Acronym study
Terms 241–270 of 863 SC-900 acronyms and key terms. Each entry includes a plain-English definition and a link to the full 800-word glossary page with exam context and practice questions.
Term 241
DomainKeys Identified Mail is an email authentication method that allows a domain to cryptographically sign its outgoing messages so receiving servers can verify the sender's domain is legitimate and the message was not tampered with.
Term 242
A cyberattack that floods a target with traffic or requests to exhaust its resources, making it unavailable to legitimate users.
Term 243
DNS over TLS (DoT) encrypts DNS queries using TLS, ensuring privacy and integrity between clients and resolvers.
Term 244
DREAD is a qualitative risk assessment model used to rank threats by evaluating Damage potential, Reproducibility, Exploitability, Affected users, and Discoverability.
Term 245
Due care is the legal and ethical duty of an organization to take reasonable steps to protect sensitive information and IT systems from harm.
Term 246
Due diligence is the process of systematically reviewing and verifying information, policies, and procedures to identify and manage risks before making a decision or taking an action in an IT or security context.
Term 247
Dumpster diving is the practice of searching through trash to find discarded information or equipment that can be used to compromise security.
Term 248
Dynamic ARP Inspection is a security feature that validates ARP packets on a network to prevent man-in-the-middle attacks by ensuring that only legitimate ARP messages are forwarded.
Term 249
A dynamic group is a group in Microsoft Entra ID (Azure AD) whose membership is automatically updated based on user or device attributes, rather than being manually assigned.
Term 250
Dynamic NAT is a method of mapping multiple private IP addresses to a pool of public IP addresses automatically, allowing many devices to share a limited number of public addresses.
Term 251
EAL, or Evaluation Assurance Level, is a numeric rating from 1 to 7 that measures how thoroughly a computer product has been tested for security, with higher numbers indicating more rigorous testing.
Term 252
EAP is a flexible authentication framework used in network access control, supporting multiple methods like passwords, certificates, and tokens.
Term 253
EAPoL is a network authentication protocol that encapsulates EAP frames over IEEE 802 LANs, enabling port-based access control.
Term 254
eDiscovery is the process of identifying, collecting, and producing electronic information for legal cases or investigations.
Term 255
Endpoint Detection and Response (EDR) is a cybersecurity technology that continuously monitors endpoint devices to detect, investigate, and respond to advanced threats.
Term 256
An EDR alert is a notification generated by Endpoint Detection and Response software when it detects potentially malicious activity or an anomaly on a device like a laptop, server, or workstation.
Term 257
EMS (Enterprise Mobility + Security) is a Microsoft 365 suite that combines mobile device management, mobile application management, identity protection, and information protection tools to securely manage users, devices, and data in a cloud-first environment.
Term 258
A Cisco IOS command that sets a password to protect privileged EXEC mode (enable mode) using a strong, one-way cryptographic hash (MD5 by default), replacing the weaker 'enable password' command.
Term 259
The Encrypting File System (EFS) is a Windows feature that encrypts individual files and folders on an NTFS volume so that only authorized users can read them.
Term 260
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
Term 261
Encryption at rest is the practice of securing stored data by converting it into an unreadable format using cryptographic algorithms, so that even if physical or digital access to the storage medium is obtained, the data remains confidential.
Term 262
Encryption in transit is the process of scrambling data as it moves between two points over a network so that anyone who intercepts it cannot read it.
Term 263
An encryption key is a string of random characters used by an algorithm to lock (encrypt) and unlock (decrypt) data, ensuring only authorized parties can read it.
Term 264
End-of-life means a product or service is no longer being sold, updated, or supported by the manufacturer, and users should plan to upgrade or replace it.
Term 265
End-of-support means a company will no longer provide updates, security patches, or technical help for a product, leaving it open to risks.
Term 266
An End-user License Agreement (EULA) is a legal contract between a software creator and the person who installs or uses the software, outlining what the user can and cannot do with it.
Term 267
Endpoint analytics is the practice of collecting and analyzing data from user devices to monitor their health, performance, and security in real time.
Term 268
Endpoint detection and response (EDR) is a cybersecurity solution that continuously monitors endpoint devices for suspicious activity and automatically responds to threats to stop attacks in real time.
Term 269
Endpoint protection is a security approach that safeguards devices like laptops, phones, and servers from malicious threats by monitoring, detecting, and blocking attacks at the device level.
Term 270
An endpoint security baseline is a set of minimum security configurations and controls applied to devices like laptops, servers, and mobile devices to protect against threats.