Acronym study
Terms 631–660 of 863 SC-900 acronyms and key terms. Each entry includes a plain-English definition and a link to the full 800-word glossary page with exam context and practice questions.
Term 631
Risk-based vulnerability management is a cybersecurity approach that prioritizes the fixing of security weaknesses based on the level of risk they pose to an organization's specific environment, rather than just addressing all vulnerabilities in the order they are found.
Term 632
A Rogue Access Point is an unauthorized wireless access point connected to a network without the network administrator's permission, creating a serious security vulnerability.
Term 633
A role is a named set of permissions that can be assigned to users or groups to control access to resources in an IT environment.
Term 634
Role assignment is the process of granting a specific set of permissions to a user, group, or service principal so they can perform certain actions within a system.
Term 635
A role group is a collection of permissions in Microsoft 365 or Azure that bundles multiple administrative roles into a single unit for easier assignment.
Term 636
The root user is the superuser on Linux and Unix-like systems with unrestricted permissions to execute any command and access any file on the system.
Term 637
A rootkit is a type of malware that hides its presence and the presence of other malicious software on a computer, often by modifying the operating system itself.
Term 638
Route 53 is Amazon Web Services’ cloud-based Domain Name System (DNS) web service that translates human-readable domain names into IP addresses and routes end-user requests to internet applications.
Term 639
A route table is a set of rules, called routes, that determine where network traffic from a subnet or virtual network is directed.
Term 640
Recovery Point Objective (RPO) is the maximum acceptable amount of data loss measured in time, defining how recent data must be to resume operations after a disruption.
Term 641
Recovery Time Objective is the maximum acceptable time to restore a system or data after a disaster, defining how quickly normal operations must resume.
Term 642
Rule-based access control (RuBAC) is a method of managing access to resources by evaluating a set of predefined rules that combine conditions such as time, location, device, and user attributes to allow or deny access.
Term 643
An S3 bucket policy is a JSON-based resource-based access control document that defines who can access an Amazon S3 bucket and its objects, and what actions they can perform.
Term 644
An S3 lifecycle policy is a set of rules that automatically transitions objects between storage classes or deletes them after a specified time to optimize cost and manage data lifecycles.
Term 645
Safe Attachments is a Microsoft Defender for Office 365 feature that opens email attachments in a virtual sandbox to detect and block malicious content before they reach your inbox.
Term 646
Safe Links is a Microsoft Defender for Office 365 feature that scans URLs in emails and documents in real time to protect users from malicious websites.
Term 647
A safeguard is a control, measure, or action designed to protect an organization's assets from threats, vulnerabilities, and risks.
Term 648
Security Assertion Markup Language (SAML) is an open standard that allows one system to securely tell another system that a user is who they say they are, without sharing the user's password.
Term 649
Static Application Security Testing is a white-box method of analyzing source code, bytecode, or compiled binaries for security vulnerabilities without executing the program.
Term 650
A flexible pricing model from cloud providers that gives you discounted rates on compute usage in exchange for a commitment to a consistent amount of spending over a one- or three-year term.
Term 651
An SBOM is a formal, machine-readable inventory of all software components and dependencies used in a software application or system.
Term 652
SCA (Software Composition Analysis) is a security testing method that automatically identifies open-source components, libraries, and dependencies in software to find known vulnerabilities and license compliance issues.
Term 653
SCADA is an industrial control system that monitors and controls infrastructure processes like power grids, water treatment, and pipelines.
Term 654
In IT, scope defines the boundaries, goals, and deliverables of a project, assessment, or engagement, specifying what is included and what is excluded.
Term 655
SCP (Secure Copy Protocol) is a network protocol used to securely transfer files between computers over an encrypted SSH connection.
Term 656
The Software Development Life Cycle (SDLC) is a structured process used by IT teams to plan, create, test, and deploy software in a reliable and organized way.
Term 657
Seamless SSO is a technology that lets you sign into multiple applications automatically after logging in once, without being prompted for credentials again.
Term 658
A Secret Manager is a centralized tool that securely stores, manages, and controls access to sensitive information like passwords, API keys, and certificates, often automating their rotation and injection into applications.
Term 659
Secrets management is the practice of securely storing, controlling access to, and regularly rotating sensitive credentials like passwords, API keys, and certificates used by applications and services.
Term 660
AWS Secrets Manager is a fully managed service that helps you protect access to your applications, services, and IT resources by securely storing, rotating, and controlling access to secrets like database passwords, API keys, and credentials.