CCNP ENTERPRISE - ENCOR-350-401 PART1/5

A SIEM collects logs and events from across an organisation's systems into one searchable store, correlates them into alerts, and retains them for investigation and compliance.

Vulnerability management is the continuous process of finding weaknesses in systems, deciding which ones matter in context, fixing or mitigating them, and confirming the fix.

A penetration test is an authorised, scoped attempt by a skilled tester to exploit weaknesses in a system the way an attacker would, ending in a report the owner can act on.

The OSI model is a seven-layer reference framework that separates networking into physical transmission, link, network, transport, session, presentation and application concerns, used to reason about where a problem sits rather than to describe any real protocol stack.

IP addressing is the scheme that gives every interface on a network a numeric address, with IPv4's four-byte addresses now supplemented by IPv6's much larger space, and with private ranges reserved for use inside networks that reach the internet through translation.

Subnetting divides an address block into smaller networks by choosing how many leading bits identify the network, written as a prefix length or a subnet mask, so that each subnet has its own range of host addresses and its own routing entry.

Managed hosting is any plan where the provider runs the server on your behalf, covering updates, hardening, monitoring, backups and tuning, so the thing being sold is administration time with a machine attached rather than the machine itself.

Cloud hosting is the model in which servers, storage and databases are created on demand through an API from a provider's pooled hardware and billed for the time they exist, rather than rented as a fixed box by the month.

A web server is the program listening on a network port for HTTP requests and answering them, either by returning a file from disk or by handing the request to application code behind it.