100%
FOR3705
EXAM PACK
DISTINCTION QUALITY
UNISA EXAM
, FOR3705 EXAM Q AND ANSWERS 2026
QUESTION 1
1.1 Indicate the correct statement:
a) Intelligence professionals employ limited techniques to obtain valuable information.
b) Non-public information is open to the public.
c) Intelligence professionals cannot use open-source information to conduct background
research on targets.
d) Open-source information is information in the public domain.
e) Generally, human intelligence is not gathered from subject matter experts and informed
individuals.
1.2 Indicate the incorrect statement:
a) There are two basic types of admissible evidence: direct or circumstantial. Direct
evidence shows prima facie the facts at issue; it proves the fact directly.
b) A document can be a piece of physical evidence and not just a source of information.
c) To maintain good organisation of documents in complex cases, fraud examiners should
use the following methods: segregate the documents, make a key document file,
establish a database, maintain a chronology and keep a to-do list.
d) Expert document examination results found as part of a fraud investigation cannot
corroborate or refute statements by witnesses or fraud suspects.
e) Most forensic document examinations concern signatures, handwriting, or documents
created by a typewriter/computerised printer.
1.3 Indicate the correct statement:
a) One of the general objectives of all covert operations is to identify those engaged in possible
illegal activity.
b) Undercover operations seek to develop evidence indirectly from people involved in an
offence through the use of disguise and deceit.
c) A covert operation involves some of the less costly and safe work a fraud investigator can
undertake.
24
, d) If a covert operation could be conducted in another way, the fraud investigator should opt for
covert operations.
e) Surveillance is normally concerned with the unintentional observation of people.
1.4 Indicate the incorrect statement:
a) Public records are documents that a governmental agency is required to keep by law or that are
necessary to discharge the duties imposed by law.
b) Public records can be searched manually or online through governmental agency websites and
online public databases.
c) Publicly available information is information that has lawfully been published or broadcast to the
public for consumption.
d) Non-public records – financial or otherwise – might be needed to prove fraud or to provide leads
in a financial crime investigation.
e) Members of the public and fraud investigators have an absolute right to access non-public
records.
1.5 Indicate the correct statement:
a) The financial profile might yield direct evidence of illegal income or hidden assets, or
circumstantial evidence of these, by showing that the subject’s expenditures exceeded
known sources of income.
b) When using the net worth method of analysis, the fraud examiner should begin by
establishing a behavioural profile for the subject.
c) While the financial profile works best for large transactions, the behavioural profile is best
at identifying smaller activities and smaller currency transactions.
d) The behavioural profile does not reveal the subject’s lifestyle indicators, such as large
amounts of cash and expensive housing that may suggest that the subject is living beyond
his or her apparent means or has hidden wealth or assets.
e) The behavioural profile is not appropriate to provide evidence of a possible motive of the
crime, such as large debts and additional evidence of illicit funds.
[10]
QUESTION 2 TRUE OR FALSE QUESTIONS
Indicate if the following statements are true or false. Only write down the number of the question and then
true or false, depending on the answer. Each question counts 1 mark.
Example:
25
, 2.6 True
2.7 False
2.8 False
2.1 The net worth analysis is based on the reality that any recipient of income, whether honest or
dishonest, can dispose of his or her income in only four ways: save it, buy assets, pay off debts,
or spend it. true
2.2 Fraud examiners should use the asset method when the suspect’s known expenditures and known
sources of funds during a given period are compared.
false
2.3 To analyse the subject’s financial status using the expenditures method, fraud examiners should take
three steps.
true
2.4 The income method and the behavioural method are two basic methods to examine a subject’s
sources of funds using a net worth analysis.
false
2.5 Under the expenditures method, the fraud examiner determines the increase or
decrease in the subject’s net worth from year to year by comparing the subject’s net worth at the
beginning and end of the period in question. false
[5]
QUESTION 3
Briefly explain the concept of data mining.
[2]
CHECK MEMO AT THE LAST BOTTOM
QUESTION 4
List three fraud indicators that can be identified by means of data mining.
[3]
QU
ES
TI
ON
5
List eight sources from which data can be collected through applying data mining processes.
[8]
QU
ES
TI
ON
6
Name five lifestyle indicators that could be revealed by the behavioural profile that might lead to
identifying hidden wealth or assets.
26
FOR3705
EXAM PACK
DISTINCTION QUALITY
UNISA EXAM
, FOR3705 EXAM Q AND ANSWERS 2026
QUESTION 1
1.1 Indicate the correct statement:
a) Intelligence professionals employ limited techniques to obtain valuable information.
b) Non-public information is open to the public.
c) Intelligence professionals cannot use open-source information to conduct background
research on targets.
d) Open-source information is information in the public domain.
e) Generally, human intelligence is not gathered from subject matter experts and informed
individuals.
1.2 Indicate the incorrect statement:
a) There are two basic types of admissible evidence: direct or circumstantial. Direct
evidence shows prima facie the facts at issue; it proves the fact directly.
b) A document can be a piece of physical evidence and not just a source of information.
c) To maintain good organisation of documents in complex cases, fraud examiners should
use the following methods: segregate the documents, make a key document file,
establish a database, maintain a chronology and keep a to-do list.
d) Expert document examination results found as part of a fraud investigation cannot
corroborate or refute statements by witnesses or fraud suspects.
e) Most forensic document examinations concern signatures, handwriting, or documents
created by a typewriter/computerised printer.
1.3 Indicate the correct statement:
a) One of the general objectives of all covert operations is to identify those engaged in possible
illegal activity.
b) Undercover operations seek to develop evidence indirectly from people involved in an
offence through the use of disguise and deceit.
c) A covert operation involves some of the less costly and safe work a fraud investigator can
undertake.
24
, d) If a covert operation could be conducted in another way, the fraud investigator should opt for
covert operations.
e) Surveillance is normally concerned with the unintentional observation of people.
1.4 Indicate the incorrect statement:
a) Public records are documents that a governmental agency is required to keep by law or that are
necessary to discharge the duties imposed by law.
b) Public records can be searched manually or online through governmental agency websites and
online public databases.
c) Publicly available information is information that has lawfully been published or broadcast to the
public for consumption.
d) Non-public records – financial or otherwise – might be needed to prove fraud or to provide leads
in a financial crime investigation.
e) Members of the public and fraud investigators have an absolute right to access non-public
records.
1.5 Indicate the correct statement:
a) The financial profile might yield direct evidence of illegal income or hidden assets, or
circumstantial evidence of these, by showing that the subject’s expenditures exceeded
known sources of income.
b) When using the net worth method of analysis, the fraud examiner should begin by
establishing a behavioural profile for the subject.
c) While the financial profile works best for large transactions, the behavioural profile is best
at identifying smaller activities and smaller currency transactions.
d) The behavioural profile does not reveal the subject’s lifestyle indicators, such as large
amounts of cash and expensive housing that may suggest that the subject is living beyond
his or her apparent means or has hidden wealth or assets.
e) The behavioural profile is not appropriate to provide evidence of a possible motive of the
crime, such as large debts and additional evidence of illicit funds.
[10]
QUESTION 2 TRUE OR FALSE QUESTIONS
Indicate if the following statements are true or false. Only write down the number of the question and then
true or false, depending on the answer. Each question counts 1 mark.
Example:
25
, 2.6 True
2.7 False
2.8 False
2.1 The net worth analysis is based on the reality that any recipient of income, whether honest or
dishonest, can dispose of his or her income in only four ways: save it, buy assets, pay off debts,
or spend it. true
2.2 Fraud examiners should use the asset method when the suspect’s known expenditures and known
sources of funds during a given period are compared.
false
2.3 To analyse the subject’s financial status using the expenditures method, fraud examiners should take
three steps.
true
2.4 The income method and the behavioural method are two basic methods to examine a subject’s
sources of funds using a net worth analysis.
false
2.5 Under the expenditures method, the fraud examiner determines the increase or
decrease in the subject’s net worth from year to year by comparing the subject’s net worth at the
beginning and end of the period in question. false
[5]
QUESTION 3
Briefly explain the concept of data mining.
[2]
CHECK MEMO AT THE LAST BOTTOM
QUESTION 4
List three fraud indicators that can be identified by means of data mining.
[3]
QU
ES
TI
ON
5
List eight sources from which data can be collected through applying data mining processes.
[8]
QU
ES
TI
ON
6
Name five lifestyle indicators that could be revealed by the behavioural profile that might lead to
identifying hidden wealth or assets.
26
