lec10 + lec9 + lec8 + lec7

These accounts are used by different services running on the operating system to access the system resources.

has the highest privilege on the operating system

user account is known as the Administrator account

known as the root account.

user account has moderate privilege

user account has the lowest privilege

an individual identity of a user

collective identity of all users who belong to a specific group

can do anything they must be assigned to one or more sites

can be granted access to protected sites; can also be granted access to the chrome extension and to courses

are only used to manage the user accounts which are alike or require access to a particular resource.

Username and passwords are stored on the local machine

Usernames and passwords of are stored in a central machine usually known as the server

Usernames and passwords of these accounts are stored in a remote machine.

This account does not require a password to log in.

are populated manually, that is, all users are individually added by the administrator.

are populated and maintained through either a query or a directory server

a process that allows a device to verify the identify of someone who connects to a network resource.

very important when you use dynamic IP addressing (DHCP) for computers on the trusted or optional network

→ Is a systems engineering process for establishing and maintaining consistency of a
product's performance
→ is a form of IT service management (ITSM) as defined by ITIL . It's sometimes
referred to as IT automation.

essentially a flaw in the design, configuration, or implementation of a system, circuit

→can also reduce the risk of potential SPOFs

s a lack of order or predictability; a gradual decline into disorder

→ an actual presence on the Internet, such as a web page.
→ a substitute that replaces the Internet Protocol (IP) address.

a web address consisting of a website name and a domain name extension.

also called “sub-domains” as they sometimes refer to specific sections or pages of a website

a separate division from a larger domain but still shares the same servers

a domain name extension. (dot com is the most popular extension)

an extension that is specific to a particular country. It consists of two letters based on the international country codes.

useful for a company that focuses on a specific country international companies can differentiate their content for different regions

an extension that does not rely on a country code. some extensions are sponsored by designated agencies or organizations

work exactly like any other domain name. You can choose to run your free domain with URL Forwarding.

an administrative grouping of multiple private computer networks or local hosts within the same infrastructure.

made up of routed and switched infrastructures where devices like PCs, servers, printers, wireless controllers, and more are connected to physical Ethernet ports for access to the network

generally made up of routers, switches, and other transport services that deliver network services to all the locations required by the
enterprise.

made up of compute, storage, networking, and more. The data center servers are typically where enterprise applications are hosted

made up of wireless LAN controllers, which control access points that provide the wifi network that PCs, tablets, phones, and other
devices use to connect to the network.

a generic term that can be used to describe public resources (compute, storage, and networking) provided by companies like Amazon AWS, Microsoft Azure, Google Cloud, and more

unique, since it is not a typical domain since there are generally components in all domains, yet often organizations have separate security
operations (SecOps)

has many applications and adds hundreds to millions of new endpoints to the network for use-cases such as supply chain management and
tracking, medical devices, sensors in manufacturing applications, and more.

enables automated business operations and is critical for distribution and manufacturing.

–looks to push compute power closer to the edge of the network (out from the data center or public cloud) to improve response time (latency) and bandwidth

made up of various tools and services each that provide functions for provisioning, monitoring, and operating the network and services.

a formal mechanism to store information about all the (networking) assets in the network

used to store information about networking hardware and software assets.

used to plan, manage, and assign IP addresses used by the network devices. It also can allocate pools of addresses used for DHCP
services.

provides a monitoring infrastructure using a protocol like NetFlow or SFlowto collect information about the IP traffic flows

are platforms (like ServiceNow, Remedy, and others) that provide structure and processes to plan, deliver, and operate IT systems

an internet standard protocol for collecting information using a management information base (MIB) structures that describe the system status and its configuration

a new form of real-time monitoring to collect and analyze network information (typically, provided by gRPC, an agent-based protocol) streaming from a network device that has been subscribed to

the data type used by a column in a database.

the operating system used by the Apollo/Domain line of workstations manufactured by Apollo Computer, Inc. during the late 1980s, as the successor to the one previously used, AEGIS. It was one of the early distributed operating systems.

an ideal domain extension for your business' customer support page or website. It creates an obvious destination where customers can access FAQs, contact information, and anything else related to customer support

is the process of running a virtual instance of a computer system in a layer
abstracted from the actual hardware.
is the creation of a virtual rather than actual
uses software that simulates hardware functionality to create a virtual system.
is technology that lets you create useful IT services using resources that are
traditionally bound to hardware.

It allows you to use a physical machine’s full capacity by distributing its capabilities
among many users or environments.

method of combining the available resources in a network by splitting up the
available bandwidth into channels
is the transformation of a network that was once hardware-dependent
describes hardware, software, and network functionality combined into a single,
virtual network.
This allows developers and engineers to test software that is under development or
in the simulation stage

software-based administrative entity…combining hardware and
software network resources into a single

software containers replicate single network functionality

combines multiple local networks into a single “virtual” network to improve the network efficiency.

treat data as a dynamic supply providing processing capabilities that can bring
together data from multiple sources
is abstracting the traditional technical details of data and data management

included as part of a business intelligence (BI) tools semantic universe layer or is a new module offered by a predominantly BI vendor
is able to combine multiple sources (limited list of structured or big data) to feed the BI tools. Their output may not support operational data.

typically these are offered for additional cost by Data Integration Suite (ETL /
MDM / Data Quality) or Data Warehouse vendors. The suite is usually very
strong in other areas.

This is an emerging offering particularly among Big Data and Hadoop vendors.
These products "virtualize" the underlying big data technologies and allow them
to be combined with relational data sources and flat files and queried using
standard SQL.

These products are often deployed in the cloud and have pre-packaged
integrations to SaaS and cloud applications, cloud databases and few desktop
and on-premise tools like Excel.

Built from the ground-up to provide data virtualization capabilities for the
enterprise in a many-to-many fashion through a unified "virtual" data layer.
Designed for agility and speed in a wide range of use cases, agnostic to
sources and consumers, and competes and collaborates with other less
efficient middleware.

the most common form, involves running multiple os instances on a single machine

VMware Workstation software is used to virtualize Linux systems.

there is a need to install VMware software firstly.

utilizes by a single client or single organization.

uses by multiple clients at the same time.

It is often referred to as ‘advanced load balancing,’ as it spreads applications across
servers, and servers across applications.

one of the least-known forms of virtualization
deployed in the process of providing administrative roles to various users of a
system. Mostly used in data centers to define the roles of users

is implemented using hypervisor ← virtual machine manager.
It is the abstraction of computing resources from the software that uses cloud
resources. It involves embedding virtual machine software into the server's
hardware components

manages the shared physical hardware resources between the guest OS & the host OS

fully virtualizes the main physical server to support applications and software

imitate certain factual or illusory hardware requiring the valid resources from the
host

runs modified versions of operating systems

specially intended to grant the necessary security and separation to run manifold applications and replicas of the same operating system on the same server.

process of pooling physical storage of multiple network facilitates archiving, easy backup, and recovery tasks is an array of servers that are managed by a virtual storage system

- This type of virtualization works before the file system exists. It replaces controllers and takes over at the disk level.

- The server that uses the storage must have software installed on it in order to enable file-level usage.

- The host operating system must have a driver installed to intercept and redirect IO requests.

basically removes the dependencies caused in accessing the data at file level to that of the location where they are actually present.

With network-based storage, a fiber channel switch is placed between the host and storage. This switch virtualizes and redirects all IO requests. Operating systems are not a factor with networkbased storage.

With array-based virtualization a single master array handles all the IO requests for all arrays in the system. This type of storage virtualization allows for the seamless centralized management and data migration.

are any costs that require paying actual money to an entity. Hard costs are often associated with a specific product and service

are typically associated with internal personnel or internal services for which no explicit chargeback system is in place. Soft costs are what the organization spends on an ongoing basis doing its daily work.

refers to the work done by internal personnel keeping the technology infrastructure humming along

refers to creating a secure copy of the data on individual machines

internet list in active directory specifying user and group access to objects

used in windows os for system-wide security policies, logging and auditing

process of protecting data from unauthorized access and corruption throughout its lifecycle

transform text characters into unreadable format to protect sensitive data

overwrites data on storage devices to make it unrecoverable

masks personally identifiable information (pii) for secure development environments

measures an organizations ability to recover from various failures and ensure data availability

amplifies data security by processing large amounts of data through cognitive computing

expands data protection needs as cloud capabilities grow

revolutionizes encryption algorithms for increased complexity and security

platform protecting data during the transition to the cloud

solutions ensuring data-centric security across various environments

guards financial data, meeting industry security and compliance requirements

protects data and ensures compliance with industry regulations

provides an end-to-end encryption and tokenization for retail payment transactions

provides an end-to-end data-centric approach to enterprise data protection

solutions safeguarding sensitive data in data lakes and big data platforms

protects sensitive data in native mobile applications

safeguards sensitive data captured at the browser

end-to-end encryption for email and mobile messaging

settings associated with computer files that grant or deny certain rights to how a user or the operating system can access that file

allows a file to be read, but nothing can be written to the file or changed

tells windows backup to back up the file

system file

files is not shown when doing a regular dir from dos

unique name assigned to a drive or media for indentification purposes, changeable during formatting

allows a file to be read, but nothing can be written to the file or changed in the file

allows a file to be written to and changed

allows afile to be executed by users or the operating system

indicates files flagged for backup or archiving

tools like 7-zip compress multiple files into a single file for efficient storage, transmission and sharing

alternate path for retrieving records in arcgis

indexing solution for fast file searches in windows server and windows 10

files smaller than their original size, allowing faster transmission, download and storage

public-key encryption where the secret key of a user and ciphertext depend on attributes, enhancing spped and enabling encrypted data export