KT-FIN Fraud indicators

Whistleblower reports kickbacks in procurement. Security role?

Multiple choice — select one answer

Answer choices

  1. a. Delete emails to reduce clutter, without security or identity team coordination per policy.
  2. b. Disable firewalls, without security or identity team coordination per policy.
  3. c. Post names on intranet, without security or identity team coordination per policy.
  4. d. Preserve digital evidence logs and support forensic imaging per legal

Architectural breakdown & explanation

Fraud investigations need preserved logs and coordinated legal hold.

Correct answer(s): d. Preserve digital evidence logs and support forensic imaging per legal

Exam domain: Fraud indicators (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Financial Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.