Fraud examiners should not promise absolute confidentiality to informants because legal, organizational, or prosecutorial duties might require disclosure later. The proper response is to qualify any confidentiality assurance and explain that all reasonable attempts will be made to protect the informant's identity, but no guarantee can be made. Option D best reflects this rule. Options A and B are incorrect because they promise confidentiality too strongly. Even corroboration does not ensure that the informant's identity can remain secret. Option C is also too broad because disclosure to executive leadership is not automatically required in every case. The examiner must protect confidentiality where possible while avoiding promises that cannot be honored. This protects both the investigation and the examiner's professional credibility.

The reporting and testifying phase of a digital evidence investigation is where the examiner presents the results of the analysis fairly, objectively, and in a way that supports the reliability of the process. The purpose is not to prove guilt at all costs, but to explain what was done, what was found, and why the evidence and analysis are valid. Option B is correct because digital evidence must be presented in a manner that confirms the soundness of collection, preservation, processing, and analysis. Option A is too conclusory and improperly focuses on proving guilt. Option C is too narrow because live demonstrations are not the primary goal. Option D is educational rather than evidentiary.

Conspiracy generally requires proof that the defendant entered into an agreement with at least one other person to commit an illegal act, knew the purpose of the agreement, intentionally joined it, and that at least one conspirator committed an overt act in furtherance of the conspiracy. Option A states one of the core elements. Option B is incorrect because the government generally does not have to prove that each conspirator knew every objective or the identity of every participant. Option C is too broad because not every conspirator must personally commit the overt act; at least one conspirator must do so. Option D is incorrect because a conspiracy agreement does not have to be documented in writing or electronically.

The CFE Prep - Investigations notes:
"Court records are best obtained from the jurisdiction in which they were filed... The most accurate records are maintained by the court of original jurisdiction, not global or aggregated databases." Thus, the best place for Sam is the local court of jurisdiction, not a global database.

Isla is attempting to create rapport. Introductory questions should help establish trust, cooperation, and communication before the examiner moves into the fact-gathering portion of the interview. The Fraud Examiners Manual describes rapport as a harmonious relationship that fosters cooperation and trust. Asking a simple, friendly question about coffee or tea is casual conversation designed to make Doug comfortable and create common ground. Option A is too broad because the facts do not show she is structuring a questioning pattern. Option B is different; the interview theme states the general purpose of the interview. Option D is incorrect because the question is not meant to distract Doug, but to relax him and encourage open communication.