Certification terms: O
225 study terms starting with O.
- OAuth 2.0An authorization framework that lets applications obtain limited, delegated access tokens to APIs without handling user passwords.Intermediate
- OAuth 2.0 JWT Bearer FlowServer-to-server OAuth flow where a client signs a JWT with a certificate to obtain an access token without user interaction.Advanced
- OAuth Redirect URI ValidationRequiring an exact match between the redirect URI in an OAuth request and the URIs registered for the client.Advanced
- ObfuscationMaking data or code difficult to understand without changing its function, to hinder analysis.Foundational
- Object DetectionA computer vision task that identifies and locates multiple objects in an image with bounding boxes.Intermediate
- Object Identifier (OID)A dotted numeric identifier that uniquely names an object in the SNMP MIB tree.Intermediate
- Object ManagerSetup area in Lightning Experience for managing standard and custom objects, fields, layouts and related configuration.Foundational
- Object PermissionsProfile or permission set settings granting Create, Read, Edit and Delete access to an object.Foundational
- Object StorageStorage architecture that manages data as objects with metadata and unique keys in a flat namespace, accessed via HTTP APIs.Foundational
- Object Store v2 (OSv2)MuleSoft cloud key-value store for persisting data such as watermarks and cache entries across application restarts.Intermediate
- Object TaggingAttaching key-value tags to Snowflake objects (accounts, warehouses, tables, columns) to track sensitive data, cost centers and ownership.Advanced
- Object TrackingCisco feature that monitors the state of an interface, route or IP SLA and lets other features react to it.Intermediate
- Object-Level Security (OLS)Power BI semantic model security that hides entire tables or columns from specified roles.Advanced
- Object-Oriented Programming (OOP)A programming paradigm that organizes code into classes and objects combining data (attributes) and behavior (methods).Intermediate
- Object-Relational Mapping (ORM)A technique and set of libraries (Hibernate, Entity Framework, SQLAlchemy) that map programming objects to relational tables.Intermediate
- Object-Specific ActionQuick action defined on an object that runs in the context of a specific record.Foundational
- Objectives and Key Results (OKR)Goal-setting framework pairing a qualitative objective with measurable key results.Intermediate
- ObservabilityThe ability to understand a system's internal state from its external outputs, typically metrics, logs, and traces.Foundational
- Observability for LLM ApplicationsTracing, logging and measuring prompts, responses, tool calls, tokens, latency and quality in LLM systems.Advanced
- oc CLIThe OpenShift command-line client, a superset of kubectl with OpenShift-specific commands.Intermediate
- OCI Always FreeOCI resources available indefinitely at no cost, such as limited Ampere compute, Autonomous Databases and storage.Foundational
- OCI Cloud GuardOCI service that detects misconfigurations and risky activity across tenancies and can automatically remediate them.Intermediate
- OCI FastConnectOCI dedicated private connection between on-premises networks and Oracle Cloud Infrastructure that bypasses the internet.Intermediate
- OCI IAM PolicyHuman-readable OCI statement granting a group or dynamic group permissions on resource types in a compartment or tenancy.Intermediate
- OCI Identity DomainContainer in OCI IAM that holds users, groups, applications and identity settings for a user population.Intermediate
- OCI TenancyThe root container in Oracle Cloud Infrastructure that holds all of an organization's cloud resources, created at sign-up.Foundational
- OCI VaultOCI managed service for encryption keys and secrets, backed by HSMs or software protection.Intermediate
- OCSP StaplingTLS feature where the server fetches and attaches a signed OCSP response to its handshake.Intermediate
- Octal Permission NotationA numeric representation of Linux permissions where read=4, write=2 and execute=1 are summed per owner, group and others.Foundational
- OCTAVEOperationally Critical Threat, Asset, and Vulnerability Evaluation, a self-directed risk assessment methodology from Carnegie Mellon SEI.Advanced
- OctetA group of 8 bits; an IPv4 address contains four octets.Foundational
- Off-by-One ErrorA boundary error where a loop or calculation uses one too many or too few iterations, often overwriting a single byte past a buffer.Advanced
- Off-SpecificationPRINCE2 issue type for something that should be provided but currently is not, or is forecast not to be.Advanced
- Offer/Answer ModelThe RFC 3264 negotiation in which one side offers SDP media options and the other answers with the chosen subset.Intermediate
- Offline Root CAA root certificate authority kept powered off or disconnected from networks to protect its private key.Intermediate
- Ohm's LawThe electrical relationship V = I x R, with power P = V x I, used to calculate voltage, current, resistance and power.Foundational
- OLAP CubeA multidimensional data structure that precomputes measures across dimensions for fast slicing and aggregation.Intermediate
- Omni-ChannelService Cloud routing engine that pushes work items such as cases, chats and messages to available agents based on capacity and rules.Intermediate
- OmnichannelA contact center approach that handles voice, chat, email, SMS and social interactions with shared routing, context and reporting.Foundational
- Omnidirectional AntennaAn antenna that radiates equally in all horizontal directions in a doughnut-shaped pattern.Foundational
- OmniScriptOmniStudio tool for building guided, step-by-step user interactions with branching logic and data operations.Foundational
- Omnissa HorizonA VDI and published-apps platform, formerly VMware Horizon, delivering virtual desktops and applications.Intermediate
- OmniStudioSalesforce suite of low-code tools for building guided, industry-specific digital experiences, originally from Vlocity.Foundational
- On Error ContinueError scope that handles an error and returns its result as a successful response to the caller.Foundational
- On Error PropagateError scope that runs its processors then rethrows the error to the caller.Foundational
- On-Call RotationA schedule that assigns engineers responsibility for responding to production alerts during defined periods.Foundational
- On-Demand Capacity Reservation (ODCR)AWS feature that reserves EC2 capacity in a specific AZ for any duration, without a term commitment.Advanced
- On-Demand InstancesEC2 pricing model paying per second or hour for compute with no long-term commitment.Foundational
- On-Demand Next Hop (ODN)A Cisco SR-TE feature that automatically instantiates an SR policy when a BGP route arrives with a matching color community.Advanced
- On-Demand Self-ServiceNIST cloud characteristic: consumers provision compute, storage or network resources automatically without human interaction with the provider.Foundational
- On-Path AttackAn attack in which the adversary positions themselves between two communicating parties to intercept or alter traffic.Foundational
- On-Premises Data GatewaySoftware installed on a local machine that securely connects Power BI, Fabric, Power Apps and Logic Apps to on-premises data sources.Intermediate
- One Button to Push (OBTP)A feature that shows a single Join button on a video device for meetings scheduled in its room calendar.Foundational
- One-Hot EncodingRepresenting a categorical variable as multiple binary columns, one per category.Foundational
- One-Tailed TestA hypothesis test in which the alternative specifies a direction (greater than or less than), so the rejection region lies in one tail.Intermediate
- One-Time Pad (OTP)Cipher using a truly random key as long as the message, used only once, offering information-theoretic security.Intermediate
- One-Time Password (OTP)Password valid for only one login session or transaction, generated by a token, app, or service.Foundational
- One-to-Many Relationship (1:N)A relationship where one row in a parent table can relate to many rows in a child table, but each child relates to one parent.Foundational
- One-to-One Relationship (1:1)A relationship where each row in one table matches at most one row in another.Intermediate
- One-Way AudioA call fault where only one party can hear the other, usually caused by routing, NAT, firewall or SDP address problems.Intermediate
- OneDrive Known Folder Move (KFM)A OneDrive feature that redirects Desktop, Documents, Pictures, and other known folders to OneDrive.Intermediate
- OneLakeFabric's single, tenant-wide logical data lake, built on ADLS Gen2, where all Fabric items store data in open Delta Parquet format.Intermediate
- OneLake ShortcutA Fabric pointer that makes data elsewhere (OneLake, ADLS Gen2, Amazon S3, Google Cloud Storage, Dataverse) appear in a lakehouse without copying it.Intermediate
- Ongoing AuthorizationTime-driven or event-driven authorization approach that replaces fixed-term reauthorization using continuous monitoring data.Advanced
- Online Analytical Processing (OLAP)Systems optimized for complex, read-heavy queries that aggregate large volumes of historical data for analysis.Foundational
- Online Certificate Status Protocol (OCSP)Protocol (RFC 6960) for querying the real-time revocation status of a single certificate.Intermediate
- Online Transaction Processing (OLTP)Systems that handle many short, concurrent read and write transactions, such as orders, payments and bookings.Foundational
- Online Voice Routing PolicyA Teams Direct Routing policy assigned to users that contains ordered PSTN usages determining which voice routes they can use.Advanced
- ONNXOpen Neural Network Exchange: an open format for representing models so they can move between frameworks and runtimes.Intermediate
- OPC Unified Architecture (OPC UA)A platform-independent, service-oriented industrial interoperability standard (IEC 62541) with built-in security features.Advanced
- Open Container Initiative (OCI)A Linux Foundation project defining open standards for container image format, runtime, and distribution.Intermediate
- Open Cybersecurity Schema Framework (OCSF)An open, vendor-neutral schema for normalizing security event data across tools.Advanced
- Open DesignDesign principle that security should not depend on the secrecy of the design or implementation.Intermediate
- Open Policy Agent (OPA)A CNCF graduated general-purpose policy engine that evaluates policies written in Rego against JSON input.Advanced
- Open Radio Access Network (Open RAN)An architecture with open, interoperable interfaces between disaggregated RAN components from different vendors.Advanced
- Open RedirectA flaw where an application redirects users to a URL supplied in a parameter without validation.Foundational
- Open Shortest Path First (OSPF)An open-standard link-state IGP that uses areas, LSAs and Dijkstra's SPF algorithm with a cost metric.Foundational
- Open Source License ComplianceEnsuring that use of open-source components follows the obligations of their licenses.Intermediate
- Open Source Security Foundation (OpenSSF)A Linux Foundation project that improves the security of open-source software through tools, standards and best practices.Intermediate
- Open Source Security Testing Methodology Manual (OSSTMM)A peer-reviewed security testing methodology from ISECOM focused on measurable, repeatable operational security testing.Intermediate
- Open System AuthenticationThe default 802.11 authentication method, a null exchange that always succeeds.Foundational
- Open Systems Interconnection Model (OSI model)A seven-layer ISO reference model that describes how data moves from an application on one host to an application on another.Foundational
- Open Table FormatA metadata layer over data files (usually Parquet) that adds ACID transactions, schema evolution, time travel and efficient pruning to data lakes.Advanced
- Open Virtualization Format (OVF)A DMTF standard for packaging VMs and virtual appliances; OVA is a single-file tar archive of an OVF package.Intermediate
- Open-Source Intelligence (OSINT)Intelligence collected from publicly available sources such as websites, social media, public records and search engines.Foundational
- Open-Weight ModelA model whose trained weights are publicly downloadable for self-hosting and customization.Intermediate
- OpenAPI Specification (OAS)A vendor-neutral standard (formerly Swagger) for describing REST APIs in YAML or JSON, including paths, parameters, schemas, and authentication.Intermediate
- OpenConfigAn operator-led initiative that defines vendor-neutral YANG models and the gNMI/gNOI specifications for network management.Advanced
- OpenID Connect (OIDC)Identity layer on top of OAuth 2.0 that authenticates users and returns an ID token.Intermediate
- OpenID Connect for CI/CD (OIDC)Using short-lived OIDC tokens issued by a CI platform to authenticate to cloud providers without storing long-lived credentials.Advanced
- OpenShift PipelinesOpenShift's cloud-native CI/CD offering based on Tekton, installed through an operator.Advanced
- OpenShift ProjectAn OpenShift wrapper around a Kubernetes namespace that adds annotations and controlled self-service creation.Foundational
- OpenShift RouteAn OpenShift resource that exposes a Service at an external hostname through the cluster's router (HAProxy-based ingress).Intermediate
- OpenSSF ScorecardAn automated tool that rates open-source projects on security practices such as branch protection, code review, signed releases and dependency updates.Advanced
- OpenTelemetry (OTel)A CNCF open standard and set of SDKs, APIs, and a collector for generating and exporting metrics, logs, and traces vendor-neutrally.Intermediate
- OpenTelemetry CollectorA vendor-agnostic agent or gateway that receives, processes, and exports telemetry data using pipelines of receivers, processors, and exporters.Advanced
- OpenTofuAn open-source, Linux Foundation-hosted fork of Terraform created after HashiCorp's license change, compatible with most Terraform configurations.Intermediate
- OpenUSDUniversal Scene Description: an open, extensible framework for describing, composing and collaborating on 3D scenes.Advanced
- Operating EffectivenessWhether a control operated consistently as designed throughout a specified period.Intermediate
- Operational ControlControl category primarily implemented and executed by people rather than systems.Foundational
- Operational Data Store (ODS)An integrated, near-real-time store of current operational data from several systems, used for operational reporting.Intermediate
- Operational Excellence PillarWell-architected pillar focused on running and monitoring systems and continually improving processes and procedures.Foundational
- Operational Expenditure (OpEx)Ongoing spending on services and operations, such as monthly cloud bills, expensed in the period incurred.Foundational
- Operational Level Agreement (OLA)Agreement between internal teams supporting delivery of an SLA.Intermediate
- Operational Technology (OT)Hardware and software that monitor and control physical devices, processes and infrastructure, such as in manufacturing, utilities and transportation.Foundational
- Operational Threat IntelligenceIntelligence about specific impending attacks or campaigns, including actor intent, timing and capability.Intermediate
- Operations ManagementOversight of ongoing, repetitive business activities that produce and sustain products or services.Foundational
- OperatorA Kubernetes extension that uses custom resources and a controller to automate the lifecycle of complex applications.Advanced
- Operator ConnectA Teams Phone PSTN option in which a participating carrier provides and manages SBC connectivity directly to Microsoft.Intermediate
- Operator Lifecycle Manager (OLM)A component that installs, updates, and manages the lifecycle of Kubernetes operators, central to OpenShift.Advanced
- Opportunistic Key Caching (OKC)A non-standard but widely supported fast roaming method where controllers share a client's PMK among APs.Intermediate
- Opportunistic Wireless Encryption (OWE)Standard (RFC 8110) providing encryption without authentication on open networks; certified as Wi-Fi Enhanced Open.Intermediate
- OpportunityStandard object tracking a potential sale through stages to close.Foundational
- Opportunity CostThe value of the next-best alternative forgone when a choice is made.Intermediate
- Opportunity ProductLine item record (OpportunityLineItem) linking a product and price to an opportunity with quantity and sales price.Intermediate
- Opportunity Solution TreeVisual tool by Teresa Torres linking a desired outcome to customer opportunities, solutions, and experiments.Advanced
- Opportunity TeamSet of users collaborating on an opportunity with defined roles and access, which can be used for opportunity splits.Intermediate
- Optical Character Recognition (OCR)Technology that extracts machine-readable text from images or scanned documents.Foundational
- Optical DriveA drive that reads and writes CDs, DVDs, or Blu-ray discs using a laser.Foundational
- Optical Network Terminal (ONT)The customer-premises device that terminates a fiber-to-the-premises connection and converts optical signals to Ethernet.Intermediate
- Optical Power Meter (OPM)A tool that measures optical power in a fiber, used with a light source to measure end-to-end loss.Intermediate
- Optical Time-Domain Reflectometer (OTDR)An instrument that injects light pulses into a fiber and analyzes backscatter and reflections to locate breaks, splices, bends and connector losses.Intermediate
- Optimistic Concurrency ControlA strategy that lets transactions proceed without locks and checks for conflicts at write time using version numbers or timestamps.Advanced
- OPTIMIZE CommandA Delta Lake command that compacts small files into larger ones and optionally applies Z-ordering or liquid clustering.Advanced
- Optimize Drives (dfrgui)The Windows tool that defragments HDDs and sends TRIM to SSDs on a schedule.Foundational
- Optimized RoamingCisco feature that disassociates clients whose RSSI or data rate falls below thresholds to force roaming.Advanced
- OptimizerThe algorithm that updates model weights using computed gradients, such as SGD, Adam or AdamW.Intermediate
- OptionalityWhether participation in a relationship is mandatory (minimum one) or optional (minimum zero).Intermediate
- OpusAn open, royalty-free IETF audio codec (RFC 6716) that adapts from 6 to 510 kbps and from narrowband to fullband.Intermediate
- Oracle Autonomous DatabaseOracle's self-driving, self-securing, self-repairing cloud database that automates tuning, patching, scaling and backups.Foundational
- Oracle Cloud Infrastructure (OCI)Oracle's public cloud platform offering compute, storage, networking, database and Oracle-optimized services.Foundational
- Orchestrator-Worker PatternAn agent pattern where a lead model breaks a task into subtasks, delegates them to workers and synthesizes results.Advanced
- ORDER BY ClauseThe clause that sorts the final result set by one or more expressions, ascending (default) or descending.Foundational
- Order GuideCatalog construct that orders multiple related catalog items in one request based on initial answers.Intermediate
- Order of ExecutionDefined sequence Salesforce follows when a record is saved, including flows, triggers, validation, assignment and commit.Advanced
- Order of VolatilityThe sequence for collecting evidence from most to least volatile so short-lived data is not lost.Foundational
- Order-to-Cash (O2C)End-to-end business process from receiving a customer order through fulfillment, invoicing and payment collection.Foundational
- Ordinal DataCategorical data with a meaningful order but unequal or unknown spacing between categories.Foundational
- Organic Light-Emitting Diode (OLED)A display technology where each pixel emits its own light, giving perfect blacks and high contrast.Foundational
- Organization MapBusiness architecture artifact showing organizational units, partners and their relationships.Intermediate
- Organization Policy ServiceGoogle Cloud service that applies constraints across the resource hierarchy to restrict how resources can be configured.Intermediate
- Organization Validation Certificate (OV)Certificate issued after the CA verifies domain control and the legal existence of the requesting organization.Intermediate
- Organization-Defined Parameter (ODP)Variable portion of a control that the organization sets, such as a frequency or time period.Advanced
- Organization-Wide Defaults (OWD)Baseline record-level access setting per object: Private, Public Read Only, Public Read/Write, or Controlled by Parent.Foundational
- Organizational Process Assets (OPA)Plans, processes, policies, procedures, and knowledge bases specific to and used by the performing organization.Foundational
- Organizational StructureHow an organization arranges authority, reporting, and resources, affecting project manager authority.Foundational
- Organizational Unit (OU)Container for AWS accounts within AWS Organizations used to group accounts and apply policies hierarchically.Intermediate
- Organizationally Unique Identifier (OUI)The first 24 bits of a MAC address, assigned by the IEEE to identify the device manufacturer.Foundational
- Organized Crime GroupA structured criminal enterprise that conducts cyberattacks primarily for financial gain.Foundational
- Origin AttributeA well-known mandatory BGP attribute indicating how a route entered BGP: IGP (i), EGP (e) or incomplete (?).Intermediate
- Originator IDAn optional non-transitive BGP attribute set by a route reflector to the router ID of the route's original iBGP source.Advanced
- Orphan RecordA child row whose foreign key points to a parent row that does not exist.Foundational
- Orthogonal Frequency-Division Multiple Access (OFDMA)Multi-user OFDM that divides a channel into resource units so several stations transmit simultaneously.Intermediate
- Orthogonal Frequency-Division Multiplexing (OFDM)Multicarrier modulation splitting a channel into many orthogonal subcarriers transmitted in parallel.Foundational
- OS Command Injection PreventionDefenses that prevent user input from being executed as operating system commands.Intermediate
- Osmotic CommunicationInformation flowing into the background hearing of team members so they absorb relevant information passively.Intermediate
- OSPF AreaA logical grouping of OSPF routers and links that share an LSDB, limiting flooding and SPF scope.Foundational
- OSPF Area 0The OSPF backbone area to which all other areas must connect and through which all inter-area traffic passes.Foundational
- OSPF Area RangeInter-area summarization configured on an ABR to advertise one Type 3 LSA for a block of intra-area routes.Intermediate
- OSPF AuthenticationMethods for authenticating OSPF packets: null, plaintext, MD5 and HMAC-SHA with key chains.Intermediate
- OSPF CostThe OSPF interface metric, calculated as reference bandwidth divided by interface bandwidth, summed along a path.Foundational
- OSPF Down BitA flag a PE sets in Type 3/5/7 LSAs sent to a CE so other PEs will not redistribute them back into MP-BGP.Advanced
- OSPF External Route TypeOSPF E1 and E2 routes: E2 (default) keeps only the redistributed metric, while E1 adds internal cost to reach the ASBR.Intermediate
- OSPF Forwarding AddressA field in Type 5 and Type 7 LSAs that tells routers which next-hop address to use for an external route.Advanced
- OSPF Hello and Dead IntervalsOSPF timers: how often hellos are sent and how long to wait without hellos before declaring a neighbor down.Foundational
- OSPF LSA FilteringTechniques that block specific LSAs from entering an area, such as filter-list on an ABR or database-filter on an interface.Advanced
- OSPF MTU MismatchA condition where OSPF neighbors have different interface MTUs, leaving the adjacency stuck in ExStart or Exchange.Intermediate
- OSPF Neighbor StatesThe progression an OSPF adjacency follows: Down, Attempt, Init, 2-Way, ExStart, Exchange, Loading, Full.Intermediate
- OSPF Network StatementAn OSPF configuration command that uses an address and wildcard mask to select interfaces and assign them to an area.Foundational
- OSPF Network TypesOSPF interface modes - broadcast, non-broadcast, point-to-point, point-to-multipoint and loopback - controlling DR election, timers and neighbor discovery.Intermediate
- OSPF Packet TypesThe five OSPF packet types: Hello, Database Description (DBD), Link-State Request (LSR), Link-State Update (LSU) and Link-State Acknowledgment.Intermediate
- OSPF Path Selection OrderOSPF prefers intra-area over inter-area over E1/N1 over E2/N2 routes for the same prefix, before comparing cost.Intermediate
- OSPF PriorityAn interface value from 0 to 255 (default 1) used in DR/BDR election; 0 makes the router ineligible.Foundational
- OSPF Sham LinkA logical intra-area link between PEs across the MPLS backbone so VPN routes are preferred over an OSPF backdoor link.Advanced
- OSPF Stub AreaAn OSPF area that blocks Type 4 and Type 5 external LSAs and receives a default route from the ABR instead.Intermediate
- OSPF Stub Router AdvertisementOSPF max-metric router-lsa: advertising maximum link cost so other routers avoid transiting this router.Advanced
- OSPF Summary AddressAn ASBR command that summarizes external (Type 5 or Type 7) routes redistributed into OSPF.Intermediate
- OSPF Totally Stubby AreaA Cisco OSPF area type that blocks Type 3, 4 and 5 LSAs, leaving only a default route from the ABR.Intermediate
- OSPF Type 1 Router LSAThe LSA every OSPF router originates in each area, describing its links, costs and neighbors; flooded within the area only.Intermediate
- OSPF Type 2 Network LSAThe LSA originated by the DR on a multi-access segment, listing all routers attached to that transit network.Intermediate
- OSPF Type 3 Summary LSAThe LSA an ABR originates to advertise prefixes from one area into another.Intermediate
- OSPF Type 4 ASBR Summary LSAAn LSA originated by an ABR to tell routers in another area how to reach an ASBR.Advanced
- OSPF Type 5 External LSAAn LSA originated by an ASBR to advertise routes redistributed from outside OSPF, flooded throughout all normal areas.Intermediate
- OSPF Type 7 NSSA LSAAn external LSA originated by an ASBR inside an NSSA, converted to Type 5 by the NSSA ABR.Advanced
- OSPF Virtual LinkA logical link through a transit area that connects a remote area or partitioned backbone to area 0.Advanced
- OSPFv3The version of OSPF for IPv6 (and, with address families, IPv4) defined in RFC 5340.Intermediate
- OSS-FuzzGoogle's free continuous fuzzing service for critical open-source projects.Advanced
- Out-of-Band Application Security Testing (OAST)Testing that detects blind vulnerabilities by observing callbacks, such as DNS or HTTP requests, from the target to a tester-controlled server.Advanced
- Out-of-Band CommunicationCommunication through channels separate from potentially compromised production systems during an incident.Intermediate
- Out-of-Band Key ExchangeDelivering keys through a separate channel from the one the keys will protect.Intermediate
- Out-of-Band Management (OOB)Managing network devices through a dedicated path separate from production data traffic.Intermediate
- Out-of-Bounds ReadReading memory outside the bounds of an allocated buffer, which can leak sensitive data or crash a program.Advanced
- Out-of-Cycle LoggingLog entries generated at unusual times or outside expected patterns, indicating possible malicious activity.Foundational
- Outbound Change SetContainer of metadata components sent from one org to a related org (such as sandbox to production) through Setup.Foundational
- Outbound Dial Peer MatchingThe IOS process that selects the dial peer for the outgoing leg, using longest destination-pattern match, then preference, then random choice.Advanced
- Outbound MessageSOAP message sent automatically to an external endpoint when a workflow or flow condition is met, with retries for up to 24 hours.Intermediate
- OutlierAn observation that lies unusually far from the other values in a dataset.Foundational
- Output and OutcomeITIL terms distinguishing a tangible deliverable (output) from the result a stakeholder achieves (outcome).Foundational
- Output ControlsApplication controls ensuring output is complete, accurate, and distributed only to authorized recipients.Intermediate
- Output EncodingConverting untrusted data into a safe representation for the specific context where it is output, such as HTML, JavaScript, URL or SQL.Foundational
- Outside Global AddressIn Cisco NAT terminology, the real, publicly routable address of a host on the outside network.Intermediate
- Overall Project RiskThe effect of uncertainty on the project as a whole, arising from all sources including individual risks.Advanced
- OverclockingRunning a CPU, GPU, or memory faster than its rated specification to gain performance.Intermediate
- OverfittingWhen a model learns training data too closely, including noise, and performs poorly on new data.Foundational
- Overlap SendingSending dialed digits one at a time or in groups to the next system instead of all at once in the initial setup message.Advanced
- Overlapping BSS Packet Detect (OBSS_PD)An adjustable CCA threshold for inter-BSS frames used in 802.11ax spatial reuse.Advanced
- OverlayFully specified set of tailored controls and parameters for a community or technology, applied on top of a baseline.Advanced
- Overlay Management Protocol (OMP)The TCP-based Cisco SD-WAN control protocol, running inside DTLS/TLS tunnels, that distributes routes, TLOCs, keys and policy.Advanced
- Overload BitAn IS-IS LSP flag telling other routers not to use this router for transit traffic.Advanced
- OWASP AmassAn OWASP project tool for in-depth attack surface mapping and subdomain discovery.Intermediate
- OWASP API Security Top 10OWASP's list of the ten most critical security risks specific to APIs, last updated in 2023.Foundational
- OWASP Application Security Verification Standard (ASVS)An OWASP standard listing testable security requirements for web applications and services at three verification levels.Intermediate
- OWASP Cheat Sheet SeriesA collection of concise OWASP guides giving developers specific defensive guidance on individual security topics.Foundational
- OWASP DevSecOps Maturity Model (DSOMM)An OWASP model that defines security activities for DevOps pipelines and rates their implementation across maturity levels.Advanced
- OWASP IoT Top 10OWASP's 2018 list of the top security issues for Internet of Things devices and ecosystems.Foundational
- OWASP Mobile Application Security Testing Guide (MASTG)OWASP's comprehensive manual of techniques and test cases for verifying mobile apps against MASVS.Intermediate
- OWASP Mobile Application Security Verification Standard (MASVS)OWASP's standard of security requirements for mobile apps, organized into control groups and verified with the MASTG.Intermediate
- OWASP Mobile Top 10OWASP's list of the ten most critical security risks for mobile applications, last updated in 2024.Foundational
- OWASP Secure Coding PracticesOWASP's technology-agnostic checklist of secure coding practices, originally the Secure Coding Practices Quick Reference Guide.Foundational
- OWASP Threat DragonAn open-source OWASP threat modeling tool for creating diagrams and recording threats using STRIDE, LINDDUN, CIA and other methods.Intermediate
- OWASP Top 10OWASP's awareness document ranking the ten most critical web application security risk categories, updated every few years.Foundational
- OWASP Top 10 CI/CD Security RisksAn OWASP list of the ten most significant security risks in CI/CD environments.Advanced
- OWASP Top 10 for LLM ApplicationsOWASP's list of the most critical security risks for applications built on large language models.Intermediate
- OWASP Top 10 Proactive ControlsOWASP's list of the most important security techniques developers should apply in every project.Intermediate
- OWASP Web Security Testing Guide (WSTG)OWASP's comprehensive guide for testing the security of web applications and services, organized by test category with unique test IDs.Intermediate