Term 241
Data classification
Data classification is the process of organizing data into categories based on its sensitivity, value, and criticality to an organization, so that appropriate security controls can be applied.
Acronym study
Terms 241–270 of 1001 Cloud Digital Leader acronyms and key terms. Each entry includes a plain-English definition and a link to the full 800-word glossary page with exam context and practice questions.
Term 241
Data classification is the process of organizing data into categories based on its sensitivity, value, and criticality to an organization, so that appropriate security controls can be applied.
Term 242
An entity that determines the purposes and means of processing personal data.
Term 243
A data custodian is the person or team responsible for the safe handling, storage, and transport of data on behalf of the data owner.
Term 244
A data lake is a centralized storage repository that holds vast amounts of raw data in its native format until it is needed for analysis.
Term 245
A data lakehouse is a modern data architecture that combines the flexibility of a data lake with the reliability and performance of a data warehouse on a single platform.
Term 246
A Data Lifecycle Manager is a system or set of policies that automates the movement, protection, retention, and deletion of data from creation to disposal, ensuring compliance and efficient storage usage.
Term 247
Data Loss Prevention (DLP) is a set of tools and processes that help organizations stop sensitive information from being shared, leaked, or stolen, whether accidentally or on purpose.
Term 248
Data masking is a security technique that replaces sensitive data with realistic but fictional data so it can be used safely in non-production environments.
Term 249
A senior-level person who is accountable for the classification, protection, and appropriate use of a specific set of data within an organization.
Term 250
The part of a network device that actually forwards data packets from one interface to another based on decisions made by the control plane.
Term 251
A data processor is a person or organization that processes personal data on behalf of a data controller, following the controller's instructions and under their authority.
Term 252
Data protection refers to the practices and technologies used to safeguard personal and sensitive information from unauthorized access, loss, or corruption.
Term 253
Data remanence is the residual representation of data that remains on a storage medium even after attempts to erase or remove it.
Term 254
Data retention is the practice of keeping data for a specific period to meet legal, business, or compliance needs, and then securely disposing of it.
Term 255
Data sanitization is the process of deliberately, permanently, and irreversibly removing or destroying data stored on a device or media so that it cannot be recovered or reconstructed by any known method.
Term 256
A data warehouse is a central repository that stores large amounts of structured data from multiple sources, optimized for querying and analysis rather than day-to-day transactions.
Term 257
Dataflow is a Google Cloud managed service that processes and transforms data in real-time or batch mode using Apache Beam pipelines.
Term 258
Dataproc is a managed cloud service for running Apache Spark and Apache Hadoop clusters, allowing you to process large datasets quickly and economically.
Term 259
A datastream is a continuous, ordered flow of data that is generated and transmitted from a source to a destination for real-time processing or analysis.
Term 260
DAX (DynamoDB Accelerator) is a fully managed, highly available, in-memory cache for Amazon DynamoDB that provides microsecond read latency.
Term 261
A DDoS (Distributed Denial-of-Service) attack is a malicious attempt to disrupt normal traffic of a targeted server, service, or network by overwhelming it with a flood of internet traffic from multiple compromised systems.
Term 262
A deauthentication attack is a wireless network exploit where an attacker sends fake disconnection frames to force devices off a Wi-Fi network, often used to capture handshake data or disrupt connectivity.
Term 263
Decryption is the process of converting encrypted or scrambled data back into its original, readable form using a specific key or method.
Term 264
A Dedicated Host is a physical server in the cloud that is reserved exclusively for your use, giving you control over which instances run on that host and visibility into the underlying hardware.
Term 265
A configuration in IT systems where security services or appliances operate in an isolated, single-purpose environment to prevent interference with other functions and reduce attack surface.
Term 266
Deep learning is a subset of machine learning that uses multi-layered neural networks to automatically learn patterns from large amounts of data.
Term 267
Microsoft Defender for Cloud is a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) that provides unified security management and threat protection across hybrid and multi-cloud environments.
Term 268
Defender for Cloud Apps is a Microsoft cloud access security broker (CASB) that helps you discover, protect, and govern your cloud applications and data across multiple cloud environments.
Term 269
Microsoft Defender for Endpoint is a cloud-delivered enterprise security solution designed to protect devices from cyber threats using behavioral analysis, machine learning, and automated investigation.
Term 270
Defender for Identity is a cloud-based security solution that detects, investigates, and responds to advanced identity threats targeting on-premises Active Directory and cloud identities.