Networking Certification-Oriented Acronyms

Course Scope and Certification Expectations

Target Certification Frameworks:
- CompTIA A+
- CompTIA Network+
- CompTIA Security+
Assessment Expectations and Student Knowledge Requirements:
- Knowledge of all 100 acronyms is required for certification readiness.
- Students must know:
- The exact acronym.
- What the acronym stands for (its full expansion).
- What the term means or does within a network environment.
- Memorizing only the expanded phrasing is not sufficient; practical network function and purpose must be understood.

Network Types and Logical Architectures

1. LAN: Local Area Network
- A network connecting devices within a limited, localized physical area such as an office, home, or single building.
2. WAN: Wide Area Network
- A network spanning large geographic distances, connecting multiple smaller networks across cities, regions, or countries.
3. WLAN: Wireless Local Area Network
- A local area network utilizing wireless communication technologies (such as Wi-Fi) instead of physical cabling.
4. PAN: Personal Area Network
- A short-range network centered around an individual host or personal devices (e.g., Bluetooth device pairings).
5. MAN: Metropolitan Area Network
- A network covering a geographic area larger than a LAN but smaller than a WAN, such as a town, city, or enterprise campus.
6. SAN: Storage Area Network
- A dedicated, high-speed network that provides block-level network access to consolidated storage devices.
7. VPN: Virtual Private Network
- An encrypted connection established across a public network (like the internet) to extend a secure private network.
8. VLAN: Virtual Local Area Network
- A logical subnetwork that groups a subset of network devices together on Layer 2 switch fabrics regardless of physical physical connections.

Network Interfaces, Physical Layer, and Hardware Media

9. NIC: Network Interface Card
- A hardware component installed in a host device that provides physical attachment and connectivity to a network.
10. MAC: Media Access Control
- A unique 48-bit hardware identifier assigned to network interfaces for communication at Layer 2 of the OSI model.
51. PoE: Power over Ethernet
- A technology standard that transmits electrical power alongside Ethernet data across standard twisted-pair cabling.
52. UTP: Unshielded Twisted Pair
- Common copper networking cabling containing pairs of twisted wires without additional metallic shielding against interference.
53. STP Cable: Shielded Twisted Pair
- Copper networking cabling built with internal metallic foil/braided shielding to protect signals from electromagnetic interference (EMI).
54. RJ45: Registered Jack 45
- An 8-position, 8-contact (8P8C) physical connector interface standard used for Ethernet network patch cables.
55. SFP: Small Form-factor Pluggable
- A compact, hot-swappable transceiver module used in switch interfaces for fiber-optic or high-speed copper connections.
56. AP: Access Point
- A networking hardware device that connects Wi-Fi wireless clients to a wired network infrastructure.

Internet Protocol, Addressing, and Routing Infrastructure

11. IP: Internet Protocol
- The core network-layer protocol responsible for logically addressing and routing data packets across network boundaries.
12. IPv4: Internet Protocol Version 4
- A 32-bit logical addressing scheme represented as four octets in dotted-decimal format.
13. IPv6: Internet Protocol Version 6
- A 128-bit hexadecimal addressing system designed to succeed IPv4 and eliminate address exhaustion.
16. ICMP: Internet Control Message Protocol
- A network-layer protocol used by network devices to send error reports, diagnostics, and operational controls (such as ping).
17. ARP: Address Resolution Protocol
- A protocol that resolves a known Layer 3 IPv4 address to an unknown Layer 2 physical MAC address on a local network segment.
19. DHCP: Dynamic Host Configuration Protocol
- A service that dynamically assigns IP addresses, subnet masks, default gateways, and network settings to client hosts.
20. APIPA: Automatic Private IP Addressing
- An automatic IPv4 addressing feature ( $169.254.0.0/16$ range) self-assigned by a client when a DHCP server cannot be reached.
21. NAT: Network Address Translation
- A method of remapping local private IP address spaces into a public IP address space at a gateway router.
22. PAT: Port Address Translation
- An extension of NAT that maps multiple private IP addresses to a single public IP address using distinct port numbers.
23. CIDR: Classless Inter-Domain Routing
- A flexible method for allocating IP addresses and prefix routing replacing legacy classful address structures (e.g., /24).
24. VLSM: Variable Length Subnet Mask
- A subnetting technique allowing subnets of varying sizes within the same IP address space to optimize allocation.
85. MPLS: Multiprotocol Label Switching
- A routing mechanism that forwards traffic using short path labels rather than complex network address lookups.
86. BGP: Border Gateway Protocol
- An Exterior Gateway Protocol (EGP) used to exchange routing and reachability information between Autonomous Systems across the internet.
87. OSPF: Open Shortest Path First
- A link-state Interior Gateway Protocol (IGP) used to calculate optimal routing paths within an autonomous internal network.
88. RIP: Routing Information Protocol
- A legacy distance-vector interior routing protocol that uses hop count as its primary routing metric.
89. EIGRP: Enhanced Interior Gateway Routing Protocol
- An advanced distance-vector routing protocol developed by Cisco for fast convergence and efficient routing within an autonomous network.
90. AS: Autonomous System
- A collection of connected IP routing prefixes under a single administrative control presenting a common routing policy.
91. ISP: Internet Service Provider
- An organization or enterprise that provides internet connectivity, routing, and subscription services to customers.

Transport Layer Protocols, Data Metrics, and Reference Models

14. TCP: Transmission Control Protocol
- A connection-oriented, reliable transport protocol that guarantees ordered and error-checked delivery of data streams.
15. UDP: User Datagram Protocol
- A connectionless, lightweight transport protocol that provides low-latency transmission without arrival guarantees or sequencing.
46. OSI: Open Systems Interconnection
- A 7-layer reference framework standardizing telecommunication and computing network communication functions.
47. PDU: Protocol Data Unit
- A discrete unit of data defined at a specific layer of an OSI model stack (e.g., Frame, Packet, Segment).
48. MTU: Maximum Transmission Unit
- The maximum payload size (in bytes) of a protocol data unit that can be passed through a network interface without fragmentation.
49. TTL: Time To Live
- An 8-bit counter in IP packet headers that decrements at each router hop to prevent unroutable packets from looping indefinitely.
50. MSS: Maximum Segment Size
- The maximum byte length of unfragmented data payload that a network device can receive in a single TCP segment.

Domain Names, Web Protocols, and Identifiers

18. DNS: Domain Name System
- A hierarchical system that translates human-friendly domain names (e.g., example.com) into numerical IP addresses.
25. FQDN: Fully Qualified Domain Name
- The complete domain string specifying an exact position in the DNS hierarchy, including host and root domain.
26. URL: Uniform Resource Locator
- A formatted reference string identifying the protocol, location, and path of a resource on the web.
27. URI: Uniform Resource Identifier
- A standardized character sequence identifying a physical or logical resource, encompassing both URLs and URNs.
28. HTTP: Hypertext Transfer Protocol
- An unencrypted application-layer communication protocol used for retrieving and sending web page resources.
29. HTTPS: Hypertext Transfer Protocol Secure
- An encrypted variant of HTTP that utilizes TLS encryption for secure web communication over networks.

File Transfer, Remote Management, and Mail Services

30. FTP: File Transfer Protocol
- A client-server protocol used for transmitting files between hosts over a TCP/IP network connection.
31. SFTP: SSH File Transfer Protocol
- A secure file transfer protocol operating over an encrypted Secure Shell connection.
32. TFTP: Trivial File Transfer Protocol
- A basic UDP-based file transfer protocol operating without authentication, commonly used for booting diskless devices and updating network firmware.
33. SSH: Secure Shell
- A cryptographic protocol used for secure remote command-line access, administration, and secure data tunneling.
34. SMTP: Simple Mail Transfer Protocol
- An internet standard protocol for transmitting electronic mail messages between sending and receiving mail servers.
35. POP3: Post Office Protocol Version 3
- An application protocol used by local email clients to retrieve emails from a server, usually deleting them from the server inbox post-download.
36. IMAP: Internet Message Access Protocol
- An application protocol for reading and managing email directly on a central mail server across multiple simultaneous devices.

Management, Time Synchronization, Directory, and Voice Services

37. SNMP: Simple Network Management Protocol
- An application-layer protocol for managing, configuring, and collecting status metrics from network infrastructure hardware.
38. NTP: Network Time Protocol
- A protocol for synchronizing host system clocks over variable-latency packet networks.
39. LDAP: Lightweight Directory Access Protocol
- An application protocol used to query and manage centralized directory services across an enterprise network.
40. SMB: Server Message Block
- A network application protocol providing shared access to files, printers, and serial ports between nodes on a network.
41. RDP: Remote Desktop Protocol
- A proprietary Microsoft protocol providing a graphical user interface connection to access and manage remote computers.
42. SIP: Session Initiation Protocol
- A signaling protocol used to setup, maintain, and tear down real-time multimedia communication sessions including voice and video calls.
43. RTP: Real-time Transport Protocol
- An end-to-end transport protocol designed for delivering audio and video streaming data in real-time.
44. VoIP: Voice over Internet Protocol
- Technologies and protocols for transmitting voice communications and multimedia data streams over Internet Protocol networks.
45. QoS: Quality of Service
- A set of network mechanisms designed to prioritize traffic and allocate bandwidth metrics to critical data flows.

Wireless Technologies and Access Standards

57. SSID: Service Set Identifier
- The configured technical name identifying a specific wireless network broadcast.
58. BSSID: Basic Service Set Identifier
- The physical MAC address of the radio interface on a wireless access point.
59. WPA2: Wi-Fi Protected Access 2
- A Wi-Fi security standard implementing AES encryption for wireless data protection.
60. WPA3: Wi-Fi Protected Access 3
- An enhanced Wi-Fi security standard introducing cryptographic protection (SAE) against brute-force password dictionary attacks.
61. PSK: Pre-Shared Key
- A shared secret cryptographic key configured prior to session establishment, used in personal wireless authentication.
62. MIMO: Multiple Input Multiple Output
- An antenna technology using multiple radio transmitters and receivers to increase data throughput without additional frequency spectrum.
63. CSMA/CD: Carrier Sense Multiple Access with Collision Detection
- A media access control mechanism used in legacy half-duplex Ethernet networks to sense link traffic and manage frame collisions.
64. CSMA/CA: Carrier Sense Multiple Access with Collision Avoidance
- A carrier sense protocol used in wireless networks to avoid data transmission collisions prior to sending packets.

Layer 2 Switching, Trunking, and Aggregation Protocols

65. STP: Spanning Tree Protocol
- A Layer 2 network protocol that prevents logical loops on Ethernet switch networks by systematically blocking redundant physical paths.
66. RSTP: Rapid Spanning Tree Protocol
- An updated evolution of STP (IEEE 802.1w) that provides faster loop-free network topology convergence.
67. LACP: Link Aggregation Control Protocol
- An IEEE standard (802.3ad) that bundles multiple physical switch interfaces into a single logical channel for redundancy and throughput.
68. 802.1Q: IEEE VLAN Tagging Standard
- The networking standard that inserts a 4-byte VLAN identification tag into Ethernet frames to carry trunked VLAN traffic across switches.

Network Access Control, Security Systems, and Threat Mitigation

69. ACL: Access Control List
- A rule list configured on routers or firewalls to filter network traffic based on source/destination addresses or protocol port numbers.
70. AAA: Authentication, Authorization, and Accounting
- An architectural framework for identity verification, permission management, and session auditing.
71. RADIUS: Remote Authentication Dial-In User Service
- A network authentication protocol delivering centralized AAA management for enterprise user access.
72. TACACS+: Terminal Access Controller Access-Control System Plus
- A Cisco protocol for centralized AAA services that encrypts full packet contents and separates authentication and authorization operations.
73. NAC: Network Access Control
- A security approach enforcing device posture and policy compliance before allowing host connections to an internal network.
74. IDS: Intrusion Detection System
- A security solution that passively monitors network traffic for unauthorized activity or policy violations and generates alerts.
75. IPS: Intrusion Prevention System
- An inline security technology that inspects network traffic flows to actively block detected malicious intrusions in real time.
76. NGFW: Next-Generation Firewall
- An advanced firewall combining traditional stateful packet filtering with deep packet inspection, application-level awareness, and IPS features.
77. DMZ: Demilitarized Zone
- A perimeter subnetwork designed to host public-facing services while isolating them from trusted internal enterprise networks.
78. TLS: Transport Layer Security
- A cryptographic security protocol providing privacy and data encryption for internet communications.
79. PKI: Public Key Infrastructure
- A framework of policies, hardware, software, and digital certificates required to manage public-key encryption and identity authentication.
80. DoS: Denial of Service
- A malicious cyberattack aimed at making a targeted host or network resource unavailable to legitimate traffic.
81. DDoS: Distributed Denial of Service
- A DoS attack utilizing multiple distributed compromised hosts (botnets) to flood a target network resource with traffic.
82. MITM: Man-in-the-Middle
- An attack vector where an adversary secretly intercepts and potentially manipulates communications between two trusting endpoints.
96. SIEM: Security Information and Event Management
- A centralized platform aggregating log data and security events across an organization to analyze, correlate, and identify security threats.
97. SOC: Security Operations Center
- A dedicated facility or team that continuously monitors, detects, analyzes, and responds to cybersecurity events.
98. CIA: Confidentiality, Integrity, Availability
- The foundational security model governing data privacy, information accuracy, and resource accessibility.
99. MFA: Multi-Factor Authentication
- An access control policy requiring two or more independent credentials (factors) to authenticate a user identity.

Enterprise Architecture, Delivery, Operations, and Standards

83. SDN: Software-Defined Networking
- An architectural strategy separating the network control plane from the underlying hardware data-forwarding plane.
84. SD-WAN: Software-Defined Wide Area Network
- A software-driven architecture used to manage Wide Area Networks efficiently across distributed multi-site locations.
92. CDN: Content Delivery Network
- A globally distributed network of edge cache servers designed to deliver web content rapidly to end users.
93. SLA: Service Level Agreement
- A formal contractual agreement defining expected performance, uptime metrics, and service standards between a provider and client.
94. RTO: Recovery Time Objective
- The targeted duration of time allowed for systems to be fully restored following a network outage or disaster incident.
95. RPO: Recovery Point Objective
- The maximum allowable data loss timeframe measured backward from an operational disruption incident.
100. IEEE: Institute of Electrical and Electronics Engineers
- A global professional organization that defines and maintains technical standards for computer networking hardware and protocols (e.g., Ethernet and Wi-Fi).