📖 IT Certification Glossary

Amazon API Gateway

Amazon API Gateway is a fully managed service enabling developers to create, publish, maintain, monitor, and secure APIs at any scale. It handles tasks like authentication, authorization, request validation, and traffic management, simplifying API development and deployment for microservices and serverless applications.

Amazon Athena

Amazon Athena is an interactive query service enabling analysis of data directly in Amazon S3 using standard SQL. It is serverless, meaning no infrastructure is required, and you pay only for the data scanned during query execution, making it cost-effective for ad-hoc analysis of large datasets.

Amazon Aurora

Amazon Aurora is a MySQL and PostgreSQL-compatible relational database engineered for high performance and availability. It delivers up to five times the throughput of standard MySQL while offering full compatibility with existing database applications. Aurora automatically scales storage and provides point-in-time recovery.

Amazon CloudFront

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to users globally with low latency. It leverages a global network of edge locations to cache content closer to the end-user.

Amazon CloudWatch

Amazon CloudWatch is a monitoring and observability service providing metrics, logs, and events for AWS resources and applications. It enables real-time monitoring, automated actions, and anomaly detection to optimize performance and troubleshoot issues.

Amazon Cognito

Amazon Cognito delivers secure user authentication, authorization, and management for web and mobile applications. It offers User Pools for managing user directories and Identity Pools for granting access to AWS resources. Cognito simplifies user sign-up, sign-in, and provides integration with social identity providers like Google and Facebook.

Amazon AppStream 2.0

Amazon AppStream 2.0 is a fully managed non-persistent application streaming service that allows users to access desktop applications through a web browser. It streams the application interface to the user without installing software locally.

Amazon Aurora

Amazon Aurora is a MySQL and PostgreSQL-compatible relational database engine built for the cloud. It provides the performance and availability of high-end commercial databases with the simplicity and cost-effectiveness of open-source databases, featuring automatic scaling and replication.

Amazon Bedrock

Amazon Bedrock is a fully managed service that makes foundation models (FMs) from leading AI companies available via an API. It allows developers to build and scale generative AI applications without managing the underlying infrastructure.

Amazon CloudFront

Amazon CloudFront is a globally distributed content delivery network (CDN) service designed to accelerate the delivery of static and dynamic web content. It caches data at strategically located edge locations, reducing latency and improving performance for end-users worldwide, enhancing application responsiveness.

Amazon CloudWatch

Amazon CloudWatch is a monitoring and observability service providing metrics, logs, and alarms for AWS resources and applications. It enables real-time monitoring of performance, resource utilization, and operational health, facilitating proactive identification and resolution of issues within the AWS environment.

Amazon Cognito

Amazon Cognito provides authentication, authorization, and user management for web and mobile applications. It allows users to sign in using a password or social identity providers and manages user profiles and access tokens.

Availability Zones

Availability Zones are physically separate locations within an Azure region, each with independent power, networking, and cooling. Deploying applications across multiple zones enhances fault tolerance and ensures high availability, minimizing downtime during localized failures.

Azure Active Directory (Azure AD)

Azure Active Directory is Microsoft’s cloud-based identity and access management (IAM) service. It provides authentication, authorization, and user management for Azure resources and cloud applications, supporting single sign-on (SSO) and multi-factor authentication (MFA) for enhanced security.

Azure Active Directory Domain Services (Azure AD DS)

A fully managed domain service that provides domain join capabilities for VMs in Azure.

Azure Active Directory (Entra ID)

Azure Active Directory (Entra ID) is Microsoft’s cloud-based identity and access management service. It provides authentication, authorization, and user management for accessing Azure resources, Microsoft 365 applications, and other cloud services, enabling single sign-on and multi-factor authentication.

Azure Advisor

Azure Advisor analyzes your Azure configuration and resource usage to provide personalized recommendations. These recommendations span cost optimization, security hardening, high availability improvements, performance enhancements, and operational excellence best practices, helping you align with Azure’s well-architected framework.

Azure AI Services

Azure AI Services are a portfolio of pre-built AI models and APIs that allow developers to add intelligence to applications without deep data science expertise. These services include capabilities for vision, speech, language processing, and decision-making.

Acceptable Use Policy (AUP)

An Acceptable Use Policy (AUP) defines the rules and guidelines for appropriate use of an organization’s information assets. It details permitted activities, prohibited behaviors, and consequences for violations, covering areas like internet access, data handling, and device usage to mitigate risk and maintain security.

Access Control

Access Control defines and enforces policies governing who or what can access specific resources. It’s a fundamental security principle ensuring confidentiality, integrity, and availability. Implementation spans administrative procedures, physical barriers, and technical mechanisms like authentication and authorization protocols.

Annual Loss Expectancy (ALE)

Annual Loss Expectancy (ALE) is the yearly expected financial loss from a specific risk. It is calculated by multiplying the Single Loss Expectancy (SLE) by the Annual Rate of Occurrence (ARO). This metric helps organizations prioritize security investments based on quantitative risk analysis.

Annual Rate of Occurrence (ARO)

Annual Rate of Occurrence (ARO) is the estimated frequency with which a specific threat is expected to occur within a single year. It is expressed as a number, such as 0.1 for once every ten years or 2 for twice a year.

Asymmetric Encryption

Asymmetric encryption utilizes a key pair – a public key for encryption and a corresponding private key for decryption. This method eliminates the need for secure key exchange, as the public key can be freely distributed. Algorithms include RSA and ECC, though they are computationally intensive and slower than symmetric methods.

Attribute-Based Access Control (ABAC)

Attribute-Based Access Control (ABAC) is a flexible access control model that grants access based on a combination of attributes. These attributes can include user characteristics, resource properties, and environmental conditions like time of day or location. It provides more granular control than RBAC.

Acceptable Use Policy

An Acceptable Use Policy (AUP) defines permissible and prohibited uses of an organization’s resources, including networks, systems, and data. It outlines user responsibilities, legal compliance expectations, and potential consequences for violations, establishing clear boundaries for appropriate technology usage and mitigating organizational risk.

Access Control

Access control defines and manages who or what entity has the authority to access specific information resources. This involves implementing mechanisms like authentication, authorization, and accounting to enforce security policies and protect data confidentiality, integrity, and availability.

Annualized Loss Expectancy (ALE)

Annualized Loss Expectancy (ALE) is the total expected monetary loss for an asset over one year. It is calculated by multiplying the Single Loss Expectancy (SLE) by the Annualized Rate of Occurrence (ARO) to determine the yearly risk cost.

Annualized Rate of Occurrence (ARO)

Annualized Rate of Occurrence (ARO) is the estimated frequency with which a specific threat is expected to occur within a single year. This value is a critical input for quantitative risk calculations to determine the annual potential loss.

Audit

An audit is a systematic, independent examination of an organization’s information systems, controls, and processes. It assesses adherence to established policies, standards, and regulations, providing objective evidence of effectiveness and identifying areas for improvement. Audit findings inform risk mitigation strategies.

Audit Trail

An audit trail is a sequential record of system events, logging user actions, system changes, and access attempts. It provides a forensic history for security analysis, compliance verification, and incident response. Comprehensive audit trails are crucial for reconstructing activities and identifying potential breaches.

Acceptable Use Policy (AUP)

An Acceptable Use Policy (AUP) is a set of rules applied by the owner or administrator of a network or service that restricts the ways in which the network may be used. It outlines prohibited activities and the consequences of violations.

Active Directory

Active Directory is Microsoft’s directory service that manages users, computers, and other network resources in a Windows domain environment. It centralizes authentication, authorization, and policy enforcement, simplifying administration and enhancing security across the network.

Antivirus

Antivirus software safeguards systems by identifying, preventing, and removing malicious software like viruses, worms, and Trojans. Modern solutions utilize signature-based detection alongside heuristic analysis and behavioral monitoring to combat evolving threats. Regular updates are crucial for maintaining effectiveness against new malware.

Bandwidth

Bandwidth represents the data transfer capacity of a network connection, measured in bits per second (bps). It defines the maximum rate at which data can be transmitted. Higher bandwidth enables faster data transfer speeds and supports more simultaneous network activity. It is not a measure of speed itself.

bash (Bourne Again Shell)

bash (Bourne Again Shell) is the default command-line interpreter and shell for most Linux distributions. It allows users to interact with the operating system by typing commands, executing scripts, and managing files via a text-based interface.

BIOS

BIOS (Basic Input/Output System) is firmware pre-installed on the motherboard. It initializes hardware during the boot process, performs a Power-On Self-Test (POST), and loads the operating system. Modern systems increasingly utilize UEFI, a more advanced successor to BIOS, offering enhanced features and security.

802.1Q (VLAN Tagging)

802.1Q is the industry-standard protocol for VLAN tagging on an Ethernet network. It inserts a tag into the Ethernet frame header to identify which VLAN the traffic belongs to, allowing multiple VLANs to share a single physical link, known as a trunk.

802.1X (Port-based Network Access Control)

802.1X is an IEEE standard for port-based network access control that provides an authentication mechanism to devices wishing to attach to a LAN or WLAN. It uses the Extensible Authentication Protocol (EAP) to ensure only authorized devices can access the network.

AAA

AAA, representing Authentication, Authorization, and Accounting, is a comprehensive framework for controlling network access. Authentication verifies user identity, authorization determines permitted access levels, and accounting tracks user activity for auditing and billing purposes, enhancing network security.

ARP

Address Resolution Protocol resolves IP addresses to corresponding MAC addresses on a local network. It broadcasts ARP requests to identify the hardware address associated with a known IP address, enabling communication within the same network segment. ARP is fundamental to Ethernet network operation.

BGP

Border Gateway Protocol is the path vector routing protocol used to exchange routing information between autonomous systems (AS) on the Internet. It determines the best path for data packets based on policies and attributes, ensuring efficient and reliable internet routing. BGP is essential for global network connectivity.

Cable Types

Networking utilizes various cable types, including twisted-pair (Cat5e, Cat6, Cat6a) and fiber optic. Twisted-pair cables transmit data via electrical signals, while fiber optic uses light. Cable selection depends on bandwidth requirements, distance limitations, and environmental factors.

Access Point

An access point (AP) enables wireless devices to connect to a wired network using Wi-Fi protocols. It acts as a bridge, translating wireless signals to wired connections and vice versa, extending network reach without requiring direct cable connections for every device.

APIPA (Automatic Private IP Addressing)

APIPA (Automatic Private IP Addressing) is a feature that allows a Windows computer to automatically assign itself an IP address when a DHCP server is unavailable. These addresses always fall within the specific 169.254.0.1 to 169.254.255.254 range.

Bandwidth

Bandwidth defines the data transfer capacity of a network connection, measured in bits per second (bps). It represents the maximum amount of data that can be transmitted over a connection in a given timeframe. Higher bandwidth enables faster data transfer speeds and supports more simultaneous connections.

BIOS

The Basic Input/Output System (BIOS) is firmware embedded on a motherboard that initializes hardware during the boot process. It performs a power-on self-test (POST) and loads the operating system. Modern systems increasingly utilize UEFI, a more advanced successor to BIOS.

Bluetooth

Bluetooth is a wireless technology standard enabling short-range data exchange between devices. Utilizing the 2.4 GHz ISM band, it creates personal area networks (PANs) for applications like audio streaming, file transfer, and peripheral connections with limited power consumption.

Cloud Computing

Cloud computing delivers on-demand access to computing resources—servers, storage, databases, networking, software, and analytics—over the internet. This model shifts IT infrastructure from on-premises ownership to a pay-as-you-go service, offering scalability and flexibility.

Acceptable Use Policy (AUP)

An Acceptable Use Policy (AUP) is a document defining permissible and prohibited uses of an organization’s technology assets. It details expectations for user behavior regarding network access, data handling, and software usage. AUPs aim to minimize legal risks and maintain a secure computing environment.

Advanced Persistent Threat

Advanced Persistent Threats (APTs) are sophisticated, long-term cyberattacks targeting specific entities. These attacks involve stealthy intrusion, sustained presence, and focused objectives, typically data exfiltration or espionage. APTs utilize multiple attack vectors and adapt to security measures, requiring advanced detection and response strategies.

Air Gap

An air gap is a security measure implementing physical isolation of a computer or network from all other networks, including the internet. This is achieved by physically disconnecting all communication pathways, preventing data transfer and remote access, and mitigating the risk of remote exploitation.

ARP Poisoning

ARP Poisoning is a Man-in-the-Middle attack exploiting the Address Resolution Protocol. Attackers send spoofed ARP messages, associating their MAC address with the IP address of a legitimate network host, intercepting network traffic and potentially stealing sensitive information.

Asymmetric Encryption

Asymmetric encryption, also known as public-key cryptography, employs a key pair: a public key for encryption and a private key for decryption. The public key can be freely distributed, while the private key must remain confidential. This enables secure communication and digital signatures.

Attack Surface

The attack surface encompasses all potential entry points and vulnerabilities that an attacker could exploit to compromise a system or network. This includes hardware, software, network protocols, and human factors. Reducing the attack surface minimizes exposure to threats and enhances overall security posture.

Acceptable Use Policy (AUP)

Acceptable Use Policy (AUP) is a set of rules applied by the owner or administrator of a network or service that restricts how the system may be used. It ensures users understand their responsibilities and the legal consequences of misusing corporate resources.

Access Control List (ACL)

Access Control List (ACL) is a table that tells a computer operating system or network device which access rights each user or IP address has to a specific object. It acts as a filter to permit or deny traffic based on defined criteria.

Accountability

The ability to trace actions performed on a system back to a specific individual or process, typically through audit logs.

Administrative Controls

Security controls that focus on personnel and business practices, such as policies, procedures, and security awareness training.

Air Gap

An Air Gap is a security measure that ensures a computer or network is physically isolated from all other networks, including the public internet. This physical separation prevents remote attacks and unauthorized data exfiltration, making it ideal for highly sensitive systems.

Asset

Anything of value to an organization that must be protected, including hardware, software, data, and personnel.