Network Security — Prelims Strategy

Prelims Strategy

For each control, ask which problem it primarily addresses. Authentication verifies identity; authorisation limits permitted actions. Encryption can protect information from interception, but it does not remove an excessive permission already granted to a logged-in account. Segmentation can limit movement between network areas, while backups support restoration. These controls can complement one another without being interchangeable.

Use the confidentiality–integrity–availability distinction on small scenarios. An altered beneficiary balance concerns integrity; an unavailable portal concerns availability; unauthorised disclosure concerns confidentiality. A single incident can affect more than one objective, so read whether the question asks for the primary effect or an exclusive classification.

Memorise NIST CSF 2.0's six functions with Govern included, and avoid treating them as a rigid chronological checklist. For Indian institutions, retain CERT-In/70B and NCIIPC/70A as separate pairs. Check the function named in an option before accepting a familiar acronym. A valid institution name attached to the wrong statutory role is a plausible distractor.