ITEC 110

an internal list attached to an object in Active Directory that specifies which users and groups can access the object

a type of security access control that grants or restricts object access via an access policy determined by an object's owner

mechanism controls are defined by user identification with supplied credentials during authentication

a form of access control list used by the Microsoft Windows operating systems for security control purposes

used for establishing system-wide security policies for actions such as logging or auditing resource access.

refers to the process of protecting data from unauthorized access and
data corruption throughout its lifecycle

includes data encryption, hashing, tokenization, and key management
practices that protect data across all applications and platforms

Using an algorithm to transform normal text characters into an
unreadable format

-more secure than standard data wiping
-it uses software to completely overwrite data on any storage device. It verifies that the data is unrecoverable

It masks personally identifiable information (PII) where necessary so that development can occur in environments that are compliant

Resiliency is determined by how well an organization endures or recovers from any type of failure

*Speed of recovery is critical to minimize impact
*File and database encryption solutions serve as a final line of defense for
sensitive volumes

amplifies the ability of a data security system because it can process
large amounts of data.

*Cognitive Computing, a subset of AI, performs the same tasks as other AI systems but it does so by simulating human thought processes.

they seek protection for not only data, but applications and proprietary business processes that run across public and private clouds

it promises to upend many traditional technologies exponentially

protection platform that allows you to move to
the cloud securely while protecting data in cloud applications.

data-centric and tokenization security solutions that protect data across enterprise, cloud, mobile and big data environments.

guards financial data and meets industry security and compliance requirements

solution that provides an end-to-end data-centric approach to enterprise data protection

solution provides complete point-to-point
encryption and tokenization for retail payment transactions

Solution that protects sensitive data in the Data Lake – including Hadoop, Teradata, Micro FocusVertica, and other Big Data platforms

protecting sensitive data in native mobile apps while safeguarding the data end-to-end.

protects sensitive data captured at the browser, like enter cardholder

solution that provides end-to-end encryption for email and mobile messaging,

are settings associated with computer files that grant or deny

->Read-only - Allows a file to be read, but nothing can be written to the file or changed.
->Archive - Tells Windows Backup to back up the file.
->System - System file.
->Hidden - File is not shown when doing a regular dir from DOS.

sometimes called a volume name

-is a unique name assigned to a hard drive, disc, or other media
-to give a name to a drive to help identify its use in the future

-> Read (r) - allows a file to be read
-> Write (w) -allows a file to be written to and changed
-> Execute (x) -allows a file to be executed by users or the operating system

-An archive file is any file with the "archive" file attribute turned on.
-This simply means that it's been flagged as needing to be backed up, or
archived

often called file archivers

-like 7-Zip, Peazip and Winrar are able to compress one or more files and/or folders to a single file

This makes it much easier to store all of that content in one place or to
share multiple files with someone

an alternate path used by ArcGIS to retrieve a record from a table

a new indexing solution that is included in Windows Server® 2008

*Cortana can search your PC and the web from the taskbar to find help,
apps, files, and setting

A compressed file is any file which is smaller than its original size and
could contain one or more files, or even a directory.

A compressed file has the compressed attribute switched on.

a type of public-key encryption in which the secret key of a user and the ciphertext are dependent upon attributes.

particular key can decrypt a particular ciphertext only if there is a match between the attributes of the ciphertext and the user’s key.

-It also enables you to export data to another database in an encrypted format
-Encrypted attributes are decrypted when returned through search requests

the process of running a virtual instance of a computer system in a layer abstracted from the actual hardware

the creation of a virtual rather than actual

uses software that simulates hardware functionality to create a virtual system.

technology that lets you create useful IT services using resources that are traditionally bound to hardware.

allows you to use a physical machine’s full capacity by distributing its capabilities among many users or environments

method of combining the available resources in a network by splitting up the available bandwidth into channels

the transformation of a network that was once hardware-dependent

describes hardware, software, and network functionality combined into a single, virtual network.

This allows developers and engineers to test software that is under development or in the simulation stage

software-based administrative entity…combining hardware and software network resources into a single

is designed to use software containers to replicate the functionality of a single network

combines multiple local networks into a single “virtual” network to improve the network efficiency

1. Boost IT Productivity
2. Improved Security and Recovery Times
3. Faster Application Delivery

1. Uses less (and less expensive) hardware
2. Increases flexibility and workload portability
3. Provides the ability to spin workloads up and down with minimal effort.
4. Allows resources to be scaled elastically to address changing network demands.

treat data as a dynamic supply providing processing capabilities that can bring together data from multiple sources

abstracting the traditional technical details of data and data management

included as part of a business intelligence (BI) tools semantic universe layer

is able to combine multiple sources to feed the BI tools

typically these are offered for additional cost by Data Integration Suite

allow them to be combined with relational data sources and flat files and queried using standard SQL.

products are often deployed in the cloud and have pre-packaged integrations to SaaS and cloud applications

Built from the ground-up to provide data virtualization capabilities for the enterprise

Virtualizing an operating system environment is the most common form of virtualization.

-happens at the kernel—the central task managers of operating systems.
-It’s a useful way to run Linux and Windows environments side-by-side

VMware Workstation software is used to virtualize Linux systems

utilizes by a single client or single organization

uses by multiple clients at the same time

1. Reduces bulk hardware costs, since the computers don’t require such high out-of-the-box capabilities.
2. Increases security, since all virtual instances can be monitored and isolated.
3. Limits time spent on IT services like software updates.

It is often referred to as ‘advanced load balancing,’ as it spreads applications across servers, and servers across applications.

one of the least-known forms of virtualization

deployed in the process of providing administrative roles to various users of a system. Mostly used in data centers to define the roles of users

-quite similar to OS virtualization
-is implemented using hypervisor

-virtual machine manager
-manages the shared physical hardware resources between the guest OS & the host OS

-It is the abstraction of computing resources from the software that uses cloud resources.
-It involves embedding virtual machine software into the server's hardware components

-process of pooling physical storage of multiple network
-facilitates archiving, easy backup, and recovery tasks

It is an array of servers that are managed by a virtual storage system

This type of virtualization works before the file system exists.

The server that uses the storage must have software installed on it in order to enable file-level usage

The host operating system must have a driver installed to intercept and redirect IO requests.

basically removes the dependencies caused in accessing the data at file level to that of the location where they are actually present.

a fiber channel switch is placed between the host and storage.

a single master array handles all the IO requests for all arrays in the system

This type of storage virtualization allows for the seamless centralized management and data migration.

-any costs that require paying actual money to an entity
-are often associated with a specific product and service. 

-typically associated with internal personnel or internal services for which no explicit chargeback system is in place
-are what the organization spends on an ongoing basis doing its daily work

refers to the work done by internal personnel keeping the technology infrastructure humming along.

refers to creating a secure copy of the data on individual machines.

an actual presence on the Internet, such as a web page

is a substitute that replaces the Internet Protocol (IP) address.

is a web address consisting of a website name and a domain name extension.

-also address where Internet users can access your website.
-your website name

-used for finding and identifying computers on the Internet.
-it must be registered before you can use it
-essential part of having a website, but it's only part of the equation.

also called “sub-domains” as they sometimes refer to specific sections or pages of a website.

a separate division from a larger domain but still shares the same servers.

a domain name extension

s an extension that is specific to a particular country. It consists of two letters based on the international country codes.

useful for a company that focuses on a specific country. This way, international companies can differentiate their content for different regions

an extension that does not rely on a country code.However, some extensions are sponsored by designated agencies or organizations

work exactly like any other domain name

an administrative grouping of multiple private computer networks or local hosts within the same infrastructure.

-also known as the “Campus”
-these are generally made up of routed and switched infrastructures where devices like PCs, servers, printers, wireless controllers, and more are connected to physical Ethernet ports for access to the network.

generally made up of routers, switches, and other transport services that deliver network services to all the locations required by the enterprise

-made up of compute, storage, networking, and more.
-are typically where enterprise applications are hosted

made up of wireless LAN controllers, which control access points that provide the wifi network that PCs, tablets, phones, and other devices use to connect to the network.

a generic term that can be used to describe public resources provided by companies like Amazon AWS, Microsoft Azure, Google Cloud, and more.

it is not a typical domain since there are generally components in all domains, yet often organizations have separate security operations (SecOps)

It has many applications and adds hundreds to millions of new endpoints to the network for use-cases such as supply chain management and tracking, medical devices, sensors in manufacturing applications, and more.

enables automated business operations and is critical for distribution and manufacturing.

looks to push compute power closer to the edge of the network to improve response time or the latency and bandwidth.

made up of various tools and services each that provide functions for provisioning, monitoring, and operating the network and services

refers to a formal mechanism to store information about all the assets in the network

used to store information about networking hardware and software assets

- used to plan, manage, and assign IP addresses used by the network devices.
- It also can allocate pools of addresses used for DHCP services

provides a monitoring infrastructure using a protocol like NetFlow or SFlowto collect information about the IP traffic flows

similar to IP flow monitoring but originates with agents injecting application flow information at multiple tiers in the web, app, and database.

are platforms that provide structure and processes to plan, deliver, and operate IT systems.

is an internet standard protocol for collecting information using a management information base structures that describe the system status and its configuration.

is a new form of real-time monitoring to collect and analyze network information streaming from a network device that has been subscribed to.

is the data type used by a column in a database.

is the operating system used by the Apollo/Domain line of workstations manufactured by Apollo Computer

- is an ideal domain extension for your business' customer support page or website.
-customers can access FAQs, contact information

These accounts are used by different services running on the operating system to access the system resources

This account has the highest privilege on the operating system.

*In Windows, this user account is known as the Administrator account
*In Linux, it is known as the root account.

This user account has moderate privilege

This user account has the lowest privilege

It is an individual identity of a user.

It is the collective identity of all users who belong to a specific group.

These are authorized users on your account.
They can:
1.Post and update content.
2.Deleteeorganize content
3.Manage users, groups and custom templates.
4.Edit site settings.

These are authorized users on your account. Before a contributor can do anything they must be assigned to one or more sites.

-They can be granted access to protected sites.
-They can also be granted access to the chrome extension and to courses.

These are only used to manage the user accounts which are alike or require access to a particular resource.

-are stored on the local machine
-bound with a physical machine.

* Username and passwords for "local user accounts" are stored on the local machine.

* Usernames and passwords of "network user accounts" are stored in a central machine usually known as the server

Usernames and passwords of these accounts are stored in a remote machine.

This account does not require a password to log in.

-are populated manually,
-all users are individually added by the administrator.

are populated and maintained through either a query or a directory server.

A process that allows a device to verify the identify of someone who connects to a network resource.

very important when you use dynamic IP addressing (DHCP) for computers on the trusted or optional network

It is a systems engineering process for establishing and maintaining consistency of a product's performance

-It is a form of IT service management (ITSM) as defined by ITIL .
-It's sometimes referred to as IT automation.

-It is any non-redundant part of a system.
-antithetical to the goal of high availability in a computing system or network
-essentially a flaw in the design, configuration, or implementation of a system, circuit

can also reduce the risk of potential SPOFs

This means a lack of order or predictability; a gradual decline into disorder.