Networking Fundamentals and Linux Commands

Resolves hostnames to IP addresses; AD also uses it to find domain controllers.

DNS resolves the hostname, the client establishes network transport and TLS for HTTPS, sends an HTTP request, receives a response, and renders it

Determine scope, check IP configuration, routing, DNS, required ports, firewall controls, service status, and logs

AD centralizes directory and authentication services. DNS allows clients to locate domain controllers

IAM controls authorized APIesource actions. Security groups filter network traffic to and from resources

It is the process of creating a software based representation of a physical computer, containers share the host kernal while VM's run isolated guest operating systems on shared hardware

Both are IAC, Terraform supports many providers; CloudFormation is AWS native

AI can help generate scripts, summarize logs, and improve documentation, assist with troubleshooting but generated outputs need review and testing

Software that enables multiple virtual machines to share physical hardware

RPO is how much data can we afford to lose? While RTO is how quickly must we restore service

I'd start with repetitive, low risk operational taks, such as checking disk usage or collecting logs

Check df -h , use du to locate usage, review logs and growth, safely reclaim or expand storage, then address the cause

IP address, subnet mask, default gateway, and DNS settings.

The router used to reach networks outside the local subnet.

Translates IP addresses, often allowing private hosts internet access.

A logical Layer 2 network segment or broadcast domain.

TCP is reliable and connection-oriented; UDP is connectionless.

DNS resolution; check records and configured DNS server.

Test port 443; check firewall, service listener, and application logs.

Check scope, IP config, DNS, routing, port reachability, then services/logs.

ip addr

ip route

ss -tulnp

Test-NetConnection hostname -Port 443

53, 22, 443.

88, 389, 445, 3389.

Centralized directory, authentication, and management for Windows domains.

A server that hosts AD DS and handles directory and authentication services.

Clients use DNS records to locate domain controllers and services.

An organizational container for AD objects and delegated administration.

Centralized Windows user and computer configuration.

Ticket-based authentication used to access network services.

Ticket Granting Ticket; used to request tickets for specific services.

Queries and updates directory information.

Authentication verifies identity; authorization determines permitted access.

Assigning permissions based on roles.

Give identities only the permissions needed for their tasks.

Verify need and approval; grant minimal, preferably temporary, audited access.

AWS virtual machines for compute workloads.

Logically isolated cloud networks for resources.

A stateful, allow-rule network firewall for attached resources.

A stateful network filter with allow and deny rules.

IAM controls actions/permissions; security groups control network traffic.

Role-based permissions to Azure resources at defined scopes.

Collects AWS metrics, logs, and alarms.

Collects telemetry for monitoring, analysis, and alerts.

Provider secures cloud infrastructure; customer secures assigned workloads and settings.

Least privilege, tight security groups, patching, secure admin access, logs.

AWS IaC service that deploys and manages resources as stacks from templates.

AWS object storage container.

Runs multiple virtual machines using shared physical hardware.

Type 1 runs on hardware; Type 2 runs atop a host OS.

VM has its own guest OS; container shares the host kernel.

KVM-based enterprise hypervisor for managing virtual machines.

Software-defined integration of compute, storage, and virtualization.

Enterprise backup, data protection, and recovery.

Maximum acceptable data loss, measured in time.

Target time to restore a service after disruption.

Review job results and perform test restores.

Snapshot captures a point-in-time state; independent backup supports recovery.

Private container network commonly routed/NATed through the host.

systemctl status SERVICE

journalctl -u SERVICE

df -h

free -h

Get-Service

Get-WinEvent -LogName System -MaxEvents 20

Define and provision infrastructure with version-controlled configuration.

Terraform is multi-provider; CloudFormation is AWS-native.

Previews proposed infrastructure changes.

Executes approved infrastructure changes.

Automating Windows and Microsoft infrastructure administration.

Low-risk repetitive tasks: disk checks, inventories, or service health reports.

Review, test safely, avoid exposing secrets, log actions, follow approvals.

CPU, memory, disk, network, service health, logs, and actionable alerts.

Status, logs, resource usage, listening ports, and recent changes.

Windows Server Core DC, DNS, static IPs, OUs, users, and Kerberos testing.

Ubuntu EC2 SIEM with restricted security groups and security event monitoring.

Trace connectivity across NSGs, guest firewall, services, and external networks.

Diagnose CPU architecture and Python dependency mismatches; validate fixes.

Securing systems taught me to enjoy building, administering, and troubleshooting them.

Hybrid cloud, identity, and automation match my projects and learning goals.

Read documentation, test safely, document findings, ask targeted questions.

By business impact, urgency, affected users, and service criticality.

Communicate impact, stop harm, follow rollback procedure, document cause.