CCSO - Certified Cloud Security Officer

Least privilege is the principle that every user, process and system should hold only the access required for its current task, and no more.

A firewall is a control that allows or blocks network traffic according to rules about its source, destination, protocol and, in modern forms, its content and the application it belongs to.

A virtual private network carries traffic through an encrypted tunnel over a public network so that a remote device or site behaves as though it were connected to a private one.

Network address translation rewrites the addresses and ports in packets as they cross a network boundary, most commonly so that many devices with private addresses can share one public address to reach the internet.

DHCP is the protocol by which a device joining a network asks for and receives an address, a subnet mask, a default gateway and DNS servers from a server, for a limited lease period, so that nobody has to configure addresses by hand.

A wireless LAN connects devices to a network over radio using the 802.11 family of standards, through access points that bridge the wireless medium onto the wired network and enforce the authentication and encryption that the shared airwaves demand.

Kubernetes is an open-source system that runs containers across a cluster of machines, keeping the number and placement of running copies matched to a declared desired state, and restarting, rescheduling and scaling them without a person intervening.

IaaS is the layer of cloud computing where you rent raw infrastructure through an API, meaning virtual machines, disks and networks, and take responsibility for the operating system and everything you install above it.

PaaS is a hosting layer that takes your source code and turns it into a running application for you, owning the machines, the runtime, the build, the routing, the certificates and the restarts, so that shipping becomes a push rather than a project.

Managed hosting is any plan where the provider runs the server on your behalf, covering updates, hardening, monitoring, backups and tuning, so the thing being sold is administration time with a machine attached rather than the machine itself.

Cloud hosting is the model in which servers, storage and databases are created on demand through an API from a provider's pooled hardware and billed for the time they exist, rather than rented as a fixed box by the month.

A web server is the program listening on a network port for HTTP requests and answering them, either by returning a file from disk or by handing the request to application code behind it.