Professional Elective 2: Operating Systems, Endpoint Protection, Defense in Depth, and Cryptography

Operating System (OS)

Software that manages the computer's hardware, software, memory, files, and running programs.

Windows Kernel

The core part of Windows that provides core operating system services and helps applications and hardware interact with the operating system.

Graphical User Interface (GUI)

An interface that allows users to interact with a computer through visual elements such as windows, icons, menus, and buttons.

Command-Line Interface (CLI)

An interface that allows users to interact with a computer by typing commands.

Task Manager

A Windows tool that displays running applications, processes, services, and computer resource usage such as CPU, memory, disk, and network activity.

Event Viewer

A Windows tool that displays records of system events, application activity, and security events.

System Configuration (Msconfig)

A Windows utility used to help troubleshoot startup and system configuration problems.

Windows PowerShell

A command-line shell and scripting tool used to manage and automate Windows tasks.

Microsoft Defender Antivirus

A security component that helps detect, block, and remove malicious software to protect against malware.

Task Scheduler

A Windows tool that allows users to schedule a program or task to run automatically at a specific time or when a particular event occurs.

Disk Management

A Windows tool used to view and manage disks, volumes, and partitions.

Remote Desktop Protocol (RDP)

A protocol that allows a user to connect to and control a remote computer through a network.

DNS (Domain Name System)

A network service that translates human-readable domain names into IP addresses.

DHCP (Dynamic Host Configuration Protocol)

A network service that automatically provides IP configuration settings to network devices.

Active Directory

A Windows service that manages users, computers, and other network resources within a Windows domain.

Group Policy

A Windows management feature that applies specific settings and rules to users and computers.

SMB (Server Message Block)

A network protocol that allows devices to share files and other resources across a network.

Hyper-V

A virtualization platform in Windows that enables virtual machines to run on a computer or server.

Netstat Command

A command that displays active network connections, helping administrators identify unauthorized inbound or outbound connections.

Linux Shell

An interface that allows users to communicate with the Linux operating system by entering commands.

Root Account

The Linux superuser account that possesses the highest level of administrative permissions to manage the entire system.

Hard Link

A directory entry in Linux that refers directly to the same underlying file data on the disk.

Symbolic Link

A reference or shortcut in Linux that points to another file or directory by its file system path.

Rootkit

Malicious software specifically designed to hide its presence and help an attacker maintain unauthorized access to a system.

Piping

The process of sending the output of one command to another command as input for further processing.

Behavior-Based Detection

A security detection method that examines what a program does rather than relying solely on known malware signatures.

Host-Based Intrusion Prevention System (HIPS)

A security system that monitors activity on an individual computer and can take active preventive measures against suspicious or unauthorized actions.

Host-Based Intrusion Detection System (HIDS)

A security system that monitors activity on a computer to identify possible intrusions or suspicious behavior, primarily detecting and generating alerts.

Endpoint Detection and Response (EDR)

A security solution that monitors endpoint activity, assists in detecting threats, and supports security investigation and incident response.

Data Loss Prevention (DLP)

A set of tools and practices designed to prevent sensitive information from being lost, leaked, or shared without authorization.

Next-Generation Firewall (NGFW)

A firewall that provides standard firewall filtering capabilities alongside advanced security features, such as application awareness and intrusion prevention.

Encrypting File System (EFS)

A Windows feature that encrypts supported individual files and folders on compatible Windows file systems.

Full-Disk Encryption (FDE)

A security method that encrypts an entire physical disk or storage device to protect all contained data.

BitLocker

A native Windows drive-encryption feature that encrypts entire system and storage volumes.

Trusted Platform Module (TPM)

A hardware security component that securely stores cryptographic keys and materials to support device integrity and encryption features.

Secure Boot

A security standard supported by UEFI that prevents unauthorized or untrusted bootloaders and operating system software from executing during startup.