After alibis are diffused, suspects may become quiet, withdrawn, or even cry. This often indicates they are considering confession. At this point, the interviewer should present an alternative question, forcing a choice between two answers that both imply guilt, thus leading toward a benchmark admission.

Admission-seeking interviews are designed:
"to obtain a legal admission of wrongdoing... also to distinguish innocent individuals from culpable ones and to secure a signed written statement".
The primary purpose is obtaining a valid confession.

Explanation with Extracts = The Fraud Examiners Manual explains:
"Conducting digital forensic investigations in the cloud environment (i.e., cloud forensics) presents challenges not faced in traditional forensic practices... Some of the important challenges... Lack of frameworks and specialist tools, Lack of information accessibility, Lack of data control, Jurisdiction of storage..." .
Specifically: "With cloud computing, clients of cloud service providers do not have physical control of the media or the network on which their data resides, and this lack of data control can complicate efforts to collect data stored on the cloud" .
Thus, lack of data control is a unique challenge.

This question tests your knowledge of Domain 1.
In the context of Overview of the Legal System, specifically relating to civil, the question asks about XYZ, BEST.
The correct answer is C: Counterclaim.
This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.
References:
- CFE Exam Content Outline: Domain 1: Overview of the Legal System
- civil
- Fraud Examiners Manual, Law Section

The expenditures method is most appropriate when the subject spends illicit income on consumables that do not create lasting assets or increase net worth. Examples include travel, entertainment, food, lodging, clothing, and other lifestyle expenses. If the fraud examiner used the net-worth or asset method, those expenses might not appear as asset increases because the money has already been consumed. The expenditures method focuses on whether the subject's spending exceeds known legitimate sources of income. Option A points more toward lifestyle or net-worth concerns. Option B suggests the asset method because assets were acquired or debts were paid down. Option D is not the correct situation. Therefore, when illicit funds are spent on consumables, option C is correct.