Term 691
SELinux
SELinux (Security-Enhanced Linux) is a mandatory access control (MAC) security mechanism built into the Linux kernel that enforces policies to restrict how processes and users interact with files, devices, and system resources.
Acronym study
Terms 691–720 of 863 SC-900 acronyms and key terms. Each entry includes a plain-English definition and a link to the full 800-word glossary page with exam context and practice questions.
Term 691
SELinux (Security-Enhanced Linux) is a mandatory access control (MAC) security mechanism built into the Linux kernel that enforces policies to restrict how processes and users interact with files, devices, and system resources.
Term 692
Sender Policy Framework (SPF) is an email authentication method that prevents spammers from sending emails that appear to come from your domain by listing which servers are allowed to send email for that domain.
Term 693
A sensitivity label is a metadata tag applied to digital content that classifies the content's level of confidentiality and governs how it can be shared, protected, and accessed.
Term 694
Separation of duties is a security principle that splits critical tasks and privileges among multiple people to prevent fraud, errors, and abuse of power.
Term 695
Serverless security is the practice of protecting applications that run on serverless computing platforms, where the cloud provider manages the infrastructure and the customer is responsible for securing the code, data, and access controls.
Term 696
A service account is a special type of account used by an application or a virtual machine, rather than a human user, to authenticate and interact with cloud services and APIs securely.
Term 697
A Service Control Policy (SCP) is a centralized governance tool in AWS Organizations that allows you to define and enforce maximum permissions for all accounts in an organization, acting as a security guardrail that limits what actions principals can perform.
Term 698
Service Health is a monitoring feature in Microsoft 365 and Azure that provides real-time and historical status of cloud services, including outages, advisories, and incidents.
Term 699
A service level agreement (SLA) is a documented contract that defines the specific level of service a provider guarantees to a customer, including performance metrics, responsibilities, and remedies for failures.
Term 700
A service principal is an identity created for an application or automated tool to access cloud resources securely without using a human user account.
Term 701
The Service Trust Portal is a Microsoft website that gives IT professionals and auditors access to compliance documentation, audit reports, and security information about Microsoft cloud services.
Term 702
A session token is a unique identifier generated by a server that allows a user to remain authenticated without re-entering their credentials during a single browsing session.
Term 703
sFlow is a network monitoring technology that samples packets and exports traffic statistics to a central collector for analyzing network performance and security.
Term 704
SFTP (Secure File Transfer Protocol) is a network protocol that provides secure file transfer over SSH, encrypting both commands and data.
Term 705
SGID stands for Set Group ID, a Unix/Linux file permission that allows a process or executable to run with the group privileges of the file's group owner, not the user who runs it.
Term 706
Shared access is a permission model where multiple users, systems, or services are granted common access rights to a resource such as a file, database, network drive, or cloud storage.
Term 707
A shared access signature (SAS) is a secure, time-limited URL that grants granular access to specific resources in cloud storage, allowing you to delegate permissions without sharing your account keys.
Term 708
A shared account is a user account that is used by multiple people instead of being assigned to a single individual.
Term 709
Shared responsibility is a cloud security model where the cloud provider and the customer each own distinct parts of security and compliance duties.
Term 710
A shared secret is a piece of data, like a password or cryptographic key, known only to the parties involved in a secure communication, used to verify identity and protect information.
Term 711
SharePoint Online is a cloud-based collaboration platform from Microsoft that lets teams create, store, organize, and share content securely from anywhere.
Term 712
A SharePoint role is a set of permissions that controls what a user or group can do within a SharePoint environment, such as viewing, editing, or managing content and settings.
Term 713
A shield in IT networking is a conductive layer around a cable or device that blocks electromagnetic interference to protect signal integrity.
Term 714
Shift left security is the practice of integrating security testing and controls earlier in the software development lifecycle, rather than waiting until after deployment.
Term 715
A social engineering attack where an attacker observes a victim's screen or keyboard to steal passwords or sensitive information.
Term 716
A side-channel attack is a type of security exploit that gathers information from a system by observing its physical or secondary outputs—such as timing, power consumption, or electromagnetic emissions—rather than directly attacking the software or cryptographic algorithm.
Term 717
SIEM (Security Information and Event Management) is a system that collects and analyzes log data from across an IT environment to detect and respond to security threats in real time.
Term 718
A SIEM query is a search command used in a Security Information and Event Management system to find, filter, and analyze security-related log data from across an organization's IT environment.
Term 719
A forged Kerberos service ticket that grants access to a specific service in a Windows domain without requiring the user's password.
Term 720
SMTPS is a secure version of the Simple Mail Transfer Protocol that uses encryption to protect email messages during transmission between email servers.