Acronym study
Terms 271–300 of 1001 Cloud Digital Leader acronyms and key terms. Each entry includes a plain-English definition and a link to the full 800-word glossary page with exam context and practice questions.
Term 271
Microsoft Defender for Office 365 is a cloud-based email security service that protects organizations against advanced threats like phishing, malware, and business email compromise by scanning emails, attachments, and links in real time.
Term 272
Defense in depth is a cybersecurity strategy that uses multiple layers of security controls to protect information and systems, so if one layer fails, another layer is already in place to stop the attack.
Term 273
The Demarcation point is the physical or logical boundary where the responsibility for a network or telecommunications line shifts from the service provider to the customer.
Term 274
A Denial-of-service (DoS) attack is an attempt to make a computer, network, or online service unavailable to its intended users by overwhelming it with fake traffic or requests.
Term 275
Denormalization is a database design strategy that adds redundant data to one or more tables to reduce the number of joins needed in queries, improving read performance at the cost of extra storage and more complex writes.
Term 276
Dependency scanning is the automated process of checking software components for known security vulnerabilities and outdated versions.
Term 277
Deployment Manager is a Google Cloud service that lets you define and manage your cloud resources using declarative templates, so you can create, update, and delete infrastructure as a single unit.
Term 278
Detection engineering is the practice of designing, building, and refining security monitoring rules and signals to identify malicious activity in an IT environment.
Term 279
A detective control is a security measure that identifies and reports unwanted or suspicious activity after it has already occurred.
Term 280
A deterrent control is a security measure designed to discourage potential attackers from attempting to breach a system or commit a violation, relying on the perceived threat of consequences.
Term 281
Device risk is the chance that a computer, phone, or other endpoint could cause a security problem or data leak because it is not properly managed or protected.
Term 282
DevSecOps is a software development practice that integrates security into every phase of the DevOps lifecycle, making security a shared responsibility from the start.
Term 283
A DHCP pool is a reserved set of IP addresses that a DHCP server can assign to devices on a network automatically when they request a connection.
Term 284
A DHCP server is a network device or service that automatically assigns IP addresses and other network configuration parameters to devices on a network, eliminating the need for manual configuration.
Term 285
DHCP snooping is a network security feature that filters untrusted DHCP messages to prevent rogue DHCP servers from giving out false IP addresses.
Term 286
The Diamond model is a framework for analyzing cybersecurity intrusions by examining four key components: adversary, capability, infrastructure, and victim.
Term 287
A digital identity is the online representation of a person, device, or entity used to authenticate and authorize access to digital resources.
Term 288
Digital Rights Management (DRM) is a set of technologies used to control how digital content like music, movies, ebooks, or software is accessed, copied, or shared.
Term 289
Digital transformation is the process of using digital technology to fundamentally change how a business operates and delivers value to customers.
Term 290
AWS Direct Connect is a cloud service that lets you create a dedicated private network link from your on-premises data center to AWS, bypassing the public internet for more consistent and secure connectivity.
Term 291
Disaster recovery is a set of policies, procedures, and tools that help an organization restore critical IT systems and data after a disruptive event.
Term 292
A Disaster Recovery Plan (DRP) is a documented, structured approach that outlines how an organization can quickly resume critical IT systems and operations after a disruptive event.
Term 293
A cyberattack where many compromised computers flood a target system with traffic, making it unavailable to legitimate users.
Term 294
A DLP policy is a set of rules that an organization uses to prevent sensitive data from being lost, stolen, or accidentally exposed, whether it is in use, in motion, or at rest.
Term 295
A DMZ (demilitarized zone) is a network segment that sits between an internal private network and the public internet, hosting publicly accessible services while keeping the internal network isolated.
Term 296
DNS is the system that translates human-friendly domain names like example.com into machine-readable IP addresses so computers can find each other on a network.
Term 297
DNS enumeration is the process of systematically querying a Domain Name System (DNS) server to gather information about a target domain, including its subdomains, IP addresses, and mail server records.
Term 298
A DNS log is a record of all Domain Name System queries and responses that pass through a server, providing a trail of which domains were requested, by whom, and when.
Term 299
DNS over HTTPS is a protocol that sends Domain Name System queries and responses over the encrypted HTTPS protocol to protect user privacy and prevent tampering.
Term 300
DNS over TLS encrypts DNS queries using the Transport Layer Security protocol to prevent eavesdropping and tampering.