence, as it is considered protected by the Fourth Amendment of the US Constitution. However, there are certain exceptions such as voluntary consent, exigent circumstances, and plain view doctrine where a warrant or subpoena may not be required.

Question 3

IDEA can read, display, analyze, manipulate, sample, and extract data from files obtained from many sources in only one format.

Accepted Answer

While IDEA can read, display, analyze, manipulate, sample, and extract data from various file formats, it is not true that it can do so in only one format. IDEA is designed to work with a wide range of data file formats, including databases, spreadsheets, delimited text files, and more.

Question 4

An activity that can enhance the ability to recover deleted files is the "Defrag" command.

Accepted Answer

The "Defrag" command organizes the data on a hard drive to improve its performance but it does not help to recover deleted files. To recover deleted files, specialized recovery software or backup systems must be used.

Question 5

Case management software can be used in a number of situations to manage cases and case data.

Accepted Answer

Case management software can be utilized in various fields like legal, healthcare, social work, customer service, and more to manage cases and case data.

Question 6

The acronym MICE signifies fraud motivations such as money, intellectualism, coercion, and ego.

Accepted Answer

MICE stands for Money, Ideology, Compromise (or Coercion), and Ego, which are motivations for espionage, not specifically fraud.

Question 7

Data mining and knowledge discovery software is generally classified into two general categories: public domain and commercial applications.

Accepted Answer

Data mining and knowledge discovery software can indeed be classified into public domain and commercial applications. Public domain software is free to use and modify, while commercial software is typically proprietary and requires payment for use.

Question 8

Record validation can include reasonableness checks, sequences checks, and other checks.

Accepted Answer

Record validation can certainly include reasonableness checks, sequences checks, and other checks.

Question 9

Benford's Law can be used as an indicator of potential fraud.

Accepted Answer

Benford's Law states that in certain datasets, the first digit of numbers will occur with a predictable frequency. If a dataset does not follow this pattern, it may suggest that the numbers have been manipulated or fabricated. Therefore, Benford's Law can be used as a tool to identify potential fraud.

Question 10

Validation controls detest input errors by flagging those transactions that fall within accepted ranges.

Accepted Answer

Validation controls are designed to detect input errors by flagging transactions that fall outside of accepted ranges, not within them.

Question 11

Preparing link charts is a way to represent the associations, linkages, and other important relationship graphically.

Accepted Answer

Link charts are a graphical representation of associations and linkages.

Question 12

ACL and IDEA are examples of commercially available data mining software.

Accepted Answer

ACL and IDEA are both commercially available data mining software.

Question 13

The simple act of turning on a confiscated computer, digital camera, cell phone, PDA, etc. may make all the evidence on that digital device inadmissible in a courtroom.

Accepted Answer

Turning on a confiscated digital device without proper forensic procedures can alter the data on the device (e.g., change timestamps, access logs, etc.), potentially compromising the integrity of the evidence and making it inadmissible in court due to the inability to prove it has remained unchanged.

Question 14

Output controls address how to monitor waste and how to identify who is responsible for data accuracy, report distribution, and end-user controls.

Accepted Answer

Output controls address these specific issues related to monitoring waste and identifying responsibility for data accuracy, report distribution, and end-user controls.

Question 15

Once data sectors on computer files have been overwritten, generally a computer forensic specialist can still recover the files.

Accepted Answer

Once data sectors on computer files have been overwritten, it becomes extremely difficult, if not impossible, for a computer forensic specialist to recover the files. The new data completely replaces the old data, leaving no trace of the previous information.

Question 16

Recovering deleted files is not considered difficult, provided that the file has not been overwritten or corrupted and that the drive has not been repartitioned or reformatted.

Accepted Answer

If the file has not been overwritten or corrupted and the drive has not been repartitioned or reformatted, it is generally possible to recover deleted files successfully with the help of data recovery software or services. However, if any of these actions have taken place, data recovery may be much more difficult or even impossible.

Question 17

Restoring data and files is a more sophisticated approach to recovering deleted files.

Accepted Answer

Restoring data and files typically involves accessing backup copies or using specialized software to recover lost data. It generally requires more advanced techniques than simply recovering deleted files from the Recycle Bin or trash folder.

Question 18

An information technology IT audit consists of 1 planning, 2 tests of controls, and 3 substantive tests.

Accepted Answer

This is the standard three-phase approach to conducting an IT audit.

Question 19

There are two major ways to test IT systems - the "black-box" approach, and the "white-box" approach, which utilizes a relatively small dataset to test the system.

Accepted Answer

The answer of There are two major ways to test...

Question 20

The source documents that support the electronic data systems do not need to be pre-numbered and used in sequence.

Accepted Answer

Pre-numbering and using source documents in sequence helps ensure that all transactions are recorded, prevents duplication, and facilitates the tracking and verification of transactions in electronic data systems.

Quiz 10: Using Information Technology for Fraud Examination and Financial Forensics