BUS 5114 Management Information Systems — Cybersecurity
and Information Security Bonus Quiz 2025
Course:
BUS 5114 Management Information Systems — University of the People (UoPeople)
Level:
MBA
Year:
2025/2026
Format:
Cybersecurity Bonus Quiz — 25 Q&A with Verified Answers
BUS 5114 Cybersecurity and Information Security — Bonus
Practice Quiz
25 Questions with Verified Answers | Score: 96/100
Question 1:
A hospital's IT security team discovers that patient records have been accessed by an
unauthorised third party, but the records themselves have not been altered or deleted. Which
component of the CIA triad has been violated?
A) Integrity
B) Availability
C) Confidentiality
D) Authentication
Answer: C
Explanation:
Confidentiality refers to protecting information from unauthorised disclosure. In this scenario, the
data was accessed without authorisation — meaning it was exposed to a party that should not
have seen it — which is a confidentiality breach. Integrity would be violated only if the data had
been modified, and Availability would be the concern if data became inaccessible. Authentication
is not a CIA triad component but a supporting control.
, Question 2:
A financial firm's web application database is being manipulated by attackers who insert malicious
commands into input fields on a login form, causing the database to return sensitive records. What
type of attack is this?
A) Cross-Site Scripting (XSS)
B) SQL Injection
C) Man-in-the-Middle
D) Buffer Overflow
Answer: B
Explanation:
SQL injection occurs when an attacker inserts or "injects" malicious SQL code into a query via an
input field, causing the database to execute unintended commands and potentially expose
sensitive data. XSS injects malicious scripts into web pages viewed by other users rather than
targeting the database directly. Man-in-the-middle attacks intercept communications between two
parties, and buffer overflow exploits memory allocation weaknesses — neither matches this
scenario.
Question 3:
Which type of malware replicates itself across a network without requiring any user interaction or
host file, consuming bandwidth and potentially delivering a payload?
A) Trojan Horse
B) Spyware
C) Worm
D) Virus
Answer: C
Explanation:
A worm is a self-replicating malware that spreads independently across networks without needing
to attach itself to an existing file or requiring user action to propagate. A virus requires a host file
and typically needs user interaction to spread. A Trojan disguises itself as legitimate software but
does not self-replicate. Spyware covertly collects user data without self-propagation capabilities.
and Information Security Bonus Quiz 2025
Course:
BUS 5114 Management Information Systems — University of the People (UoPeople)
Level:
MBA
Year:
2025/2026
Format:
Cybersecurity Bonus Quiz — 25 Q&A with Verified Answers
BUS 5114 Cybersecurity and Information Security — Bonus
Practice Quiz
25 Questions with Verified Answers | Score: 96/100
Question 1:
A hospital's IT security team discovers that patient records have been accessed by an
unauthorised third party, but the records themselves have not been altered or deleted. Which
component of the CIA triad has been violated?
A) Integrity
B) Availability
C) Confidentiality
D) Authentication
Answer: C
Explanation:
Confidentiality refers to protecting information from unauthorised disclosure. In this scenario, the
data was accessed without authorisation — meaning it was exposed to a party that should not
have seen it — which is a confidentiality breach. Integrity would be violated only if the data had
been modified, and Availability would be the concern if data became inaccessible. Authentication
is not a CIA triad component but a supporting control.
, Question 2:
A financial firm's web application database is being manipulated by attackers who insert malicious
commands into input fields on a login form, causing the database to return sensitive records. What
type of attack is this?
A) Cross-Site Scripting (XSS)
B) SQL Injection
C) Man-in-the-Middle
D) Buffer Overflow
Answer: B
Explanation:
SQL injection occurs when an attacker inserts or "injects" malicious SQL code into a query via an
input field, causing the database to execute unintended commands and potentially expose
sensitive data. XSS injects malicious scripts into web pages viewed by other users rather than
targeting the database directly. Man-in-the-middle attacks intercept communications between two
parties, and buffer overflow exploits memory allocation weaknesses — neither matches this
scenario.
Question 3:
Which type of malware replicates itself across a network without requiring any user interaction or
host file, consuming bandwidth and potentially delivering a payload?
A) Trojan Horse
B) Spyware
C) Worm
D) Virus
Answer: C
Explanation:
A worm is a self-replicating malware that spreads independently across networks without needing
to attach itself to an existing file or requiring user action to propagate. A virus requires a host file
and typically needs user interaction to spread. A Trojan disguises itself as legitimate software but
does not self-replicate. Spyware covertly collects user data without self-propagation capabilities.
