CCNA 200-301 Vol 1: Quantum Mastery Practice Tests

Identity and access management is the set of policies and systems that create, verify, govern and retire identities and decide what each one may reach.

Least privilege is the principle that every user, process and system should hold only the access required for its current task, and no more.

A firewall is a control that allows or blocks network traffic according to rules about its source, destination, protocol and, in modern forms, its content and the application it belongs to.

A VLAN divides one physical switched network into several logical segments, each with its own broadcast domain, by tagging frames with a VLAN identifier so that ports and devices in different VLANs cannot reach each other without a router.

Network address translation rewrites the addresses and ports in packets as they cross a network boundary, most commonly so that many devices with private addresses can share one public address to reach the internet.

DHCP is the protocol by which a device joining a network asks for and receives an address, a subnet mask, a default gateway and DNS servers from a server, for a limited lease period, so that nobody has to configure addresses by hand.

IaaS is the layer of cloud computing where you rent raw infrastructure through an API, meaning virtual machines, disks and networks, and take responsibility for the operating system and everything you install above it.

PaaS is a hosting layer that takes your source code and turns it into a running application for you, owning the machines, the runtime, the build, the routing, the certificates and the restarts, so that shipping becomes a push rather than a project.

Serverless computing runs your code only while an event is calling it: the provider conjures an execution environment on demand, throws it away afterwards, and charges for work performed instead of for capacity sitting idle.

A CDN is a worldwide network of servers that answers requests for your site from a location near the person asking, instead of sending every request back to the single machine your site runs on.

DNS is the distributed lookup system that turns a hostname such as getting-digital.net into the IP address a browser can connect to, by walking a chain of nameservers whose answers are then cached for a lifetime the domain's owner publishes.

SSL/TLS is the protocol that encrypts the connection between a browser and a server and, by way of a certificate signed by a certificate authority, proves the server is entitled to answer for the domain in the address bar.