click below
click below
Normal Size Small Size show me how
M8 - CyberSec & Priv
CYBERSECURITY AND PRIVACY / IT0204
| Question | Answer |
|---|---|
| Online recruitment for digital drug distribution highlights the convergence of traditional and cybercrime. | True |
| An employee installs pirated software on office systems, which is later exploited by ransomware. Which framework was ignored? | Intellectual property and cybersecurity safeguards |
| Hackers install spyware on mobile phones of Philippine officials. Which principle is breached? | Confidentiality and privacy of communications |
| Cyber extortion is a form of cybercrime that threatens to release sensitive data unless paid. | True |
| A ransomware attack shuts down a hospital in Quezon City. This primarily affects which dimension of cybersecurity? | Availability of critical services |
| Cross-border cooperation is not required in investigating global cybercrime cases. | False |
| Which cybercrime most directly enables online prostitution? | Cybersex |
| A digital loan app in the Philippines abuses access permissions to read SMS messages. Which law regulates this? | RA 10173 |
| Which principles should fintech companies uphold to maintain trust? | Confidentiality | Integrity | Accountability |
| Hackers manipulate fintech transaction records. Which part of the CIA triad is compromised? | Integrity |
| Which Philippine law directly addresses hacking, phishing, and related crimes? | RA 10175 |
| A denial-of-service attack against Philippine ISPs undermines system availability. | True |
| A darknet operator is arrested selling online sex services with crypto payments. Which dual issue arises? | Online prostitution and anonymous payments |
| Which crimes are associated with Philippine online prostitution rings? | Human trafficking | Cybersex | Child exploitation |
| An online prostitution syndicate is discovered operating across Manila and Davao. Which compliance gap worsens the case? | Limited cross-border cooperation in cybercrime investigation |
| The National Cybersecurity Plan 2022 was designed to improve cyber resilience in the Philippines. | True |
| A Philippine fintech firm fails to maintain logs of suspicious transactions. This undermines: | AML compliance requirements |
| Which safeguards are expected in Philippine e-wallet systems? | Encryption of personal data | Two-factor authentication | Fraud monitoring systems |
| BSP regulations on fintech companies are irrelevant to cybersecurity compliance. | False |
| A Philippine fintech platform is fined by BSP for failing to conduct risk assessments. Which requirement was violated? | Governance and compliance standards |
| A dark web market sells Philippine voters' personal data. Which two frameworks apply? | RA 10173 (Data Privacy Act) and RA 10175 (Cybercrime Prevention Act) |
| A Philippine police unit intercepts a darknet forum selling narcotics. Which law primarily applies? | RA 10175 (Cybercrime Prevention Act) |
| A dark web market in Cebu offers methamphetamine deliveries via cryptocurrency. Which risk factor is central? | Anonymity in digital drug trade |
| The COMELEC data breach demonstrated weak safeguards on government databases. | True |
| Which technologies complicate cybercrime enforcement in the Philippines? | Cryptocurrency | Dark web markets | Encrypted messaging apps |
| A Philippine fintech app mishandles biometric authentication data. This violates: | Data Privacy Act principles on sensitive personal information |
| Phishing attacks in the Philippines often succeed due to weak digital literacy among users. | True |
| A barangay resident reports being blackmailed online with private photos. Which law offers protection? | RA 9995 (Anti-Photo and Video Voyeurism Act) |
| A government website is hacked to display political propaganda. Which crime has been committed? | Website defacement and cybervandalism |
| A Filipino teenager is recruited into a drug trade via encrypted messaging apps. Which enforcement challenge arises? | Encryption hindering lawful access for investigators |
| A Philippine BPO employee is caught selling client data. Which obligations are violated? | Data Privacy Act's lawful processing and consent requirements |
| Which institution plays a critical role in fintech cybersecurity compliance in the Philippines? | BSP |
| Hackers manipulating fintech transaction records compromise data integrity. | True |
| The use of IoT devices in hotels for illegal surveillance connected to prostitution raises serious privacy risks. | True |
| A group uses IoT devices in hotels for illegal surveillance linked to cybersex operations. Which key risk arises? | Privacy invasion and exploitation |
| Cybercrime in the Philippines is unique due to strong enforcement and judicial efficiency. | False |
| A cybercriminal group launders proceeds of digital drug sales via mobile wallets. Which regulator is most involved? | Bangko Sentral ng Pilipinas (BSP) |
| Which risks arise from dark web digital drug trade? | Anonymity of transactions | Cross-border enforcement difficulty | Public health dangers |
| A fintech firm in the Philippines experiences insider fraud. Which governance element was weak? | Internal controls and risk management |
| Which factor worsens law enforcement's ability to combat cybercrime in the Philippines? | Lack of trained personnel and technical capacity |
| Which compliance failures could cause fintech firms to face penalties? | Lack of risk assessments | Failure to encrypt personal data | Ignoring AML obligations |
| Blockchain anonymity complicates law enforcement tracing illicit transactions. | True |
| An e-wallet is exploited to fund illegal online gambling. This highlights which key compliance gap? | Anti-money laundering oversight |
| Which outcomes result from repeated cybersecurity non-compliance? | Financial penalties | Loss of licenses | Reputational damage |
| The Philippines experiences a surge in "sextortion" scams targeting OFWs. Which two cybercrime offenses are most involved? | Cybersex and identity theft |
| Which issues arise when IoT devices are exploited in cybercrime? | Privacy invasion | Unauthorized surveillance | Data security vulnerabilities |
| A teenager is recruited via social media into online prostitution. Which law directly addresses this? | RA 9775 (Anti-Child Pornography Act) |
| A Philippine telco suffers from a DDoS attack, disrupting internet services. Which resilience measure is needed? | Incident response and redundancy planning |
| Online prostitution rings using overseas servers complicate Philippine law enforcement due to jurisdiction issues. | True |
| Which factors contribute to the growth of cybercrime in the Philippines? | Widespread internet use | Weak law enforcement capacity | Cross-border jurisdiction issues |
| Hackers infiltrate a Philippine bank's system to siphon funds into offshore accounts. Which key risk is highlighted? | Cybersecurity in fintech operations |
| Cybercriminals in the Philippines exploit poor awareness to spread phishing. What's the root issue? | Weak digital literacy and cyber hygiene |
| Selling counterfeit prescription drugs online through Philippine e-commerce is considered a public health cybercrime. | True |
| The commercialization of ransomware-as-a-service shows how cybercrime has evolved into a scalable business model. | True |
| A darknet vendor sells stolen Philippine ID information. Which law is violated? | RA 10173 and RA 10175 |
| A phishing campaign against students for login credentials is an example of identity theft. | True |
| An online prostitution ring uses cryptocurrencies for payment. What makes enforcement difficult? | Anonymity of crypto transactions |
| An online scammer poses as a bank officer, convincing victims to share OTP codes. This is an example of: | Social engineering and phishing |
| Which challenges weaken Philippine cybercrime investigations? | Lack of trained personnel | Limited funding | Jurisdictional conflicts |
| Which agencies enforce fintech compliance and consumer protection? | BSP |
| A Philippine cybercriminal syndicate offers ransomware-as-a-service. Which feature of cybercrime is highlighted? | Commercialization and scalability of cybercrime operations |
| A cybercrime syndicate offers "digital drugs" that exploit audio-visual stimulation. Which concern arises? | Cultural and health implications of online exploitation |
| A Philippine fintech company storing unencrypted credit card data is still compliant with PCI DSS standards. | False |
| Which principles were violated in the COMELEC breach? | Confidentiality | Integrity | Accountability |
| A government agency discovers spyware installed on its servers by unknown actors. Which category of cybercrime does this fall under? | Cyber espionage |
| Hackers demand ransom from a fintech firm threatening to release sensitive customer data. This is: | Cyber extortion |
| Offshore cryptocurrency transactions make cybersex rings harder to trace and prosecute. | True |