Case Scenario

Martin Uzoma

Instructor

  • 0
  • 203
  • 84

🔐 CYBERSECURITY CASE SCENARIO

THE MYSTERY OF THE SCHOOL'S STOLEN EXAM RESULTS

🏫 Scenario: Greenfield Secondary School

Greenfield Secondary School has about 1,200 students. The school recently introduced an online Student Management System where teachers enter students' scores, attendance records, and examination results.

Only teachers and authorized school administrators are supposed to access examination results.

One Monday morning, something strange happens.

The Vice Principal receives a message from a parent:

“Good morning sir. I checked my daughter's result yesterday and she had 72% in Mathematics. This morning, the result is showing 92%. Please can you confirm what happened?”

The Vice Principal checks the system.

The student's Mathematics score really has changed from 72% to 92%.

But that isn't the only problem.

When the examination officer checks the system, they discover that 23 other students' results have also been changed.

Some scores increased.

Some scores decreased.

Nobody knows who changed them.


🚨 THE INVESTIGATION BEGINS

The school calls the ICT teacher.

The ICT teacher checks the computer used by the examination officer.

Nothing looks unusual.

The computer has antivirus software.

There are no strange applications.

The examination officer insists:

“Nobody used my computer. I locked the computer before leaving yesterday.”

The ICT teacher then checks the school's system logs.

He discovers something interesting.

At 11:47 PM, someone logged into the examination system using the examination officer's account.

The school is confused.

The examination officer was already at home.


🔎 CLUE 1 — THE PASSWORD

The ICT teacher asks the examination officer:

“Who knows your password?”

She replies:

“Nobody. It's private.”

But when asked what kind of password she uses, she says:

“It's easy to remember. It's my name and the year I started working here.”

The ICT teacher realizes that the password might not be very difficult to guess.


🔎 CLUE 2 — THE SCHOOL'S COMPUTER LAB

The ICT teacher checks the computer lab.

He discovers that one of the computers was left logged into the school's Wi-Fi network overnight.

The browsing history shows that someone visited the school's login page at 11:35 PM.

But the history doesn't show exactly who used the computer.


🔎 CLUE 3 — A STUDENT'S MESSAGE

The next day, a student sends a message to the ICT teacher:

“Sir, I think I know something about the results.”

The student explains that a classmate had been telling other students:

“Don't worry about your Mathematics result. I know how to change it.”

Now the school has a much bigger problem.


🧠 YOUR MISSION

You are the school's Junior Cybersecurity Investigation Team.

Your job is not to immediately accuse anyone.

Your job is to investigate what happened.

Discuss the following questions.

Question 1

What do you think happened?

Was it:

  • A weak password?
  • Someone stealing the password?
  • Someone using an unlocked computer?
  • Malware?
  • Phishing?
  • An insider?
  • Something else?

Question 2

What should the school do FIRST?

A. Delete the student's account
B. Change everyone's passwords immediately
C. Investigate the evidence
D. Shut down every computer in the school
E. Accuse the student who mentioned changing results

Choose your answer and explain WHY.


Question 3 — Think Like a Hacker 🕵️

Imagine you wanted to gain access to the examination officer's account.

What weaknesses might you look for?

Think about:

  • Passwords
  • Computers
  • Wi-Fi
  • Emails
  • Social media
  • USB drives
  • People
  • Physical access

Important: You are only identifying possible weaknesses. Do not attempt to access anyone's account.


🔐 QUESTION 4 — THE CIA TRIAD

Cybersecurity professionals often talk about three important goals:

C — Confidentiality

Only authorized people should see information.

I — Integrity

Information should not be changed without authorization.

A — Availability

Authorized people should be able to access the system when they need it.

Your challenge:

Which part of the CIA Triad was clearly attacked when students' examination scores were changed?

Answer: __________

And explain why.


🚨 QUESTION 5 — HOW COULD THE SCHOOL HAVE PREVENTED THIS?

Your team has been asked to design 5 security rules for Greenfield Secondary School.

For example:

Rule 1: Students must never share their passwords.

Now create Rules 2–5.

Think about:

  • Strong passwords
  • Two-factor authentication
  • Locking computers
  • Software updates
  • Backups
  • Phishing awareness
  • Wi-Fi security
  • Reporting suspicious activity

🧩 FINAL TWIST

Just when the investigation appears to be finished, the ICT teacher discovers something else.

The login at 11:47 PM did NOT come from the school computer lab.

It came from an unknown device connected to the school's Wi-Fi network.

And the examination officer's password was used successfully.

But there is one more clue.

Earlier that week, the examination officer received an email saying:

“Your school account will be disabled in 24 hours. Click here to verify your account.”

She clicked the link and entered her username and password.

😱


🎯 FINAL QUESTION

What do you think happened?

Can you connect all the clues?

Your investigation should answer:

  1. How did the attacker obtain the password?
  2. How did they access the school system?
  3. Why were examination results changed?
  4. What security weaknesses existed?
  5. What could the school have done to prevent the attack?
  6. What should the school do now?

👨🏽‍💻 BONUS CHALLENGE

Imagine you are the Chief Cybersecurity Officer of Greenfield Secondary School.

You have ₦500,000 to improve the school's cybersecurity.

You can spend the money on things such as:

  • Cybersecurity training
  • Better Wi-Fi security
  • Backup systems
  • Antivirus/endpoint protection
  • Two-factor authentication
  • Stronger passwords
  • Security monitoring
  • Computer upgrades

You cannot buy everything.

How would you spend the ₦500,000?

Prepare a short presentation explaining:

“Our school was attacked because ________. We will prevent it from happening again by ________.”


🏆 CLASS ACTIVITY: "WHO IS RESPONSIBLE?"

Divide the students into 4 teams:

Team 1 — Investigators 🔎
Find the likely cause of the incident.

Team 2 — Defenders 🛡️
Explain how the school could have prevented it.

Team 3 — Attack Analysis 🧠
Explain how the attacker may have obtained access, without actually performing an attack.

Team 4 — School Management 👔
Decide what the school should do after discovering the incident.

Give each team 15–20 minutes.

Then let each team present its findings.

Final lesson for the students:

“Cybersecurity is not just about computers. It is about protecting people, information, systems and trust.”

And one important rule they should remember:

🔐 Never test your cybersecurity skills on a real person's account, device, school system, or network without permission.

  • 8 Oct, 2026
Replies (84)
Saint Marley

Student

  • 31
  • 3

Question 1

A weak password

  • 8 Oct, 2026
Daniel ekpo

Student

  • 7

Intergrity

  • 8 Oct, 2026
Daniel ekpo

Student

  • 7

Wifi security

  • 8 Oct, 2026
Daniel ekpo

Student

  • 7

Why was examination result changed

  • 8 Oct, 2026
Saint Marley

Student

  • 31
  • 3

Change everyone's password immediately

  • 8 Oct, 2026
Saint Marley

Student

  • 31

Question2

  • 8 Oct, 2026
Daniel ekpo

Student

  • 7

Question 2  investigate the evidence

  • 8 Oct, 2026
Daniel ekpo

Student

  • 7

Passwords

  • 8 Oct, 2026
Saint Marley

Student

  • 31
  • 0

Question3


Password

  • 8 Oct, 2026
Saint Marley

Student

  • 31
  • 0

Question4


The availability triad:Because he must have secretly caught a teacher unlocking the system then he used a system that the school wont track so fast                                                                                                                                                                                                                                                                     

  • 8 Oct, 2026
Daniel ekpo

Student

  • 7
  • 0

Question 1 ;A weak password

  • 8 Oct, 2026
Duke Ukang

Student

  • 3
  • 0

p

  • 8 Oct, 2026
Saint Marley

Student

  • 31
  • 0

Question5


(ii) Suggest strong password

(iii)Do a double authentication

(iv)Create enough backups so that if one fails 

(v)Know how to do about with your wifi passwords

  • 8 Oct, 2026
Kanex Muskie

Student

  • 4
  • 0

QUESTION 1: It was a weak password.

QUESTION 2: Investigate the evidence, why, because the parent of the student was shock and even school ICT officer himself was Bewildered.

QUESTION 3: The password.


  • 8 Oct, 2026
WISDOM EDET

Student

  • 11
  • 0

QUESTION :1 it was a weak password

QUESTION 2: Investigate the evidence why because the student and the vice principle were shock and the ICT director was confuse 

QUESTION 3 the password

  • 8 Oct, 2026
JOSHUA AKAN

Student

  • 8
  • 0

1. A WEAK PASSWORD

2.B

3.password

  • 8 Oct, 2026
michael akaiso

Student

  • 18
  • 1

Question 1:Weak password

Question 2:Investigate the evidence, so the will find out who is really behind the act

Question 3:passwords

Question 4:I: Integrity, because the information was changed due to the access he gained from hacking the password

Question 5: Strong passwords,  software updates, wi-fi security,  reporting suspicious activity 


Bonus Challenge: cybersecurity training, better wi-fi security, backup systems, anti-virus endpoint protection, computer upgrades.....


  • 8 Oct, 2026
michael akaiso

Student

  • 18

more answers are still coming....

  • 8 Oct, 2026
GOODLUCK ETIM

Student

  • 41
  • 0

1. A weak password

2. B and C

3. password

4. A- Availability

5. Backup

  • 8 Oct, 2026
JOSHUA AKAN

Student

  • 8
  • 0

5.Avaliability

6.strong password

  • 8 Oct, 2026
Divine Akaiso

Student

  • 23
  • 0

QUESTION ONE: A weak password.

QUESTION TWO: D: Shut down every computer in the school.

WHY? Because if the system remains on, the hacker can cause further damage to other students results.

QUESTION THREE: Passwords.

QUESTION FOUR: I- INTEGRITY. Information should not be changed without authorization. The students information, that is their results, were changed without the formal authorization of the examination officer.

QUESTION FIVE: 1) Use strong passwords. 2) think before you click 3) update your device 4) back up your data

QUESTION SIX: The hacker used phishing to get the officer's password. Then ,he used the password to access the school system to change the mathematics result for the students. password . RULE TWO: THINK BEFORE YOU CLICK. Cancel the result and make the affected students retake the exam. Then, change the officer's password to a more unpredictable or difficult one.


  • 8 Oct, 2026
JOSHUA AKAN

Student

  • 8
  • 0

more are coming later thank u for understanding 

  • 8 Oct, 2026
GOODLUCK ETIM

Student

  • 41
  • 0

Please sir more will be uploaded next time. Thank you

  • 8 Oct, 2026
AGNES ANWANA

Student

  • 4
  • 0

QUESTION 1:it was a weak password

QUESTION 2:investigate the evidence why, because the student and the vice principal were shock and the ICT director was confused.

QUESTION 3:password

sir please i will continue from here later

  • 8 Oct, 2026
Divine Akaiso

Student

  • 23
  • 0

more incoming

  • 8 Oct, 2026
Believe sunday

Student

  • 12
  • 0

Question 1: A weak password

Question 2: shut down everybody computer, so that the person might not have access to it again.

Question 3: Password.

Question 4: Integrity, because the information should not be changed without authorization.

Question 5a: Use strong password: the password should not be a name but , number, alphanumeric, alphabet.

Question 5b: The password should be recorded in a safe and personal computer and should not be a simple passkey

Question 6: The school should stop all unauthorize link of password by using only local network.



                                                                                                                     

  • 8 Oct, 2026
Emmanuel Nnasia

Student

  • 7
  • 0

more are coming latter thank you. 

  • 8 Oct, 2026
LILY MOSES

Student

  • 7
  • 0

1. A WEAK PASSWORD

2.INVESTIGATE THE EVIDENCE, SO AS TO FIND OUT ACTUALLY WHAT THE STUDENT IS SAYING

3.PASSWORD

4. INTEGRITY

5. BACK UP YOUR DATA, SECURING NETWORK CONNECTION, UPDATING SOFTWARE REGULARLY


MORE COMING..........

  • 8 Oct, 2026
Saint Marley

Student

  • 31
  • 1

1. The person forced the teacher and she put in her details that is how the person hacked the acoount

2. The person may be part of  the school






  • 8 Oct, 2026
Saint Marley

Student

  • 31

Sir pls in our next class we can continue


byebye sir



  • 8 Oct, 2026
Kanex Muskie

Student

  • 4
  • 0

GOOD DAY SIR, PLEASE SIR. I WILL CONTINUE HERE TOMORROW.. 

THANK YOU SIR.

  • 8 Oct, 2026
Duke Ukang

Student

  • 3
  • 0

I suggest to put storng password

  • 8 Oct, 2026
Daniel ekpo

Student

  • 7
  • 0

sir please more result are coming           thank you sir

  • 8 Oct, 2026
Martin Agoha

Instructor

  • 53
  • 3

Good afternoon everyone


  • 13 Oct, 2026
Emmanuel Nnasia

Student

  • 7

good afternoon  sir

  • 13 Oct, 2026
Divine Akaiso

Student

  • 23

I am currently on second course.

  • 13 Oct, 2026
LILY MOSES

Student

  • 7

GOOD AFTERNOON SIR

  • 13 Oct, 2026
Martin Agoha

Instructor

  • 53
  • 5

Excellent work, everyone! 👏👏

I sincerely commend you all for your exceptional answers, thoughtful comments, and impressive contributions to the cybersecurity case scenario. Your responses demonstrate critical thinking, creativity, and a growing understanding of cybersecurity principles.

Keep asking questions, sharing ideas, and challenging yourselves to think like real cybersecurity professionals. I’m proud of your efforts, and I encourage you all to keep up the excellent work! 🔐💻


Let me hear from you guys today.


  • 13 Oct, 2026
Emmanuel Nnasia

Student

  • 7

thank you sir 

  • 13 Oct, 2026
Divine Akaiso

Student

  • 23

Good afternoon, sir


  • 13 Oct, 2026
solomon NDUONYI

Student

  • 4

good afternoon sir

  • 13 Oct, 2026
Believe sunday

Student

  • 12

Alright sir thank you sir.


  • 13 Oct, 2026
LILY MOSES

Student

  • 7

GOOD DAY SIR, MY PROGREES LEVEL IS 33.33%

  • 15 Oct, 2026
GOODLUCK ETIM

Student

  • 41
  • 4

Good day sir, please am starting from were I stopped

QUESTION NUMBER 6: The hacker used phishing to get the officer's password. Then ,he used the password to access the school system to change the mathematics result for the students. password . RULE TWO: THINK BEFORE YOU CLICK. Cancel the result and make the affected students retake the exam. Then, change the officer's password to a more unpredictable or difficult one.

  • 13 Oct, 2026
Martin Agoha

Instructor

  • 53

Weldone Etim. 

  • 13 Oct, 2026
GOODLUCK ETIM

Student

  • 41

Thank you sir

  • 13 Oct, 2026
solomon NDUONYI

Student

  • 4

Sir please i have a problem in my account my account don't want to be open.  this one i am using ,i just  creat it new i have been trying since so i don't know what to do  

  • 13 Oct, 2026
Martin Agoha

Instructor

  • 53

Ok. I will fix it from my end.
What is your full name?

  • 13 Oct, 2026
Emmanuel Nnasia

Student

  • 7
  • 0

good day everyone , how are things going on

  • 13 Oct, 2026
Saint Marley

Student

  • 31
  • 0

Good day sir

  • 13 Oct, 2026
Kanex Muskie

Student

  • 1
  • 0

QUESTION 1: A weak password.

QUESTION 2: D: Shut down every computer in the school.

WHY? Because if the system remains on, the hacker can cause further damage to other students results.

QUESTION 3: Passwords.

 QUESTION 4: I- INTEGRITY. Information should not be changed without authorization. The students information, that is their results, were changed without the formal authorization of the examination officer.

QUESTION 5: 1) Use strong passwords. 2) think before you click 3) update your device 4) back up your data

QUESTION 6: The hacker used phishing to get the officer's password. Then ,he used the password to access the school system to change the mathematics result for the students. password . RULE TWO: THINK BEFORE YOU CLICK. Cancel the result and make the affected students retake the exam. Then, change the officer's password to a more unpredictable or difficult one

  • 13 Oct, 2026
WISDOM EDET

Student

  • 11
  • 0

QUESTION ONE:  weak password.

QUESTION TWO: D: Shut down every computer in the school.

WHY? Because if the system remains on, the hacker can cause further damage to other students results.

QUESTION THREE: Passwords.

QUESTION FOUR: I- INTEGRITY. Information should not be changed without authorization. The students information, that is their results, were changed without the formal authorization of the examination officer.

QUESTION FIVE: Use powerful passwords. 2: think before you click 3) update your device 4) back up your data

QUESTION SIX: The hacker used phishing to get the officer's password. Then ,he used the password to access the school system to change the mathematics result for the students. password . RULE TWO: THINK BEFORE YOU CLICK. Cancel the result and make the affected students retake the exam. Then, change the officer's password to a more unpredictable or difficult one.

  • 13 Oct, 2026
Martin Agoha

Instructor

  • 53
  • 0

Hello Students.
I want to see your progress percentages

  • 13 Oct, 2026
AGNES ANWANA

Student

  • 4
  • 0

Good afternoon sir

  • 13 Oct, 2026
GOODLUCK ETIM

Student

  • 41
  • 0

Course Content

50.00% Done

  • 13 Oct, 2026
Saint Marley

Student

  • 31
  • 0

Course Content

66.67%

  • 14 Oct, 2026
GODI SMART

Student

  • 17
  • 1

WELL, I HAVE LEARNT A LOT ABOUT CYBER SECURITY,

I GUESS I WOULD BE ABLE TO PROTECT MYSELF ONLINE

MY PROGRESS LEVEL IS 66.67%

  • 14 Oct, 2026
Saviour Andem

Student

  • 4

After skipping videos you have not even watch one full video apart from the introduction to cybersecurity

  • 14 Oct, 2026
Saviour Andem

Student

  • 4
  • 0

Hi everyone

Good day sir                   

  • 14 Oct, 2026
GODI SMART

Student

  • 17
  • 1

ARE YOU ME, AM I YOU , ARE WE US???

  • 14 Oct, 2026
Saint Marley

Student

  • 31

As how now

  • 14 Oct, 2026
GODI SMART

Student

  • 17
  • 2

WELL PLEASE DO MIND HIM 

HE IS TALKING FROM EXPERIENCE

  • 14 Oct, 2026
Saint Marley

Student

  • 31

Dry dont watch your courses dey there dey brag mouth

  • 14 Oct, 2026
GODI SMART

Student

  • 17

BECAUSE YOU NO GET MOUTH

  • 14 Oct, 2026
GOODLUCK ETIM

Student

  • 41
  • 0

Hiii guys 

Good day sir

  • 14 Oct, 2026
GODI SMART

Student

  • 17
  • 3

AS HOW TOO

  • 14 Oct, 2026
Saint Marley

Student

  • 31

Dry

  • 14 Oct, 2026
LILY MOSES

Student

  • 7

AS HOW WHO ASKED YOU TO JOIN

  • 15 Oct, 2026
LILY MOSES

Student

  • 7

E BE LIKE SAY UNA DEY TAKE THIS LESSON AS GROUP CHAT OOOOOOOOOOOOOOOOOOOOOOOOOOOO

  • 15 Oct, 2026
mmokutmfon Tom

Student

  • 1
  • 4

SAINT MARLEY 

YOU ARE STUPID



BY GODI SMART AND THERE IS NOTHING YOU CAN DO 

  • 14 Oct, 2026
Saint Marley

Student

  • 31

youre insulting your father in heaven

  • 14 Oct, 2026
GODI SMART

Student

  • 17

CAPITAL LETTER SD DRY SD DRY SD SD SD SDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

  • 14 Oct, 2026
Divine Akaiso

Student

  • 23

as how?

  • 15 Oct, 2026
LILY MOSES

Student

  • 7

AS DRY AS YOUR FUTURE IS

  • 15 Oct, 2026
Betrand Muskie

Student

  • 2
  • 0

SIR MY PROGRESS LEVEL IS 50.00 THIS CYBERSECURITY IS MIND BLOWING AND INTEREST IT WOULD BE GOOD FOR MY CAREER I WILL PROTECT ONES ACCOUNT IDENTITY IMPORTANT DOCUMENTS AND HAVE MONEY I AM ENJOYING THIS ITS SPLENDID..

  • 15 Oct, 2026
Betrand Muskie

Student

  • 2
  • 0

QUESTION 1: It was a weak password.

QUESTION 2: Investigate the evidence, why, because the parent of the student was shock and even school ICT officer himself was Bewildered.

QUESTION 3: The password. 

QUESTION 4: I- INTEGRITY. Information should not be changed without authorization. The students information, that is their results, were changed without the formal authorization of the examination officer.

QUESTION 5: 1) use strong password 2) think before you click 3) update your device 4) back up your data

QUESTION 6: The hacker used phishing to get the officer's password. Then ,he used the password to access the school system to change the mathematics result for the students. password . RULE TWO: THINK BEFORE YOU CLICK. Cancel the result and make the affected students retake the exam. Then, change the officer's password to a more unpredictable or difficult one.

  • 15 Oct, 2026
Saint Marley

Student

  • 31
  • 0

Good day sir

My progress level is 66.67%

  • 15 Oct, 2026
Divine Akaiso

Student

  • 23
  • 0

good afternoon sir. My progress is 33.33%

  • 15 Oct, 2026
Believe sunday

Student

  • 12
  • 0

Good afternoon sir my progress level is 33.33%.


  • 15 Oct, 2026
Saviour Andem

Student

  • 4
  • 0

66.67%

  • 15 Oct, 2026
Saviour Andem

Student

  • 4
  • 0

66.67%

  • 15 Oct, 2026
GOODLUCK ETIM

Student

  • 41
  • 0

Course Content

66.67% Done

  • 15 Oct, 2026
Divine Akaiso

Student

  • 23
  • 0

Afar , no be whatsapp group chat be this o. Make una respect unaself

  • 15 Oct, 2026
AGNES ANWANA

Student

  • 4
  • 0

Good afternoon sir, my progress level is 33.33%

  • 15 Oct, 2026

Suggested Topics

General Discussions

EARTH

  • 0
  • 211
  • 0

General Discussions

Microsoft Word Discussion forum

Lets dive into Microsoft Word

  • 53
  • 765
  • 226

General Discussions

hi sir

hi sir

  • 3
  • 131
  • 0

General Discussions

hi sir

hi sir

  • 3
  • 129
  • 0

General Discussions

Discussions

Hi sir how are you

  • 10
  • 118
  • 0

General Discussions

MY PROGRESS

GOOD AFTERNOON SIR MY PROGRESS LEVEL IS 46.88.

  • 1
  • 118
  • 0

Community Blog Articles

img
Soft Skills

60 Common C# Interview Questions in 2022: Ace Your...

Administration / 4 Dec, 2022

Getting hired as a programmer can be a challenge. There’s a lot of talent out there, and there’s a lot of competition. Many employers are wary of “paper programmers”; people who have no programming ex...

img
Design

PostgreSQL vs. MySQL: Which SQL Platform Should Yo...

Administration / 4 Dec, 2022

MySQL and PostgreSQL are both leading database technologies built on a foundation of SQL: Structured Query Language. SQL forms the basis of how to create, access, update, and otherwise interact with d...