Introduction to Cybercrime and Environmental Law

1. Under R.A. 10173 (Data Privacy Act), which act constitutes a violation when a law enforcement officer unlawfully discloses personal data collected during an investigation without consent or legal basis?

A) Storing data securely for future reference, without immediate use.
B) Unauthorized disclosure of sensitive personal information, breaching privacy rights and security principles.
C) Processing data for legitimate law enforcement purposes, provided safeguards are in place.
D) Unauthorized disclosure of sensitive personal information, breaching privacy rights and security principles.
E) Collecting data with proper warrants, as it aligns with public interest.

2. In R.A. 10175 (Cybercrime Prevention Act), which act constitutes a violation involving the unauthorized access to computer systems for espionage purposes?

A) Hacking into government databases to steal classified information, constituting cyber espionage.
B) Using encryption for personal data protection
C) Accessing systems with owner consent for maintenance.
D) Sharing public information online without malice.
E) Hacking into government databases to steal classified information, constituting cyber espionage.

3. Under the Philippine Fisheries Code of 1998 (R.A. 8550), which act constitutes a violation when dynamite is used to catch fish in municipal waters?

A) Reporting catch volumes to local authorities.
B) Employing destructive methods like explosives, destroying habitats and violating conservation rules.
C) Harvesting seaweed for aquaculture purposes.
D) Employing destructive methods like explosives, destroying habitats and violating conservation rules.
E) Using sustainable fishing gear like nets in designated areas.

4. In R.A. 9147 (Wildlife Act), which act constitutes a violation involving the illegal trade of endangered species like Philippine eagles?

A) Breeding protected species in captivity for conservation
B) Educating the public on wildlife preservation
C) Educating the public on wildlife preservation
D) Selling or transporting endangered wildlife without permits, threatening biodiversity.
E) Selling or transporting endangered wildlife without permits, threatening biodiversity.

5. Under R.A. 9003 (Solid Waste Management Act), which act constitutes a violation when industrial waste is dumped in open areas without segregation?

A) Educating communities on waste reduction.
B) Improper disposal of hazardous waste, polluting land and violating segregation mandates.
C) Collecting waste for composting programs.
D) Improper disposal of hazardous waste, polluting land and violating segregation mandates.
E) Recycling materials in designated facilities.

6. In R.A. 8749 (Clean Air Act), which act constitutes a violation when a factory emits pollutants exceeding emission standards without permits?

A) Installing air quality monitoring devices.
B) Reporting emissions to environmental agencies.
C) Using renewable energy sources for operations.
D) Releasing excessive pollutants into the atmosphere, violating emission limits and health standards.
E) Releasing excessive pollutants into the atmosphere, violating emission limits and health standards.

7. Under R.A. 9275 (Clean Water Act), which act constitutes a violation when untreated sewage is discharged into rivers without permits?

A) Discharging pollutants directly into waterways, breaching water quality standards.
B) Implementing watershed management plans.
C) Treating wastewater before release into bodies of water.
D) Monitoring water quality in protected areas.
E) Discharging pollutants directly into waterways, breaching water quality standards.

8. Under R.A. 10173, which act constitutes a violation when a law enforcement database is hacked, leading to unauthorized data processing?

A) Deleting outdated records securely
B) Obtaining consent for data collection
C) Unauthorized processing or alteration of personal data, compromising privacy.
D) Unauthorized processing or alteration of personal data, compromising privacy.
E) Encrypting data for security purposes.

9. In R.A. 10175, which act constitutes a violation involving the creation and distribution of child pornography online?

A) Producing or distributing child sexual abuse material, constituting a severe cybercrime.
B) Encrypting communications for privacy.
C) Using social media for lawful advocacy
D) Producing or distributing child sexual abuse material, constituting a severe cybercrime.
E) Sharing educational content on internet safety.

10. Under the Fisheries Code, which act constitutes a violation when commercial fishing occurs in marine sanctuaries without authorization?

A) Reporting illegal activities to authorities.
B) Fishing in no-take zones, destroying marine biodiversity.
C) Fishing in no-take zones, destroying marine biodiversity.
D) Conducting research in protected areas with permits.
E) Implementing community-based fisheries management.

11. In R.A. 9147, which act constitutes a violation involving the destruction of critical habitats for wildlife?

A) Monitoring wildlife populations.
B) Clearing forests for development, endangering species and violating habitat protection.
C) Establishing eco-tourism zones.
D) Clearing forests for development, endangering species and violating habitat protection.
E) Restoring degraded habitats legally.

12. Under R.A. 9003, which act constitutes a violation when open burning of waste is conducted in residential areas?

A) Burning waste openly, releasing toxins and violating anti-burning provisions.
B) Burning waste openly, releasing toxins and violating anti-burning provisions.
C) Educating on waste segregation.
D) Composting organic waste properly.
E) Segregating waste for recycling.

13. In R.A. 8749, which act constitutes a violation when vehicles operate without emission testing in urban zones?

A) Operating without valid emission compliance certificates, contributing to air pollution.
B) Operating without valid emission compliance certificates, contributing to air pollution.
C) Using public transportation to reduce emissions.
D) Reporting vehicle maintenance.
E) Retrofitting vehicles with emission controls.

14. Under R.A. 9275, which act constitutes a violation when industrial effluents are released into coastal waters without treatment?

A) Implementing pollution prevention plans.
B) Treating wastewater before release into bodies of water.
C) Discharging untreated pollutants, degrading marine ecosystems.
D) Discharging untreated pollutants, degrading marine ecosystems.
E) Monitoring effluent quality.

15. Under R.A. 10173, which act constitutes a violation when personal data is collected without informing the data subject?

A) Collecting data surreptitiously, breaching transparency principles.
B) Obtaining consent for processing.
C) Providing privacy notices as required.
D) Limiting data retention periods.
E) Collecting data surreptitiously, breaching transparency principles.

16. In R.A. 10175, which act constitutes a violation involving identity theft through online fraud?

A) Using secure authentication.
B) Stealing personal information for fraudulent purposes, constituting cybercrime.
C) Sharing public profiles online.
D) Verifying identities securely.
E) Stealing personal information for fraudulent purposes, constituting cybercrime.

17. Under the Fisheries Code, which act constitutes a violation when cyanide is used in fishing operations?

A) Applying poisons to stun fish, harming ecosystems.
B) Monitoring fish stocks.
C) Using non-toxic methods for aquaculture.
D) Applying poisons to stun fish, harming ecosystems.
E) Enforcing fishing bans.

18. In R.A. 9147, which act constitutes a violation involving poaching endangered animals for trophies?

A) Promoting anti-poaching campaigns.
B) Killing protected species illegally, threatening populations.
C) Hunting with permits in controlled areas
D) Killing protected species illegally, threatening populations.
E) Conducting wildlife censuses.

19. Under R.A. 9003, which act constitutes a violation when hazardous waste is mixed with regular municipal waste?

A) Recycling hazardous materials.
B) Reporting waste generation.
C) Storing hazardous waste separately.
D) Mixing wastes improperly, increasing pollution risks.
E) Mixing wastes improperly, increasing pollution risks.

20. In R.A. 8749, which act constitutes a violation when smoke-belching vehicles are allowed to operate unchecked?

A) Monitoring air pollution levels.
B) Enforcing emission standards.
C) Permitting excessive smoke emissions, violating air quality rules.
D) Permitting excessive smoke emissions, violating air quality rules.
E) Promoting electric vehicles

21. Under R.A. 9275, which act constitutes a violation when oil spills occur from ships without cleanup?

A) Using biodegradable oils
B) Reporting spills immediately
C) Failing to contain and remediate oil discharges, polluting water bodies
D) Failing to contain and remediate oil discharges, polluting water bodies
E) Implementing spill prevention measures

22. Under R.A. 10173, which act constitutes a violation when data is retained beyond necessary periods?

A) Excessive retention without justification, breaching minimization principles
B) Deleting data after use.
C) Excessive retention without justification, breaching minimization principles
D) Auditing data inventories.
E) Obtaining consent for retention.

23. In R.A. 10175, which act constitutes a violation involving libelous online posts?

A) Publishing defamatory content online, constituting cyber libel.
B) Using anonymous accounts legally.
C) Fact-checking information
D) Expressing opinions freely.
E) Publishing defamatory content online, constituting cyber libel.

24. Under the Fisheries Code, which act constitutes a violation when fishing beyond allowable catch limits?

A) Using selective gear
B) Exceeding limits, leading to overfishing.
C) Exceeding limits, leading to overfishing.
D) Reporting catches accurately
E) Adhering to quotas.

25. In R.A. 9147, which act constitutes a violation involving illegal logging in wildlife reserves?

A) Enforcing logging bans.
B) Cutting trees in protected areas, destroying habitats.
C) Sustainable logging with permits.
D) Reforestation efforts.
E) Cutting trees in protected areas, destroying habitats.

26. During a cybercrime investigation, an officer collects a suspect’s laptop without a warrant, citing urgency to prevent data deletion. Under the Rules on Cybercrime Warrants, which is the most proper legal justification for this action?

A) Exigent circumstances justify warrantless seizure if evidence is at risk of destruction.
B) Consent of the suspect is implied during cybercrime operations.
C) The officer’s authority under RA 10175 supersedes all other laws.
D) Warrant is unnecessary for digital evidence.
E) Exigent circumstances justify warrantless seizure if evidence is at risk of destruction.

27. Which type of warrant is specifically used to authorize the collection of computer data from an online account?

A) Warrant to Search, Seize, and Examine Computer Data (WSSECD)
B) Warrant to Intercept Computer Data (WICD)
C) Warrant to Disclose Computer Data (WDCD)
D) Warrant to Disclose Computer Data (WDCD)
E) Warrant to Examine Computer Data (WECD)

28. In the chain of custody for digital evidence, which step ensures the authenticity of the evidence during trial?

A) Electronic signature by the prosecutor
B) Use of the latest antivirus software
C) Proper labeling and sealing of the storage device
D) Presentation by the arresting officer
E) Proper labeling and sealing of the storage device

29. Which of the following best differentiates a Warrant to Intercept Computer Data (WICD) from a Warrant to Examine Computer Data (WECD)?

A) WICD Involves real-time data interception; WECD involves stored data examination.
B) WECD is issued only by the DOJ; WICD is issued by courts.
C) WICD applies to physical devices; WECD applies to social media accounts
D) Both are identical under RA 10175.
E) WICD Involves real-time data interception; WECD involves stored data examination.

30. A police cyber investigator copies the contents of a USB drive using personal software. The hash value changes after copying. What is the most likely procedural error?

A) Failure to decrypt the files
B) Improper use of forensic imaging tools
C) Improper use of forensic imaging tools
D) Absence of a search warrant
E) Lack of data backup

31. Which rule primarily governs the admissibility of digital evidence in Philippine courts?

A) Rule on Electronic Evidence (A.M. No. 01-7-01-SC)
B) Rule on Cybercrime Warrants (A.M. No. 17-11-03-SC)
C) Evidence Act of 1989
D) Rule on Electronic Evidence (A.M. No. 01-7-01-SC)
E) Rule 115, Rules of Criminal Procedure

32. Which best describes the scope of the Warrant to Search, Seize, and Examine Computer Data (WSSECD)?

A) Limited only to physical seizure of hardware.
B) Combines the authority to search, seize, and examine physical and digital evidence.
C) Combines the authority to search, seize, and examine physical and digital evidence.
D) Applies only to social media posts.
E) Used exclusively for interception of live chats.

33. A cybercrime warrant was issued for a desktop computer but law enforcers also seized a tablet found near it. Which principle determines if such seizure is valid?

A) Plain view doctrine
B) Adverse inference rule
C) Exclusionary rule
D) Plain view doctrine
E) Fruit of the poisonous tree

34. In the digital chain of custody, the first person to receive and mark the evidence is known as the:

A) First responder
B) Evidence originator
C) Evidence custodian
D) Evidence analyst
E) First responder

35. When a court determines authenticity of digital evidence, it mainly requires proof of:

A) The volume of data stored
B) The reliability of the data source and integrity of the process used
C) The encryption software used
D) The number of digital copies produced
E) The reliability of the data source and integrity of the process used

36. If an officer seizes a smartphone without isolating it from the network, what risk is most likely to compromise the investigation?

A) Remote wiping or alteration of data
B) Device encryption failure
C) Increase in battery temperature
D) Delay in data extraction
E) Remote wiping or alteration of data

37. The hash value in digital forensics functions primarily to:

A) Verify that data has not been altered
B) Encrypt the data for security
C) Verify that data has not been altered
D) Compress the file for storage
E) Translate binary codes to text

38. Which statement about incident response is most accurate?

A) It involves detection, containment, eradication, and recovery.
B) It involves detection, containment, eradication, and recovery.
C) It starts only after evidence collection.
D) It excludes coordination with service providers.
E) It is optional if a warrant has been issued.

39. When law enforcement requests user data from an ISP, which warrant is required?

A) WICD
B) WECD
C) WDCD
D) WSSECD
E) WDCD

40. An officer extracts only partial logs from a computer due to limited time. During trial, the defense argues incompleteness. What principle governs admissibility here?

A) Res gestae rule
B) Plain view rule
C) Best evidence rule
D) Chain of custody rule
E) Best evidence rule

41. The primary goal of incident response in cybercrime is to:

A) Immediately prosecute the offender.
B) Contain the incident while preserving evidence integrity.
C) Delete malicious data.
D) Disconnect all systems permanently.
E) Contain the incident while preserving evidence integrity.

42. A law enforcement agent fails to record the serial number of a seized device. What is compromised?

A) Jurisdiction of the court
B) Admissibility under RA 10175
C) Chain of custody documentation
D) Authority of the warrant
E) Chain of custody documentation

43. When must a Warrant to Intercept Computer Data be executed after issuance?

A) Within ten (10) days from issuance, unless extended by the court
B) Within one (1) year
C) Within ten (10) days from issuance, unless extended by the court
D) Within twenty (20) days
E) Immediately and without limit

44. Under the Rule on Electronic Evidence, how may the authenticity of an electronic document be proven?

A) By digital signature or other security procedures proving identity.
B) By oral testimony of a witness alone.
C) By digital signature or other security procedures proving identity.
D) By certification from the ISP.
E) By submission of printed copies.

45. Which among the following is NOT a valid type of Cybercrime Warrant under A.M. No. 17-11-03-SC?

A) Warrant to Delete Computer Data
B) Warrant to Delete Computer Data
C) Warrant to Disclose Computer Data
D) Warrant to Intercept Computer Data
E) Warrant to Block Access

46. What procedural safeguard must be followed when presenting digital evidence in court?

A) Inclusion of suspect’s consent form.
B) Maintenance of chain of custody with documentation and signatures.
C) Submission of encrypted files only.
D) Certification by a foreign expert.
E) Maintenance of chain of custody with documentation and signatures.

47. A seized laptop was analyzed without a forensic image. What is the evidentiary consequence?

A) Automatically admissible if signed by investigator.
B) No consequence if warrant exists.
C) Accepted as secondary evidence.
D) Potential inadmissibility due to alteration risk.
E) Potential inadmissibility due to alteration risk.

48. Which situation demonstrates improper execution of a cybercrime warrant?

A) Accessing unrelated folders outside the warrant’s scope.
B) Accessing unrelated folders outside the warrant’s scope.
C) Hashing all collected data.
D) Seizing a USB found in plain view.
E) Submitting the report within ten days.

49. Digital evidence presented in court must satisfy which three criteria for admissibility?

A) Consent, jurisdiction, and value
B) Relevance, authenticity, and integrity
C) Relevance, authenticity, and integrity
D) Quantity, quality, and accessibility
E) Reliability, importance, and format

50. If the evidence was obtained through an invalid cybercrime warrant, which doctrine applies to exclude it?

A) Exclusionary clause exception
B) De minimis rule
C) Fruit of the poisonous tree doctrine
D) Fruit of the poisonous tree doctrine
E) Plain view doctrine

51. Under the Philippine Fisheries Code of 1998, when filing a case for illegal fishing, the law enforcement officer must first conduct a preliminary investigation. Analyze the procedural step of gathering evidence during this phase and evaluate its importance in ensuring a successful prosecution. Which of the following best describes the officer's obligation to document chain of custody for seized fishing gear?

A) The officer must establish a complete chain of custody to prevent tampering, ensuring evidentiary integrity.
B) The officer must photograph and label the gear but not seal it.
C) Documentation is only required if the suspect confesses
D) The officer must establish a complete chain of custody to prevent tampering, ensuring evidentiary integrity.
E) Documentation is optional if the gear is perishable.

52. Evaluate the procedure for filing a complaint under the Fisheries Code when a violation involves dynamite fishing. If the officer determines probable cause after inspection, what is the next evaluative step in deciding whether to proceed to court, and why is this step essential for resource protection?

A) Dismiss the case if the violator offers compensation.
B) Transfer the case to a non-governmental organization.
C) Assess environmental impact to prioritize cases affecting marine ecosystems.
D) Immediately arrest the violator without further evaluation
E) Assess environmental impact to prioritize cases affecting marine ecosystems.

53. In filing cases under the Fisheries Code for unauthorized aquaculture, explain the role of coordination with the Bureau of Fisheries and Aquatic Resources (BFAR) during the investigation phase. Evaluate how this coordination enhances procedural effectiveness in multi-agency enforcement.

A) Coordination only involves sharing suspect information.
B) BFAR provides technical expertise, improving evidence accuracy and case strength.
C) BFAR provides technical expertise, improving evidence accuracy and case strength.
D) Coordination is unnecessary as local officers handle all aspects.
E) It delays the process by requiring additional approvals.

54. Analyze the procedure for seizing fish catch in violation of size limits under the Fisheries Code. Evaluate the officer's discretion in deciding whether to destroy perishable evidence versus preserving it, and explain the legal implications of this choice.

A) Destruction is always mandatory to avoid spoilage.
B) Preservation is preferred, but destruction is allowed with documentation to maintain chain of custody.
C) The officer has no discretion; all evidence must be preserved
D) Preservation is preferred, but destruction is allowed with documentation to maintain chain of custody.
E) Destruction requires court approval first.

55. Evaluate the timeline for filing a case after detecting a Fisheries Code violation, such as illegal trawling. Explain why adhering to a 48-hour rule for preliminary reports strengthens the procedure's integrity and outcomes.

A) It allows indefinite delays for complex cases.
B) It ensures timely evidence collection, preventing loss and upholding accountability.
C) The rule is flexible and not strictly enforced.
D) It ensures timely evidence collection, preventing loss and upholding accountability.
E) The rule applies only to minor violations.

56. In filing environmental cases under the Fisheries Code for coral reef destruction, analyze the requirement for environmental impact assessment during investigation. Evaluate its contribution to the overall procedure's robustness in proving culpability.

A) It is only for civil, not criminal, cases.
B) Assessment is optional and not required for filing.
C) Assessment delays filing unnecessarily.
D) It provides scientific basis, enhancing evidential weight and judicial outcomes.
E) It provides scientific basis, enhancing evidential weight and judicial outcomes.

57. Explain the procedure for involving barangay officials in Fisheries Code violations like poaching. Evaluate the effectiveness of this participatory approach in community-based enforcement and its impact on case resolution.

A) Barangay involvement is mandatory for all cases.
B) It facilitates local cooperation, improving detection and resolution rates.
C) Officials only witness arrests.
D) It facilitates local cooperation, improving detection and resolution rates.
E) It complicates procedures without benefits.

58. Analyze the procedural requirement for issuing a notice of violation under the Fisheries Code before formal filing. Evaluate its role in promoting compliance versus punitive action, and explain potential drawbacks in enforcement.

A) Notice is issued only after arrest.
B) It allows violators to correct behavior, balancing deterrence with rehabilitation.
C) It allows violators to correct behavior, balancing deterrence with rehabilitation.
D) Notice delays prosecution indefinitely
E) It is mandatory for all violations without exceptions.

59. Evaluate the procedure for consolidating multiple Fisheries Code violations in a single case, such as combined illegal fishing and habitat destruction. Explain how this consolidation affects evidentiary analysis and judicial efficiency.

A) Consolidation is prohibited to avoid complexity
B) Consolidation only applies to civil penalties.
C) It streamlines evidence presentation, reducing court time and strengthening linkages.
D) It requires separate filings for each violation.
E) It streamlines evidence presentation, reducing court time and strengthening linkages.

60. In the context of the Fisheries Code, analyze the post-filing procedure for monitoring compliance after a case is filed. Evaluate its importance in preventing recidivism and ensuring long-term environmental protection.

A) Monitoring is optional and not enforced.
B) It is handled solely by the court.
C) Monitoring occurs only during trial.
D) It involves follow-up inspections, deterring future violations through accountability.
E) It involves follow-up inspections, deterring future violations through accountability.

61. Under R.A. 9147, analyze the initial step in filing a case for illegal wildlife trade, involving seizure of endangered species. Evaluate the officer's duty to consult with the Department of Environment and Natural Resources (DENR) and its impact on procedural accuracy.

A) DENR expertise ensures proper identification, enhancing case validity.
B) DENR expertise ensures proper identification, enhancing case validity.
C) Consultation is optional for routine seizures.
D) Consultation only involves paperwork.
E) It requires approval before any action.

62. Evaluate the procedure for documenting wildlife confiscation under the Wildlife Act. Explain how photographic and video evidence strengthens admissibility and evaluates the procedure's role in combating poaching networks.

A) It is unnecessary if the animal is alive.
B) Visual evidence provides irrefutable proof, aiding in network disruption.
C) Documentation is limited to written reports
D) Visual evidence provides irrefutable proof, aiding in network disruption.
E) Documentation delays seizure.

63. Analyze the coordination with Protected Area Management Boards (PAMBs) in filing Wildlife Act cases for habitat encroachment. Evaluate this step's effectiveness in integrating local governance and its implications for case outcomes.

A) PAMBs only approve permits.
B) PAMBs have no role in enforcement.
C) It complicates jurisdiction.
D) Coordination leverages local knowledge, improving detection and resolution
E) Coordination leverages local knowledge, improving detection and resolution.

64. Evaluate the timeline for filing a complaint after wildlife seizure under R.A. 9147. Explain the rationale for a 72-hour filing rule and its evaluation in maintaining evidence integrity.

A) It prevents evidence degradation, ensuring timely prosecution.
B) Filing can be delayed indefinitely
C) It prevents evidence degradation, ensuring timely prosecution.
D) It applies only to dead specimens.
E) The rule is discretionary.

65. In filing cases for illegal possession of wildlife products, analyze the requirement for forensic analysis. Evaluate its contribution to proving intent and the procedure's overall robustness.

A) It establishes origin and illegality, strengthening culpability.
B) It only identifies species.
C) Analysis requires court order first.
D) It establishes origin and illegality, strengthening culpability.
E) Analysis is optional for common species

66. Explain the procedure for involving NGOs in Wildlife Act enforcement. Evaluate the benefits and potential conflicts in this participatory approach for filing cases.

A) Involvement is mandatory.
B) They provide resources, enhancing capacity but risking bias.
C) NGOs only handle rehabilitation.
D) They provide resources, enhancing capacity but risking bias.
E) NGOs are excluded from procedures.

67. Analyze the post-seizure procedure for wildlife rehabilitation under R.A. 9147. Evaluate its integration into case filing and impact on judicial outcomes.

A) Rehabilitation is not required.
B) Rehabilitation is separate from filing.
C) It ensures animal welfare, potentially influencing plea deals.
D) It delays prosecution.
E) It ensures animal welfare, potentially influencing plea deals.

68. Evaluate the procedure for assessing penalties in Wildlife Act cases. Explain how environmental impact evaluation influences filing decisions and promotes deterrence.

A) Penalties are fixed.
B) It only considers economic loss
C) Impact assessment tailors penalties, deterring severe violations.
D) Assessment is post-trial
E) Impact assessment tailors penalties, deterring severe violations.

69. Analyze the role of chain of custody in Wildlife Act seizures. Evaluate its necessity in preventing tampering and ensuring procedural integrity.

A) Strict documentation maintains evidence reliability
B) It applies only to live animals
C) Custody is court-managed
D) Strict documentation maintains evidence reliability
E) Custody is informal

70. Evaluate the procedure for filing joint cases with other agencies under R.A. 9147. Explain its effectiveness in addressing cross-border wildlife trafficking

A) It pools resources, improving transnational enforcement
B) It complicates jurisdiction
C) Joint filing is prohibited
D) It pools resources, improving transnational enforcement
E) Joint cases are rare

71. Under R.A. 9003, analyze the procedure for inspecting illegal dumpsites. Evaluate the officer's use of sampling in evidence gathering and its role in proving violations.

A) It only identifies waste types
B) Sampling is unnecessary
C) Sampling requires lab approval
D) It provides representative evidence, strengthening cases
E) It provides representative evidence, strengthening cases

72. Evaluate the filing procedure for non-compliance with waste segregation under the Act. Explain the notice-to-comply step and its evaluative impact on voluntary correction.

A) It promotes compliance, reducing litigation
B) It is mandatory for all cases.
C) Notice is punitive
D) It promotes compliance, reducing litigation
E) Notice is issued post-arrest

73. Analyze coordination with local government units (LGUs) in filing Solid Waste Act cases. Evaluate its effectiveness in decentralized enforcement

A) LGUs only issue permits.
B) Coordination ensures local implementation, improving outcomes
C) LGUs have no role
D) It creates overlaps
E) Coordination ensures local implementation, improving outcomes

74. Evaluate the timeline for reporting violations under R.A. 9003. Explain the 24-hour rule's rationale and its evaluation in evidence preservation

A) It ensures prompt action, maintaining integrity
B) It applies to minor issues only
C) The rule is flexible
D) It ensures prompt action, maintaining integrity
E) Reporting can be delayed

75. Analyze the procedure for seizing hazardous waste. Evaluate documentation requirements and their impact on admissibility.

A) Documentation is minimal
B) Detailed records ensure evidentiary strength
C) Documentation is post-seizure
D) Detailed records ensure evidentiary strength
E) Seizure requires court order

76. Explain the role of environmental monitoring in filing cases. Evaluate its contribution to ongoing compliance under the Act.

A) It is court-ordered
B) It detects violations early, aiding prevention
C) Monitoring delays filing.
D) Monitoring is optional
E) It detects violations early, aiding prevention

77. Evaluate the procedure for involving waste generators in corrective actions. Explain its evaluative role in case resolution.

A) Generators only pay fines
B) Generators are not involved
C) Involvement encourages responsibility, resolving issues
D) It complicates procedures
E) Involvement encourages responsibility, resolving issues

78. Analyze chain of custody for waste samples. Evaluate its necessity in forensic analysis and procedural integrity

A) Strict tracking prevents contamination
B) Strict tracking prevents contamination
C) Custody is lab-managed
D) It applies to non-hazardous waste only
E) Custody is informal

79. Evaluate the filing of cases for illegal waste transport. Explain the inspection protocol and its impact on proving intent

A) Inspections require permits
B) Protocol establishes violations, strengthening cases
C) Inspections are random
D) They delay transport
E) Protocol establishes violations, strengthening cases

80. Analyze post-filing monitoring under R.A. 9003. Evaluate its role in preventing recidivism and long-term waste management

A) It ensures sustained compliance
B) Monitoring occurs during trial
C) It ensures sustained compliance
D) Monitoring is not required
E) It is handled by courts

81. During a cybercrime investigation, an officer collects a suspect’s laptop without a warrant, citing urgency to prevent data deletion. Under the Rules on Cybercrime Warrants, which is the most proper legal justification for this action?

A) Consent of the suspect is implied during cybercrime operations
B) The officer’s authority under RA 10175 supersedes all other laws
C) Warrant is unnecessary for digital evidence
D) Exigent circumstances justify warrantless seizure if evidence is at risk of destruction
E) Exigent circumstances justify warrantless seizure if evidence is at risk of destruction

82. Which type of warrant is specifically used to authorize the collection of computer data from an online account?

A) Warrant to Examine Computer Data (WECD)
B) Warrant to Search, Seize, and Examine Computer Data (WSSECD)
C) Warrant to Disclose Computer Data (WDCD)
D) Warrant to Intercept Computer Data (WICD)
E) Warrant to Disclose Computer Data (WDCD)

83. In the chain of custody for digital evidence, which step ensures the authenticity of the evidence during trial?

A) Proper labeling and sealing of the storage device
B) Electronic signature by the prosecutor
C) Use of the latest antivirus software
D) Proper labeling and sealing of the storage device
E) Presentation by the arresting officer

84. Which of the following best differentiates a Warrant to Intercept Computer Data (WICD) from a Warrant to Examine Computer Data (WECD)?

A) WICD applies to physical devices; WECD applies to social media accounts
B) WECD is issued only by the DOJ; WICD is issued by courts
C) WICD involves real-time data interception; WECD involves stored data examination.
D) Both are identical under RA 10175
E) WICD involves real-time data interception; WECD involves stored data examination.

85. A police cyber investigator copies the contents of a USB drive using personal software. The hash value changes after copying. What is the most likely procedural error?

A) Absence of a search warrant
B) Lack of data backup
C) Improper use of forensic imaging tools
D) Failure to decrypt the files
E) Improper use of forensic imaging tools

86. Which rule primarily governs the admissibility of digital evidence in Philippine courts?

A) Rule on Cybercrime Warrants (A.M. No. 17-11-03-SC)
B) Rule on Electronic Evidence (A.M. No. 01-7-01-SC)
C) Evidence Act of 1989
D) Rule 115, Rules of Criminal Procedure
E) Rule on Electronic Evidence (A.M. No. 01-7-01-SC)

87. Which best describes the scope of the Warrant to Search, Seize, and Examine Computer Data (WSSECD)?

A) Applies only to social media posts
B) Combines the authority to search, seize, and examine physical and digital evidence.
C) Combines the authority to search, seize, and examine physical and digital evidence.
D) Limited only to physical seizure of hardware
E) Used exclusively for interception of live chats

88. A cybercrime warrant was issued for a desktop computer but law enforcers also seized a tablet found near it. Which principle determines if such seizure is valid?

A) Adverse inference rule
B) Exclusionary rule
C) Plain view doctrine
D) Plain view doctrine
E) Fruit of the poisonous tree

89. In the digital chain of custody, the first person to receive and mark the evidence is known as the:

A) Evidence originator
B) Evidence custodian
C) First responder
D) Evidence analyst
E) First responder

90. When a court determines authenticity of digital evidence, it mainly requires proof of:

A) The reliability of the data source and integrity of the process used
B) The volume of data stored
C) The number of digital copies produced
D) The reliability of the data source and integrity of the process used
E) The encryption software used

91. If an officer seizes a smartphone without isolating it from the network, what risk is most likely to compromise the investigation?

A) Device encryption failure
B) Remote wiping or alteration of data
C) Increase in battery temperature
D) Delay in data extraction
E) Remote wiping or alteration of data

92. The hash value in digital forensics functions primarily to:

A) Encrypt the data for security
B) Compress the file for storage
C) Translate binary codes to text
D) Verify that data has not been altered
E) Verify that data has not been altered

93. Which statement about incident response is most accurate?

A) It excludes coordination with service providers
B) It involves detection, containment, eradication, and recovery
C) It involves detection, containment, eradication, and recovery
D) It starts only after evidence collection
E) It is optional if a warrant has been issued

94. When law enforcement requests user data from an ISP, which warrant is required?

A) WDCD
B) WSSECD
C) WECD
D) WICD
E) WDCD

95. An officer extracts only partial logs from a computer due to limited time. During trial, the defense argues incompleteness. What principle governs admissibility here?

A) Plain view rule
B) Best evidence rule
C) Chain of custody rule
D) Best evidence rule
E) Res gestae rule

96. The primary goal of incident response in cybercrime is to:

A) Delete malicious data
B) Disconnect all systems permanently
C) Contain the incident while preserving evidence integrity.
D) Immediately prosecute the offender
E) Contain the incident while preserving evidence integrity.

97. A law enforcement agent fails to record the serial number of a seized device. What is compromised?

A) Authority of the warrant
B) Chain of custody documentation
C) Admissibility under RA 10175
D) Chain of custody documentation
E) Jurisdiction of the court

98. When must a Warrant to Intercept Computer Data be executed after issuance?

A) Within twenty (20) days
B) Within one (1) year
C) Within ten (10) days from issuance, unless extended by the court
D) Immediately and without limit
E) Within ten (10) days from issuance, unless extended by the court

99. Under the Rule on Electronic Evidence, how may the authenticity of an electronic document be proven?

A) By digital signature or other security procedures proving identity
B) By oral testimony of a witness alone
C) By certification from the ISP
D) By submission of printed copies
E) By digital signature or other security procedures proving identity

100. Which among the following is NOT a valid type of Cybercrime Warrant under A.M. No. 17-11-03-SC?

A) Warrant to Disclose Computer Data
B) Warrant to Block Access
C) Warrant to Delete Computer Data
D) Warrant to Intercept Computer Data
E) Warrant to Delete Computer Data

Created with That Quiz — where test making and test taking are made easy for math and other subject areas.