AWS Certified Advanced Networking - Specialty (ANS-C01) Exam

A SIEM collects logs and events from across an organisation's systems into one searchable store, correlates them into alerts, and retains them for investigation and compliance.

Vulnerability management is the continuous process of finding weaknesses in systems, deciding which ones matter in context, fixing or mitigating them, and confirming the fix.

A penetration test is an authorised, scoped attempt by a skilled tester to exploit weaknesses in a system the way an attacker would, ending in a report the owner can act on.

The OSI model is a seven-layer reference framework that separates networking into physical transmission, link, network, transport, session, presentation and application concerns, used to reason about where a problem sits rather than to describe any real protocol stack.

IP addressing is the scheme that gives every interface on a network a numeric address, with IPv4's four-byte addresses now supplemented by IPv6's much larger space, and with private ranges reserved for use inside networks that reach the internet through translation.

Subnetting divides an address block into smaller networks by choosing how many leading bits identify the network, written as a prefix length or a subnet mask, so that each subnet has its own range of host addresses and its own routing entry.

PaaS is a hosting layer that takes your source code and turns it into a running application for you, owning the machines, the runtime, the build, the routing, the certificates and the restarts, so that shipping becomes a push rather than a project.

Serverless computing runs your code only while an event is calling it: the provider conjures an execution environment on demand, throws it away afterwards, and charges for work performed instead of for capacity sitting idle.

A container is an application packaged together with the libraries and configuration it needs, run as an isolated process on a host that is already switched on, so the same package behaves the same way on a laptop, in a build pipeline and in production.

Shared hosting puts your website on a machine that is simultaneously running hundreds of other people's, pooling its processor, memory and disk between all of you, which is both why it costs so little and why your speed partly depends on strangers.

A VPS is a software-defined slice of one physical machine that behaves as a server in its own right, with its own operating system, reserved CPU, memory and disk, and administrative access down to the kernel.

A dedicated server is an entire physical computer rented by a single customer, with no hypervisor taking a share and no other tenants on the hardware, chosen when consistent performance, specific components or provable isolation matter more than the ability to resize in seconds.