【AWS DOP-C02問題集】AWS DevOps エンジニア - プロフェッショナル 実践テストコース

A penetration test is an authorised, scoped attempt by a skilled tester to exploit weaknesses in a system the way an attacker would, ending in a report the owner can act on.

Incident response is the prepared, practised process by which an organisation detects a security incident, contains it, removes the cause, recovers, and learns from what happened.

Threat modelling is the structured practice of asking what could go wrong with a system, who would make it go wrong and how, while the design can still be changed cheaply.

Subnetting divides an address block into smaller networks by choosing how many leading bits identify the network, written as a prefix length or a subnet mask, so that each subnet has its own range of host addresses and its own routing entry.

Routing is how packets move between networks: each router holds a table of known destinations and the next hop toward each, learned by configuration or by a protocol, and forwards each packet to the most specific match.

Switching is the forwarding of frames within a single network segment by a device that learns which hardware address sits on which port and sends each frame only where it needs to go.

Kubernetes is an open-source system that runs containers across a cluster of machines, keeping the number and placement of running copies matched to a declared desired state, and restarting, rescheduling and scaling them without a person intervening.

IaaS is the layer of cloud computing where you rent raw infrastructure through an API, meaning virtual machines, disks and networks, and take responsibility for the operating system and everything you install above it.

PaaS is a hosting layer that takes your source code and turns it into a running application for you, owning the machines, the runtime, the build, the routing, the certificates and the restarts, so that shipping becomes a push rather than a project.

Uptime is the proportion of time a service answers requests, quoted in nines, and a service level agreement is the contract clause setting out how that proportion is counted and what the provider owes when it falls short.

Shared hosting puts your website on a machine that is simultaneously running hundreds of other people's, pooling its processor, memory and disk between all of you, which is both why it costs so little and why your speed partly depends on strangers.

A VPS is a software-defined slice of one physical machine that behaves as a server in its own right, with its own operating system, reserved CPU, memory and disk, and administrative access down to the kernel.