Similar terms. Important differences.
180 side-by-side comparisons of the concepts exam writers love to swap.
Networking Fundamentals
Transmission Control Protocol vs User Datagram ProtocolTCP is a phone call with confirmation; UDP is shouting into the room and hoping it lands.Hub vs Switch vs RouterHubs shout, switches whisper to one MAC, routers mail letters between towns.OSI Model vs TCP/IP ModelOSI has seven layers to learn; TCP/IP has four layers that actually run the Internet.IPv4 vs IPv6IPv6 is four times longer in bits, with no broadcasts and no ARP.Public IP Address vs Private IP AddressPrivate addresses are like extension numbers; public addresses are the company's main phone line.Network Address Translation vs Port Address TranslationPAT is NAT that overloads one public IP by juggling port numbers.Dynamic Host Configuration Protocol vs Domain Name SystemDHCP gives you your address; DNS gives you everyone else's.Unicast vs Multicast vs BroadcastUnicast is a letter, multicast is a subscription, broadcast is a megaphone.Half Duplex vs Full DuplexHalf duplex is a walkie-talkie; full duplex is a phone call.Local Area Network vs Metropolitan Area Network vs Wide Area NetworkLAN is your building, MAN is your city, WAN is the world.Single-Mode Fiber vs Multimode FiberSingle-mode is a single laser beam going far; multimode is many beams bouncing a short way.Cat 5e vs Cat 6 vs Cat 6a5e for gig, 6 for short 10G, 6a for the full 100 meters of 10G.Straight-Through Cable vs Crossover CableSame ends, different devices; different ends, same devices.Bandwidth vs Throughput vs LatencyBandwidth is the pipe size, throughput is the water that flows, latency is how long the water takes to arrive.MAC Address vs IP AddressThe MAC is your name tag in the room; the IP is your mailing address in the world.Forward Proxy vs Reverse ProxyForward proxy speaks for the people going out; reverse proxy speaks for the servers being reached.ping vs traceroute / tracertPing asks 'are you there?'; traceroute asks 'how do I get there?'PoE vs PoE+ vs PoE++Each plus roughly doubles the watts: 15, 30, then 60 to 90.
Routing & Switching
Static Routing vs Dynamic RoutingStatic is a printed map; dynamic is GPS that reroutes around traffic.Open Shortest Path First vs Enhanced Interior Gateway Routing ProtocolOSPF maps the whole city; EIGRP trusts its neighbors and keeps a backup ready.Distance Vector Routing vs Link-State RoutingDistance vector trusts gossip; link state reads the map itself.Internal BGP vs External BGPeBGP talks to the neighbors next door; iBGP passes the news around the house.Administrative Distance vs MetricAD picks which source to believe; metric picks which path within that source.Access Port vs Trunk PortAccess is a single-lane road to a host; a trunk is a multilane highway with labeled lanes.VLAN vs SubnetA VLAN draws walls on the switch; a subnet draws walls in the address book.Spanning Tree Protocol vs Rapid Spanning Tree ProtocolRapid STP collapses five states into three and seconds into a blink.HSRP vs VRRP vs GLBPHSRP is Cisco's standby, VRRP is everyone's standby, GLBP shares the load.Collision Domain vs Broadcast DomainSwitches break collisions, routers break broadcasts.Standard ACL vs Extended ACLStandard sees only who is sending; extended sees who, where, and what.LACP vs PAgPLACP is Active and open; PAgP is Desirable but Cisco-only.MPLS vs SD-WANMPLS is a private toll road; SD-WAN is a smart navigator that uses every road you have.
Wireless & Mobility
2.4 GHz Band vs 5 GHz Band vs 6 GHz BandLower frequency goes farther; higher frequency goes faster.Autonomous Access Point vs Lightweight Access PointAutonomous APs think for themselves; lightweight APs take orders from the controller.Wi-Fi 5 vs Wi-Fi 6/6E vs Wi-Fi 7Wi-Fi 5 got wide, Wi-Fi 6 got efficient, Wi-Fi 7 got multi-link.SSID vs BSSID vs ESSIDSSID is the name, BSSID is the specific radio, ESSID is the name stretched across many radios.Omnidirectional Antenna vs Directional AntennaOmni is a light bulb; directional is a flashlight.RSSI vs Signal-to-Noise RatioRSSI is how loud the speaker is; SNR is how loud compared to the room.Co-Channel Interference vs Adjacent Channel InterferenceCo-channel means waiting in line; adjacent channel means talking over each other.MIMO vs MU-MIMOMIMO gives one client more lanes; MU-MIMO gives several clients their own lanes at once.
Cloud Computing
Infrastructure as a Service vs Platform as a Service vs Software as a ServiceIaaS rents the kitchen, PaaS rents a ready cooking station, SaaS just serves the meal.Public Cloud vs Private Cloud vs Hybrid CloudPublic is a hotel, private is your own house, hybrid is your house with a hotel on speed dial.Scalability vs ElasticityScalable can grow; elastic grows and shrinks on its own.Horizontal Scaling vs Vertical ScalingScale out adds more horses; scale up gets a bigger horse.Region vs Availability ZoneZones protect you from a building failing; regions protect you from a city failing.Capital Expenditure vs Operational ExpenditureCapEx buys the car; OpEx pays for the ride share.Security Group vs Network ACLSecurity groups remember the conversation; NACLs check every packet like they've never met.On-Demand Instances vs Reserved Instances / Savings Plans vs Spot InstancesOn-demand is flexible, reserved is cheap for commitment, spot is cheapest but can vanish.Multi-Cloud vs Hybrid CloudMulti-cloud is many clouds; hybrid is cloud plus your own data center.Rehost vs Replatform vs RefactorRehost moves it, replatform tweaks it, refactor rebuilds it.
DevOps & Automation
Continuous Integration vs Continuous Delivery vs Continuous DeploymentDelivery means ready to ship; deployment means already shipped.Containers vs Virtual MachinesVMs each bring their own house; containers are apartments sharing one foundation.Docker vs KubernetesDocker builds and runs the shipping containers; Kubernetes runs the port.Ansible vs TerraformTerraform builds the house; Ansible furnishes it.Declarative vs ImperativeDeclarative says where; imperative says how.git merge vs git rebaseMerge records what happened; rebase rewrites it to look tidy.git fetch vs git pullFetch looks; pull looks and leaps.Blue-Green Deployment vs Canary DeploymentBlue-green flips a switch; canary sends one bird into the mine first.JSON vs YAML vs XMLJSON has braces, YAML has spaces, XML has tags.NETCONF vs RESTCONFNETCONF speaks XML over SSH; RESTCONF speaks REST over HTTPS.
Systems & Data Center
Type 1 Hypervisor vs Type 2 HypervisorType 1 is the foundation; Type 2 is a guest in someone else's house.RAID 0 vs RAID 1 vs RAID 5RAID 0 has zero redundancy; RAID 1 is one copy of everything; RAID 5 adds parity for one failure.Storage Area Network vs Network Attached Storage vs Direct Attached StorageNAS shares files, SAN shares disks, DAS shares nothing.Block Storage vs File Storage vs Object StorageBlock is a raw disk, file is a shared folder, object is a giant bucket of labeled items.Full Backup vs Incremental Backup vs Differential BackupIncremental is since the last anything; differential is since the last full.Hard Link vs Symbolic (Soft) LinkA hard link is a second name for the same file; a symlink is a signpost to a name.chmod vs chownchmod changes the mode; chown changes the owner.SIGTERM vs SIGKILLSIGTERM says please; SIGKILL doesn't ask.Spine-Leaf Architecture vs Three-Tier ArchitectureSpine-leaf means every rack is two hops from every other rack.
IT Support & Hardware
Hard Disk Drive vs SATA SSD vs NVMe SSDSpinning, SATA-limited, or PCIe-fast: same job, three speeds.BIOS vs UEFIUEFI is the BIOS that grew up: bigger disks, Secure Boot, and a mouse.Master Boot Record vs GUID Partition TableMBR is limited to 2 TB and 4 partitions; GPT is practically limitless.NTFS vs FAT32 vs exFATNTFS for Windows, FAT32 for everything old, exFAT for big files on removable media.Workgroup vs DomainA workgroup is a group of neighbors; a domain has a city hall.HDMI vs DisplayPort vs DVIHDMI for the living room, DisplayPort for the desk, DVI for the storage closet.RAM vs ROMRAM forgets when you unplug; ROM remembers forever.Laser Printer vs Inkjet Printer vs Thermal PrinterLaser bakes powder, inkjet sprays liquid, thermal uses heat alone.
Collaboration, Voice & AV
SIP vs H.323SIP talks like the web; H.323 talks like the old telecom world.G.711 vs G.729G.711 is the full 64k; G.729 squeezes the call to 8k.Latency vs Jitter vs Packet LossLatency is late, jitter is uneven, loss is gone.DSCP vs CoSCoS lives in the frame and dies at the router; DSCP lives in the packet and travels end to end.Balanced Audio vs Unbalanced AudioBalanced cables cancel the noise; unbalanced cables carry it along.PRI vs SIP TrunkPRI is a fixed bundle of 23 phone lines on copper; SIP trunks are phone lines delivered as data.
Data & Analytics
SQL (Relational) Databases vs NoSQL DatabasesSQL is a spreadsheet with strict rules; NoSQL is a filing cabinet that takes any shape.Data Warehouse vs Data Lake vs Data LakehouseWarehouse is a tidy store, lake is a raw reservoir, lakehouse is a reservoir with plumbing.OLTP vs OLAPOLTP records the sale; OLAP explains the sales.ETL vs ELTETL cleans before it moves in; ELT moves in, then cleans.Structured Data vs Semi-Structured Data vs Unstructured DataStructured has columns, semi-structured has tags, unstructured has neither.Primary Key vs Foreign KeyThe primary key is who you are; the foreign key is who you belong to.Star Schema vs Snowflake SchemaA star keeps each point simple; a snowflake branches each point out.WHERE Clause vs HAVING ClauseWHERE filters rows going in; HAVING filters groups coming out.
Security Fundamentals & Crypto
Symmetric Encryption vs Asymmetric EncryptionSymmetric is one key and fast; asymmetric is two keys and solves the key-sharing problem.Hashing vs Encryption vs EncodingHash to verify, encrypt to hide, encode to format.Authentication vs Authorization vs AccountingAuthN = identity, AuthZ = permissions, Accounting = the receipt.Digital Signature vs Digital CertificateThe signature signs the message; the certificate vouches for the signer.HMAC vs Digital SignatureShared key, shared blame: HMAC cannot prove which party sent it.Block Cipher vs Stream CipherBlock ciphers chop data into boxes; stream ciphers pour it through a keystream.AES vs RSAAES moves the data; RSA moves the key.Diffie-Hellman vs RSADH agrees on a key; RSA can sign the deal.Salt vs PepperSalt is public and unique; pepper is secret and shared.ECB Mode vs CBC Mode vs GCM ModeECB shows the penguin, CBC hides it, GCM hides it and seals the envelope.Certificate Authority vs Registration AuthorityThe RA checks your ID; the CA stamps the certificate.Certificate Revocation List vs Online Certificate Status ProtocolCRL is the whole blacklist; OCSP is asking about one name.Discretionary Access Control vs Mandatory Access Control vs Role-Based Access ControlDAC: owner decides. MAC: labels decide. RBAC: job decides.Role-Based Access Control vs Attribute-Based Access ControlRBAC asks who you are; ABAC asks who, what, where, when, and how.Single Sign-On vs Federated IdentitySSO is one login inside the house; federation is one login across neighbors.SAML vs OAuth 2.0 vs OpenID ConnectSAML says who you are in XML, OAuth says what an app may do, OIDC says who you are in OAuth's language.Kerberos vs NTLMKerberos uses tickets and clocks; NTLM uses hashes and hope.Two-Step Verification vs Multi-Factor AuthenticationTwo of the same kind is two steps, not two factors.False Acceptance Rate vs False Rejection Rate vs Crossover Error RateFAR lets the Fake in; FRR Rejects the Real; CER is where they Cross.Least Privilege vs Need to Know vs Separation of DutiesLeast privilege limits what you can do, need to know limits what you can see, separation of duties limits what you can do alone.Defense in Depth vs Zero TrustDefense in depth stacks walls; zero trust checks ID at every door.Tokenization vs Encryption vs Data MaskingTokens point to a vault, ciphertext needs a key, masks just cover it up.Trusted Platform Module vs Hardware Security ModuleTPM protects one machine; HSM protects the whole kingdom's keys.Preventive Controls vs Detective Controls vs Corrective ControlsPrevent stops it, detect spots it, correct fixes it.Vulnerability vs Threat vs RiskThe hole, the burglar, and the odds of losing the TV.Post-Quantum Cryptography vs Quantum Key DistributionPQC is new math for old machines; QKD is new physics for new wires.Virus vs Worm vs TrojanVirus hitchhikes, worm walks on its own, trojan wears a disguise.Phishing vs Spear Phishing vs WhalingPhishing casts a net, spear phishing throws a spear, whaling hunts the biggest fish.On-Path (Man-in-the-Middle) Attack vs Replay AttackMITM listens in now; replay plays it back later.Brute-Force Attack vs Dictionary Attack vs Password SprayingBrute force tries everything, dictionary tries the likely, spraying tries one key on every door.Credential Stuffing vs Password SprayingStuffing reuses stolen keys; spraying guesses common ones.Tailgating vs PiggybackingTailgaters sneak; piggybackers get a ride.Phishing vs PharmingPhishing baits the user; pharming poisons the road.Vertical Privilege Escalation vs Horizontal Privilege EscalationVertical climbs up; horizontal moves across.Zero-Day Vulnerability vs Known (N-Day) VulnerabilityZero-day: no patch exists. N-day: the patch exists but you have not applied it.Hacktivist vs Nation-State Actor vs Insider ThreatHacktivists want attention, nation-states want advantage, insiders already have the keys.
Application & OT Security
Cross-Site Scripting vs Cross-Site Request ForgeryXSS runs the attacker's code; CSRF borrows the victim's session.Stored XSS vs Reflected XSS vs DOM-Based XSSStored waits on the server, reflected bounces back, DOM never leaves the browser.SQL Injection vs OS Command InjectionSQLi talks to the database; command injection talks to the shell.Cross-Site Request Forgery vs Server-Side Request ForgeryCSRF abuses the client; SSRF abuses the server.SAST vs DAST vs IASTSAST reads the code, DAST attacks the app, IAST watches from inside.Static Application Security Testing vs Software Composition AnalysisSAST checks what you wrote; SCA checks what you borrowed.Input Validation vs Output EncodingValidate on the way in, encode on the way out.Buffer Overflow vs Integer OverflowBuffer overflow spills memory; integer overflow wraps the odometer.Directory Traversal vs File InclusionTraversal reads the file; inclusion runs it.Allow List vs Deny ListAllow lists trust no one new; deny lists trust everyone not yet caught.STRIDE vs DREADSTRIDE finds the threats; DREAD ranks them.
Security Operations
Intrusion Detection System vs Intrusion Prevention SystemIDS is a smoke alarm; IPS is a sprinkler.SIEM vs SOARSIEM sees and shouts; SOAR acts.EDR vs XDR vs MDREDR watches endpoints, XDR watches everything, MDR is people watching for you.Vulnerability Scan vs Penetration TestScans find unlocked doors; pen tests walk through them.Black-Box Testing vs White-Box Testing vs Gray-Box TestingBlack knows nothing, white knows everything, gray knows some.Red Team vs Blue Team vs Purple TeamRed attacks, blue defends, purple makes them talk.Security Event vs Security Incident vs Data BreachAll breaches are incidents, all incidents are events, but not the reverse.Indicator of Compromise vs Indicator of AttackIOCs are fingerprints at the scene; IOAs are the burglar caught picking the lock.Lockheed Martin Cyber Kill Chain vs MITRE ATT&CKKill Chain is the storyline; ATT&CK is the encyclopedia.CVE vs CVSS vs CWECVE names it, CVSS rates it, CWE classifies it.
Governance, Risk, Audit & Privacy
Recovery Time Objective vs Recovery Point ObjectiveRPO looks back at lost data; RTO looks ahead to recovery time.Business Continuity Plan vs Disaster Recovery PlanBCP keeps the business breathing; DRP restarts the IT heart.Qualitative Risk Analysis vs Quantitative Risk AnalysisQualitative uses words; quantitative uses dollars.Inherent Risk vs Residual RiskInherent is the raw risk; residual is what is left after you fight back.Policy vs Standard vs ProcedurePolicy says why, standard says what, procedure says how.Due Care vs Due DiligenceDue diligence is doing your homework; due care is doing the work.Data Controller vs Data ProcessorThe controller decides; the processor does.SOC 2 Type I vs SOC 2 Type IIType I is a snapshot; Type II is a movie.Anonymization vs PseudonymizationAnonymous can never be traced back; pseudonymous is just wearing a mask.
AI & Machine Learning
Artificial Intelligence vs Machine Learning vs Deep LearningAI contains ML, ML contains deep learning, deep learning powers generative AI.Supervised Learning vs Unsupervised Learning vs Reinforcement LearningSupervised has an answer key, unsupervised has none, reinforcement has a scoreboard.Classification vs RegressionClassification answers which one; regression answers how much.Overfitting vs UnderfittingOverfitting memorizes the textbook; underfitting never opened it.Precision vs RecallPrecision avoids false alarms; recall avoids misses.Retrieval-Augmented Generation vs Fine-TuningRAG gives the model an open book; fine-tuning sends it back to school.Prompt Injection vs JailbreakingInjection hijacks the app; jailbreaking breaks the guardrails.Data Poisoning vs Evasion AttackPoisoning taints the recipe; evasion tricks the taster.
Project Management & Agile
Agile vs WaterfallWaterfall plans the whole river; agile paddles one bend at a time.Scrum vs KanbanScrum runs in sprints; Kanban keeps the work flowing.Product Owner vs Scrum MasterThe Product Owner decides what; the Scrum Master helps with how.Sprint Review vs Sprint RetrospectiveReview the product, retro the process.Definition of Done vs Acceptance CriteriaDone is the universal checklist; acceptance criteria are the story's personal requirements.Project vs Program vs PortfolioProjects do things right, programs deliver benefits, portfolios do the right things.Crashing vs Fast TrackingCrashing costs money; fast tracking costs risk.Risk vs IssueA risk might rain; an issue is already pouring.
Business Platforms & EA
Incident vs Problem vs ChangeIncident: fix it now. Problem: find out why. Change: fix it for good, safely.Incident vs Service RequestSomething broke is an incident; something wanted is a request.Service Level Agreement vs Operational Level Agreement vs Underpinning ContractSLA faces the customer, OLA faces your coworkers, UC faces your vendors.Business Rule vs Client ScriptBusiness rules guard the database; client scripts guide the form.UI Policy vs Data PolicyUI policies shape the form; data policies protect the data.Profile vs Permission SetEveryone gets one profile; permission sets are the add-on keys.Lookup Relationship vs Master-Detail RelationshipLookup is a friendship; master-detail is parent and dependent.Architecture Building Block vs Solution Building BlockABB is the requirement; SBB is the product that fulfills it.