Cybersecurity Principles Quiz

A hospital’s system was infected by ransomware that locked patient data. Doctors could not access patient histories. Which principle of cybersecurity is MOST affected?

• Authenticity

• Confidentiality

• Integrity

• Availability

• Accountability

A government website was hacked because the admin account still used the default password “Admin123”. What type of vulnerability is this?

• Zero-day vulnerability

• Misconfiguration

• Malware injection

• Insider threat

• Social engineering

Nisa, a university staff member, accidentally clicked a phishing email link and exposed student data. This is an example of:

• Human factor vulnerability

• Denial of service

• Supply chain attack

• SQL Injection

• Buffer overflow

During a security breach at a tech company, logs showed repeated login attempts from the same IP address with different passwords. What type of attack is this?

• Phishing

• Brute-force attack

• SQL Injection

• Watering hole attack

• Ransomware

An e-commerce company, managed by Heri, applied role-based access control to ensure only finance staff can access transaction records. Which principle is applied here?

• Least privilege

• Open design

• Fail-safe default

• Defense in depth

• Accountability

A malware spread through USB drives inside a government office, infecting 500 PCs. Which delivery vector is illustrated?

• Phishing

• Social engineering

• Infected removable media

• Insider attack

• Misconfiguration

A software developer named Wahyu left detailed error messages on a public website, exposing server paths and database info. Which attack surface is enlarged?

• Human attack surface

• Software attack surface

• Network attack surface

• Supply chain surface

• Physical attack surface

In 2010, Stuxnet targeted Iranian nuclear facilities by manipulating PLCs. This is an example of:

• Insider attack

• Nation-state cyberattack

• Phishing

• Brute-force attack

• Cryptojacking

A university system ensures that only registered students can log in and access their own grades. Which principle is directly applied?

• Integrity

• Confidentiality

• Accountability

• Reliability

• Non-repudiation

An attacker compromises a supplier’s software update and injects malware into client systems. This is known as:

• Watering hole attack

• Supply chain attack

• Phishing

• Brute force

• Insider attack