Domain 3

DMZ

• Definition: A physical or logical subnetwork that contains an organization's external-facing services (like web servers) to separate them from the untrusted internet and the private internal network.

• Example: Placing the company's public web server in a DMZ so that if a hacker compromises the website, they still can't access the internal accounting database.

(Demilitarized Zone)

802.1X

• Definition: A port-based network access control (PNAC) protocol that provides secure authentication for devices trying to connect to a LAN or WLAN.

• Example: When you plug a laptop into a corporate wall jack, a window pops up demanding your domain username and password before it routes any internet traffic.

Load Balancer

• Definition: A device that distributes incoming network traffic across a cluster of servers to prevent any single server from becoming overloaded, ensuring high availability.

• Example: An e-commerce site uses a load balancer to spread millions of holiday shoppers evenly across 10 identical web servers so the site doesn't crash.

WPA3

• Definition: The current, most secure wireless encryption standard that protects Wi-Fi traffic, replacing the older, vulnerable WPA2 standard.

• Example: Setting up a new office router to use WPA3 enterprise encryption to protect employee laptops from wireless eavesdropping.

(Wi-Fi Protected Access 3)

IaaS

• Definition: A cloud computing model where the provider supplies raw computing infrastructure—like virtual servers, storage, and networking—and the customer manages the operating system and data.

• Example: Renting a blank virtual machine from Amazon Web Services (AWS) or Microsoft Azure to install your own custom Linux operating system.

(Infrastructure as a Service)

PaaS

• Definition: A cloud model where the provider handles the hardware, network, and operating system, leaving the customer to deploy only their code or applications.

• Example: A software developer using Google App Engine to upload their app code without ever worrying about patching server operating systems.

(Platform as a Service)

SaaS

• Definition: A cloud model where the vendor hosts and manages the entire application, and users connect to it directly via a web browser.

• Example: Using Microsoft 365, Google Workspace, or Salesforce for daily business operations.

(Software as a Service)

RAID

• Definition: A hardware technology that mirrors or stripes data across multiple physical hard drives to protect against data loss if a drive fails.

• Example: Implementing RAID 5 on a database server so that if one hard drive completely breaks, the server stays online and no files are lost.

(Redundant Array of Independent Disks)

FaaS

Function as a Service

APIs

Application Programming Interfaces. The glue to microservices

VLANs

Virtual Local Area Network
Turns one router into 2 or more

GDPR

General data protection regulation EU Data must stay there

COOP

Continuity of operations Planning

ON site

everything in one place data and back up dont need wan link to transfer data

Off

oposite

SD-WAN

Software Defined Networking in a Wide Area Network. Fixed some issues we had commuting to the cloud.

SASE

Secure Access Service Edge net generation VPN

TLS

Transport Layer Security

IPsec

internet protocol Security aka vpn

UTMs

Unified Threat Management are older firewalls. They do alot but dont have to many things on because they will run slower

WAF

Web Application FIrewall
Not like normal Firewalls instead they analyze input into websites like sql they can block it.
Credit cards use it

EAP

is what allows port security to work EAP AND 802.1x works together sometimes in conjunction with radius,ldap,tacacs+, kerberos  all authentication databases

SPAN

Switch Port Analyzer

UPS

Uninterruptible power supply

MTTR

Mean time to repair

RTOS

Real Time Operating System
Like a Car Needing to break Instantly to stop the car

SCADA / ICS

Supervisory Control and Data Acquisition System
- Large-Scale, multi site ICS - industrial control systems 

IoT

Internet of Things