Detailed Explanation:

Rationale for Correct Answer: Ransomware is malware that encrypts or locks an operating system and prevents access to data until a ransom is paid. This definition is correct.

Analysis of Incorrect Options:

A. Spyware – Monitors user activity, keystrokes, or data, not a startup instruction program.

B. Trojan horse – Appears legitimate but contains malicious code; adware is different.

C. Worm – Self-replicating program spreading across networks; not a keystroke logger.

Key Concept: Cyber fraud and malware types .

Detailed Explanation:

Rationale for Correct Answer: By double-entry accounting rules, every accounting entry affects at least two accounts (debit and credit). Fraudulent entries must also follow this rule, meaning manipulation will show up in at least two categories on the financial statements.

Analysis of Incorrect Options:

A. One – Impossible in double-entry accounting.

C. More than two – Possible, but not always; the minimum is two.

D. None of above – Incorrect since “at least two” is correct.

Key Concept: Double-entry accounting ensures at least two accounts are affected in every transaction, including fraudulent ones.

Detailed Explanation:

Rationale for Correct Answer: The phases of the bidding process include:

Presolicitation (need recognition/specification stage),

Solicitation (inviting bids),

Submission (vendors submit bids). There is no standard phase called Postsolicitation .

Analysis of Incorrect Options:

A. Presolicitation – Valid phase.

C. Solicitation – Valid phase.

D. Submission – Valid phase.

B. Postsolicitation – Not recognized as a formal bidding stage.

Key Concept: Bidding process phases — presolicitation, solicitation, submission.

The correct answer is C because comparing claimed travel expenses with known business-trip dates is a targeted way to detect fictitious, overstated, or personal expenses submitted for reimbursement. Expense reimbursement fraud often involves employees claiming expenses that were not actually incurred for business purposes, altering receipts, requesting multiple reimbursements, or mischaracterizing personal costs as business costs. Travel expenses outside approved trip dates are suspicious because they might represent personal travel or fabricated claims. Option A is weak because balances matching historical amounts are not inherently suspicious. Option B is inefficient and HR might not have the necessary transactional evidence. Option D is not a strong fraud indicator because lower expenses are generally less suspicious than excessive or unsupported expenses. The ACFE material emphasizes detailed review and analysis of expense reports.

================

The correct answer is D. A fraudulent conveyance occurs when a debtor transfers property to another party, often an insider or related party, for little or no consideration before or during insolvency to place assets beyond the reach of creditors. Brad’s transfer of valuable marble slabs to his son’s construction business at no charge shortly before bankruptcy is a strong indicator of such a scheme. Option A, concealed transfer, is less precise because the key issue is not merely hiding a transfer but transferring assets for inadequate value to impair creditors. Option B is overly broad and does not identify the scheme type. Option C, planned bustout, usually involves obtaining goods or credit with the intent to dispose of assets and then file bankruptcy.

================

Rationale for Correct Answer: Traditional bribery laws historically applied only to government officials . When bribery occurs in the private sector (commercial setting), it is known as commercial bribery . Modern laws and internal company codes address this as well.

Key Concept: Commercial bribery vs. government bribery.

The correct answer is B because the FATF Recommendations require suspicious transaction reporting when a financial institution suspects that funds are connected to criminal activity or money laundering. Samuel’s repeated purchases of bearer instruments in amounts just below the reporting threshold are classic structuring or smurfing indicators. The fact that each transaction falls below the mandatory cash reporting threshold does not eliminate the suspicious transaction reporting duty. Option A is incorrect because a cash transaction report is generally threshold-based, not merely based on suspicion. Options C and D are incorrect because bearer instruments and sub-threshold amounts are often used to avoid detection, making the activity more suspicious, not less. The ACFE material identifies this conduct as a key money laundering red flag.

================

Detailed Explanation:

Rationale for Correct Answer: Short-term skimming schemes include tactics like unrecorded sales , understated sales , and theft of incoming checks . These involve diverting funds before recording and typically last for a shorter duration because of higher detection risk.

Analysis of Incorrect Options:

B. Dual endorsements – Relates more to check fraud, not skimming.

C. False company accounts – Typically used in long-term fraud concealment.

D. Check-for-currency substitutions – More relevant to larceny and kiting schemes.

Key Concept: Short-term skimming schemes involve quick thefts before recording transactions.

Detailed Explanation:

Rationale for Correct Answer: Expenses appear on the income statement , not the balance sheet. The balance sheet includes assets, liabilities, and owners’ equity, representing the accounting equation.

Analysis of Incorrect Options:

A, B, D – All appear on the balance sheet.

Key Concept: Distinction between financial statements: balance sheet vs. income statement.

Detailed Explanation:

Rationale for Correct Answer: Corruption schemes involve the misuse of influence in business transactions for personal benefit, often through bribery, kickbacks, or conflicts of interest. In this case, the procurement agent accepts an improper benefit (use of a beach house) in exchange for contract favoritism, which is a classic bribery scheme.

Analysis of Incorrect Options:

A – Theft of confidential information = asset misappropriation/intellectual property theft , not corruption.

C – Excluding laptops from records = inventory theft , not corruption.

D – Omitting costs = financial statement fraud .

Key Concept: Bribery as a form of corruption.