Acronym study
Terms 391–420 of 956 220-1102 acronyms and key terms. Each entry includes a plain-English definition and a link to the full 800-word glossary page with exam context and practice questions.
Term 391
An IAM misconfiguration occurs when identity and access management settings are incorrectly set, granting too many or too few permissions to users or services, which can lead to security breaches or operational failures.
Term 392
An IAM policy is a set of rules that determines who can access specific cloud resources and what actions they are allowed to perform.
Term 393
An IAM role is a set of permissions that an entity can assume temporarily to access cloud resources securely.
Term 394
An IAM user is an identity created in AWS Identity and Access Management that represents a person or service interacting with AWS resources, with its own credentials and permissions.
Term 395
iCloud is Apple's cloud storage and cloud computing service that lets users store data like photos, documents, and backups on remote servers and sync them across their Apple devices.
Term 396
ICMP is a network-layer protocol used by network devices to send error messages and operational information about network connectivity.
Term 397
An ICS is a system of networked devices used to monitor and control industrial processes, such as manufacturing or power generation.
Term 398
Idempotency means that an operation can be performed multiple times without changing the result beyond the first application.
Term 399
Identity and access management (IAM) is the security discipline that ensures the right individuals access the right resources at the right times for the right reasons.
Term 400
A security model where trust is determined by user identity and context rather than the network location, treating identity itself as the primary boundary for access control.
Term 401
Identity protection is the set of policies, technologies, and practices used to secure digital identities and prevent unauthorized access to systems and data.
Term 402
An identity provider (IdP) is a system that creates, stores, and manages digital identities and authenticates users for other applications and services.
Term 403
An IDS is a security system that monitors network or system traffic for suspicious activity and alerts administrators to potential threats, but does not actively block them.
Term 404
IIoT (Industrial Internet of Things) connects industrial machines and sensors to networks for data collection, analysis, and automation in manufacturing, energy, and utilities.
Term 405
IKE (Internet Key Exchange) is a protocol used to set up a secure, authenticated communication channel between two parties by establishing and managing the Security Associations for IPsec.
Term 406
An image is a complete snapshot of a system's operating system, applications, and settings, used to deploy or restore computing environments quickly.
Term 407
An image backup is a complete, sector-by-sector copy of an entire storage device or partition, capturing the operating system, applications, settings, and all data exactly as they exist at the time of the backup.
Term 408
Impersonation is a security attack where an attacker pretends to be a legitimate person or system to gain unauthorized access, steal data, or commit fraud.
Term 409
Implicit deny is a security rule that automatically blocks any network traffic that is not explicitly allowed by an access control list or firewall rule.
Term 410
In-plane Switching (IPS) is a type of LCD screen technology that gives you wide viewing angles and accurate colors, making it ideal for professional work and exams that test display knowledge.
Term 411
An inbound ACL is a set of rules applied to network traffic entering an interface that decides whether to allow or block that traffic based on criteria like source IP, destination port, or protocol.
Term 412
An incident is a security event that violates an organization's policies or threatens its data, systems, or operations, requiring a structured response.
Term 413
Incident documentation is the practice of recording every detail of a cybersecurity or IT incident, from detection to resolution, to ensure accurate analysis, legal compliance, and process improvement.
Term 414
Incident response is the structured approach an organization uses to identify, contain, and recover from cybersecurity incidents like data breaches or ransomware attacks.
Term 415
An incremental backup is a backup method that only copies data that has changed since the last backup, whether that last backup was full or incremental.
Term 416
An indicator of attack (IOA) is a sign that an attack is actively occurring or about to occur, focusing on attacker behavior and intent rather than just the artifacts left behind.
Term 417
An indicator of compromise is a piece of digital evidence—such as a suspicious file hash, IP address, or unusual network pattern—that suggests a system may have been breached by an attacker.
Term 418
An Industrial Control System (ICS) is a network of computers and devices that monitors and controls industrial machinery, such as power plants, water treatment facilities, and assembly lines.
Term 419
The Industrial Internet of Things (IIoT) is a network of physical devices, machines, and sensors in industrial settings that collect and exchange data over the internet to improve efficiency and safety.
Term 420
Information barriers are policies and technical controls that prevent the unauthorized flow of sensitive information between different parts of an organization to avoid conflicts of interest and ensure compliance.