Master Analyst in Financial Forensics Exam Prep
Free practice questions

Free MAFF Practice Questions

10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.

Start the free practice test → ★★★★★4.9/5 from 2,400+ candidates · No signup

The MAFF exam has 400 questions and runs 5 hours.

These 10 free MAFF questions are organized by exam domain, so you can see how each part of the Master Analyst in Financial Forensics blueprint is tested. Reveal the answer and explanation under each question.

Domain 1: Part I: Foundations of Financial Forensics 20% of exam

Question 1

Counsel defending a damages regression tells a federal judge, "The method is accepted, so objections to its application go only to weight." The expert used companies from different markets without establishing comparability. How should the judge respond under Federal Rule of Evidence 702?

Show answer & explanation

Correct answer: D - Require the proponent to show, more likely than not, that the method was reliably applied to these facts.

Question 2

A retained testifying expert in federal civil litigation receives three communications from counsel: customer sales data that she analyzes but ultimately rejects, a proposed growth assumption that she considers but does not use, and comments about the wording of her draft report. None concerns compensation. Which communication falls within Rule 26(b)(4)(C)'s express exceptions to attorney-expert communication protection?

Show answer & explanation

Correct answer: D - The sales-data communication, because the expert considered the data even though she ultimately rejected them.

Domain 2: Part II: Specialty Areas-Commercial and Personal Damages 12% of exam

Question 3

A wholesaler proves that a supplier's breach eliminated $480,000 of sales. The canceled orders would have required $288,000 of purchases and sales commissions, all of which were avoided. Allocated rent and salaried staff costs of $72,000 continued unchanged. The wholesaler also earned $30,000 in incremental profit from replacement sales and incurred $12,000 in reasonable mitigation costs not included in that profit. Under a compensatory lost-profit measure, what is the net economic loss before interest and taxes?

Show answer & explanation

Correct answer: C - $174,000

Question 4

An economic-loss report values a deceased retiree's household services at zero. She had provided care and home maintenance for her spouse; her employed adult son now supplies those services without reducing his paid work. The applicable wrongful-death measure is the reasonable replacement value of lost services. Task logs and evidence supporting the service period are available. A sound replacement-cost model would use:

Show answer & explanation

Correct answer: A - Documented task hours and market replacement rates over the supported household-service period.

Domain 3: Part II: Specialty Areas-Business and Intellectual Property Damages 12% of exam

Question 5

A patent owner establishes demand, the absence of acceptable noninfringing substitutes, and the profits it would have earned on sales it could have supplied. Its available capacity could not serve every diverted customer during the infringement period, and no feasible expansion or outsourcing was available. Infringement is established. What damages position is best supported by this evidence?

Show answer & explanation

Correct answer: C - Lost profits on sales it could have made, with a reasonable royalty on the remaining infringing sales.

Domain 4: Part II: Specialty Areas-Business Valuation in Litigation 12% of exam

Question 6

A mature business is expected to generate $720,000 of after-tax free cash flow to the firm next year, growing at 3% annually thereafter. Its weighted average cost of capital is 12%. Interest-bearing debt has a market value of $2 million. Of its $700,000 cash balance, $300,000 is required for operations and is already reflected in the operating valuation. There are no other nonoperating assets or equity adjustments. Using a perpetual-growth income approach, what is the indicated equity value?

Show answer & explanation

Correct answer: B - $6.4 million

Domain 5: Part II: Specialty Areas-Matrimonial 12% of exam

Question 7

Under a 2025 divorce decree, Morgan must transfer part of a traditional IRA to a former spouse. Morgan is 48, has no IRA basis, and has not withdrawn any funds. The parties want the transfer itself to produce no current federal income tax. Which implementation preserves that treatment?

Show answer & explanation

Correct answer: B - Have the custodian transfer the specified IRA interest directly to the former spouse's IRA under the divorce decree.

Domain 6: Part II: Specialty Areas-Business Fraud and Deterrence 12% of exam

Question 8

Customer confirmations uncover a rolling payment mismatch: North's cleared check was posted to South's overdue invoice; East's later check was posted to North's invoice. One clerk handles both collections and receivables posting. Which mechanism would conceal a cash-receipts shortage this way?

Show answer & explanation

Correct answer: A - Lapping of customer receipts

Domain 7: Part II: Specialty Areas-Bankruptcy, Insolvency, and Restructuring 10% of exam

Question 9

Payroll is due tomorrow for a corporate Chapter 11 debtor in possession. Its only available funds are proceeds of receivables subject to a lender's valid, continuing lien. The lender has not consented to their use, and no cash-collateral order has been entered. Management wants to pay payroll because it is an ordinary-course expense. What authorization is missing?

Show answer & explanation

Correct answer: C - The lender's consent or a court order authorizing use of the cash collateral.

Domain 8: Part II: Specialty Areas-Digital Forensics 10% of exam

Question 10

An authorized examiner arrives to preserve a finance director's laptop. It is powered on and unlocked, its drive is encrypted, and no recovery key is available. The network connection creates a credible remote-wipe risk, but no destructive activity is running locally. The examiner can isolate the device without cutting power and can perform a documented live acquisition. What should happen first?

Show answer & explanation

Correct answer: A - Isolate the network without cutting power, then use a documented live acquisition to preserve volatile data and accessible evidence.

That's 10 of 1,030

The full bank has 1,020 more MAFF questions with explanations.

Continue in the free practice test →

View plans