Certification terms: S
942 study terms starting with S.
942 terms
- /sys Filesystem (sysfs)A virtual filesystem mounted at /sys that exposes kernel objects such as devices, drivers and buses in a structured hierarchy.Intermediate
- S-CurveGraph of cumulative costs, labor hours, or other quantities plotted against time, typically shaped like an S.Intermediate
- S3 Block Public AccessAccount- and bucket-level S3 settings that override policies and ACLs to prevent public access to buckets and objects.Foundational
- S3 Bucket PolicyResource-based JSON policy attached to an S3 bucket controlling which principals can perform which actions on it.Intermediate
- S3 Event NotificationsS3 feature that sends events such as object created or deleted to Lambda, SQS, SNS or EventBridge.Intermediate
- S3 Intelligent-TieringS3 storage class that automatically moves objects between access tiers based on usage, with no retrieval fees.Intermediate
- S3 Lifecycle ConfigurationRules that automatically transition S3 objects to cheaper storage classes or expire them after set periods.Intermediate
- S3 Object LockS3 feature providing write-once-read-many (WORM) protection with retention periods and legal holds.Intermediate
- S3 Presigned URLTime-limited URL signed with a principal's credentials that grants temporary access to a specific S3 object.Intermediate
- S3 ReplicationAutomatic asynchronous copying of S3 objects to another bucket in the same region (SRR) or a different region (CRR).Intermediate
- S3 Storage ClassesAmazon S3 tiers priced by access frequency and availability, from S3 Standard to Glacier Deep Archive.Foundational
- S3 Transfer AccelerationS3 feature that speeds long-distance uploads by routing data through CloudFront edge locations over the AWS backbone.Intermediate
- S3 VersioningBucket setting that keeps multiple versions of each object to protect against accidental overwrites and deletions.Foundational
- SA QueryA PMF procedure that verifies an existing security association before accepting a new association attempt.Advanced
- SABSASherwood Applied Business Security Architecture, a risk-driven enterprise security architecture framework.Advanced
- Safe HarborA commitment in a disclosure policy not to pursue legal action against researchers acting in good faith within the stated rules.Intermediate
- Safe ModeA Windows startup mode that loads only essential drivers and services for troubleshooting.Foundational
- Safety Data Sheet (SDS)A document describing a material's hazards, safe handling, storage, PPE, first aid, and disposal requirements.Foundational
- Safety Instrumented System (SIS)An independent control system that brings an industrial process to a safe state when dangerous conditions are detected.Advanced
- Sales ProcessBusiness process defining which Opportunity stage values are available for a record type.Foundational
- Salesforce Analytics Query Language (SAQL)Salesforce Analytics Query Language used to query CRM Analytics datasets.Advanced
- Salesforce B2C CommerceSalesforce's enterprise ecommerce platform (formerly Demandware), now part of Commerce Cloud.Intermediate
- Salesforce ClassicLegacy Salesforce user interface that predates Lightning Experience.Foundational
- Salesforce CLICommand-line tool (sf) for authenticating to orgs, deploying and retrieving metadata, running tests and managing scratch orgs.Intermediate
- Salesforce CMSContent management system for creating and sharing content such as images, documents and news across channels.Intermediate
- Salesforce Code AnalyzerSalesforce CLI plugin that scans Apex, LWC and other code for quality and security issues using engines like PMD, ESLint and the graph engine.Advanced
- Salesforce ConnectFeature that integrates external data in real time via external objects using OData 2.0/4.0, cross-org or custom adapters.Advanced
- Salesforce DX (SFDX)Salesforce's source-driven development model and toolset using version control, the CLI, scratch orgs and packages.Intermediate
- Salesforce EditionA packaging tier of Salesforce (such as Professional, Enterprise or Unlimited) that determines available features and limits.Foundational
- Salesforce FlowSalesforce's primary declarative automation tool for building automated processes and guided screens.Foundational
- Salesforce Health CheckSetup tool that scores an org's security settings against a Salesforce or custom baseline and highlights risks.Intermediate
- Salesforce IndustriesSalesforce's vertical cloud solutions (Financial Services, Health, Communications, Manufacturing, Public Sector and others).Foundational
- Salesforce KnowledgeKnowledge base feature for creating, publishing and sharing articles with agents, customers and AI agents.Foundational
- Salesforce Lightning Design System (SLDS)Salesforce's CSS framework and design guidelines for building UIs consistent with Lightning Experience.Foundational
- Salesforce Object Query Language (SOQL)Query language for retrieving Salesforce records from one object and its related objects.Foundational
- Salesforce Object Search Language (SOSL)Text search language that searches the search index across multiple objects in one query.Intermediate
- Salesforce OrgA single customer instance of Salesforce containing its own data, metadata, users and configuration.Foundational
- Salesforce Prompt TemplateReusable prompt with instructions and merge fields, of types such as Sales Email, Field Generation, Record Summary and Flex.Intermediate
- Salesforce Record IDUnique identifier assigned to every record, in a case-sensitive 15-character or case-insensitive 18-character form.Foundational
- Salesforce Release CycleThree seasonal releases per year (Spring, Summer, Winter) delivered automatically to all orgs.Foundational
- Salesforce Sharing ModelLayered Salesforce security model controlling access at org, object, field and record levels.Foundational
- Salesforce ShieldPaid security bundle comprising Platform Encryption, Event Monitoring, Field Audit Trail and Data Detect.Advanced
- Salesforce TrustSalesforce's status site (trust.salesforce.com) reporting instance availability, performance, incidents and maintenance.Foundational
- Salience ModelStakeholder classification model based on power, urgency, and legitimacy.Advanced
- SaltA Python-based configuration management and remote execution tool (SaltStack, now owned by Broadcom) using a master/minion architecture over a ZeroMQ event bus.Intermediate
- Saltzer and Schroeder Design PrinciplesEight classic secure design principles from 1975 that underpin modern secure software design.Intermediate
- SambaOpen-source software that provides SMB file and print sharing for Linux and macOS.Intermediate
- Same-Origin Policy (SOP)A browser security model that restricts scripts on one origin from reading data from another origin.Foundational
- SameSite Cookie AttributeA cookie attribute (Strict, Lax or None) controlling whether a cookie is sent with cross-site requests, mitigating CSRF.Intermediate
- SAML AssertionSigned XML statement from an IdP containing authentication, attribute, and authorization information about a subject.Advanced
- Sampling BiasSystematic error that occurs when some members of a population are more likely to be sampled than others, so the sample misrepresents the population.Foundational
- Sampling RateThe number of times per second an analog signal is measured when converted to digital, such as 8 kHz or 48 kHz.Foundational
- Sampling RiskRisk that the auditor's conclusion based on a sample differs from the conclusion if the entire population were tested.Intermediate
- SandboxA copy of a production org's metadata (and optionally data) used for development, testing or training without affecting production.Foundational
- Sandbox EvasionTechniques malware uses to detect analysis environments and alter or delay its behavior to avoid detection.Advanced
- Sandbox TemplateDefinition of which objects' data to copy into a Partial Copy or Full sandbox.Intermediate
- SandboxingRunning code in a restricted, isolated environment that limits its access to the system.Foundational
- SANS PICERLThe SANS six-step incident response model: Preparation, Identification, Containment, Eradication, Recovery and Lessons Learned.Intermediate
- SAP AI CoreBTP service for running and managing AI model training and inference workloads, including the generative AI hub.Advanced
- SAP Analytics Cloud (SAC)SAP's SaaS for BI, planning and predictive analytics in one product.Intermediate
- SAP BTP DirectoryOptional grouping of subaccounts within a global account, used to organize and manage entitlements and users.Intermediate
- SAP BTP Global AccountTop-level BTP account representing a customer's contract and commercial model (CPEA, pay-as-you-go, subscription).Intermediate
- SAP BTP SubaccountBTP account in a specific region and provider where services are enabled and applications run.Intermediate
- SAP BuildSAP's low-code and pro-code solution portfolio on BTP: SAP Build Apps, SAP Build Process Automation, SAP Build Work Zone and SAP Build Code.Foundational
- SAP Business Accelerator HubSAP's catalog (formerly SAP API Business Hub) of APIs, events, integration content and data models for SAP products.Foundational
- SAP Business Application Studio (BAS)Cloud-based development environment on BTP for building SAP applications, based on Code-OSS.Intermediate
- SAP Business Data Cloud (BDC)SAP's 2025 data offering unifying Datasphere, Analytics Cloud and SAP-managed data products with Databricks integration.Advanced
- SAP Business Technology Platform (SAP BTP)SAP's platform-as-a-service combining application development, integration, data and analytics, and AI services.Foundational
- SAP Cloud Application Programming Model (CAP)SAP framework of languages, libraries and tools (Node.js and Java) for building enterprise services and apps on BTP.Intermediate
- SAP Cloud ConnectorAgent installed in the customer network that securely connects BTP applications to on-premise systems via a reverse-invoke tunnel.Intermediate
- SAP Cloud Identity ServicesSAP services for authentication (Identity Authentication) and provisioning (Identity Provisioning) across SAP cloud solutions.Intermediate
- SAP DatasphereSAP's business data fabric service on BTP for data warehousing, integration and semantic modeling, preserving SAP business context.Intermediate
- SAP Destination ServiceBTP service storing connection details and authentication for remote systems used by applications.Advanced
- SAP Event MeshBTP messaging service for event-driven communication between SAP and non-SAP applications; Advanced Event Mesh offers a distributed broker mesh.Advanced
- SAP FioriSAP's design system and user experience for role-based, responsive business apps.Foundational
- SAP HANASAP's in-memory, column-oriented database platform for transactions and analytics.Foundational
- SAP HANA CloudFully managed cloud version of SAP HANA on SAP BTP with in-memory and data lake storage tiers.Intermediate
- SAP Integration SuiteBTP integration platform providing Cloud Integration, API Management, Open Connectors, Integration Advisor and Event Mesh capabilities.Intermediate
- SAP JouleSAP's generative AI copilot and agent framework embedded across SAP applications.Intermediate
- SAP S/4HANASAP's current-generation ERP suite built on the in-memory SAP HANA database.Foundational
- SAPUI5SAP's JavaScript UI framework for building Fiori apps; OpenUI5 is its open-source version.Intermediate
- sarThe System Activity Reporter, a sysstat tool that collects and reports historical CPU, memory, disk and network performance data.Intermediate
- Sarbanes-Oxley Act (SOX)2002 US law requiring public companies to maintain and attest to internal control over financial reporting.Foundational
- Sargable QueryA query whose predicates can use an index seek or pruning (Search ARGument ABLE), typically because columns are not wrapped in functions.Advanced
- SAST False Positive ManagementProcesses for triaging, suppressing and tuning static analysis results so developers trust and act on findings.Intermediate
- SATA Power ConnectorA 15-pin L-shaped PSU connector that supplies 3.3 V, 5 V, and 12 V to SATA drives.Foundational
- Satellite InternetInternet access delivered via communication satellites, useful in remote areas without terrestrial service.Foundational
- SavepointPoint in a transaction to which Apex can roll back database changes using Database.rollback.Advanced
- SAVEPOINT (SQL)A named marker inside a transaction that allows a partial rollback to that point without abandoning the whole transaction.Intermediate
- Savings PlansAWS flexible pricing model offering discounts in exchange for a commitment to a consistent dollar amount of compute usage per hour for 1 or 3 years.Foundational
- SBOM Minimum ElementsThe baseline data fields an SBOM must contain, defined by the U.S. NTIA in 2021 and updated by CISA.Advanced
- ScalabilityAbility of a system to handle increased load by adding resources, either vertically or horizontally.Foundational
- Scalable Group Tag (SGT)A 16-bit Cisco TrustSec tag that identifies a group of users or devices for role-based policy regardless of IP address.Advanced
- Scalable Video Coding (SVC)An extension of H.264 that encodes video in layers so receivers can drop layers to match bandwidth or screen size.Advanced
- Scaled Agile Framework (SAFe)A knowledge base of integrated principles, practices, and competencies for applying Lean, Agile, and DevOps at enterprise scale.Foundational
- ScalerA device or function that converts a video signal from one resolution or aspect ratio to another to match a display.Foundational
- Scaling LawsEmpirical relationships showing model loss improves predictably with more parameters, data and compute.Advanced
- Scaling PolicyThe multi-cluster warehouse setting (Standard or Economy) that controls how eagerly Snowflake starts additional clusters.Advanced
- ScarewareSoftware or pop-ups that use fear of infection to trick users into buying fake security products or installing malware.Foundational
- Scatter DiagramA graph plotting pairs of numerical data to show the relationship between two variables.Foundational
- Scatter PlotA chart that plots two numeric variables as points to reveal relationships, clusters and outliers.Foundational
- Scatter-GatherRouter that sends the same event to multiple routes concurrently and aggregates results into an object keyed by route index.Intermediate
- ScatteringReflection of RF in many directions when it strikes uneven surfaces or small particles.Intermediate
- SCD Type 1A slowly changing dimension method that overwrites the old attribute value, keeping no history.Intermediate
- SCD Type 2A slowly changing dimension method that inserts a new row for each change, with effective dates and a current-row flag, preserving full history.Intermediate
- SCD Type 3A slowly changing dimension method that adds a column to store the previous value alongside the current one, keeping limited history.Advanced
- Schedule BaselineThe approved version of the schedule model, changeable only through formal change control, used as a basis for comparison.Foundational
- Schedule CompressionTechniques used to shorten schedule duration without reducing scope.Intermediate
- Schedule Management PlanComponent of the project management plan establishing criteria and activities for developing, monitoring, and controlling the schedule.Intermediate
- Schedule ModelA representation of the plan for executing activities, including durations, dependencies, and other planning information.Advanced
- Schedule Performance Index (SPI)Measure of schedule efficiency: SPI = EV / PV.Foundational
- Schedule Variance (SV)Measure of schedule performance: SV = EV - PV.Foundational
- Schedule-Triggered FlowFlow that runs at a specified time and frequency, optionally for each record in a batch matching criteria.Intermediate
- Scheduled ApexApex class implementing Schedulable to run at specified times via System.schedule or the Setup UI.Intermediate
- Scheduled PathPart of a record-triggered flow that runs at a time relative to a trigger time or a date field on the record.Intermediate
- Scheduled RefreshAutomatically refreshing a Power BI semantic model's imported data at set times in the Service.Foundational
- Scheduled Script ExecutionScheduled job that runs a server script at specified times or intervals.Intermediate
- Scheduled TaskA Windows mechanism for running programs at specified times or events, frequently abused for persistence and execution.Intermediate
- Scheduler ComponentSource that triggers a flow at fixed frequency or on a cron schedule.Foundational
- Schema BuilderVisual drag-and-drop tool to view and create objects, fields and relationships in an org's data model.Foundational
- Schema DriftUnplanned changes in a source's structure, such as new, removed or renamed columns or changed types, that can break pipelines.Intermediate
- Schema EvolutionChanging a table's or stream's schema over time, for example by adding columns, while keeping existing data and consumers working.Intermediate
- Schema MasterThe forest-wide FSMO role that controls all updates and modifications to the Active Directory schema.Intermediate
- Schema-on-ReadApplying structure to data when it is queried, rather than enforcing a schema when it is written.Intermediate
- Schema-on-WriteValidating and structuring data to a predefined schema when it is loaded, rejecting non-conforming records.Intermediate
- Schrems II2020 CJEU ruling that invalidated the EU-US Privacy Shield and required case-by-case assessment for SCC transfers.Intermediate
- ScopeThe defined boundaries of an engagement: which assets, locations, techniques and time frames are included or excluded.Foundational
- Scope BaselineThe approved version of a scope statement, WBS, and WBS dictionary, changeable only through formal change control.Foundational
- Scope CreepUncontrolled growth of an engagement's scope beyond what was originally agreed.Foundational
- Scope LimitationRestriction that prevents the auditor from performing necessary procedures or obtaining sufficient evidence.Intermediate
- Scope Management PlanComponent of the project management plan describing how scope will be defined, developed, monitored, controlled, and validated.Intermediate
- Scope StatementDescription of the project scope, major deliverables, assumptions, constraints, and exclusions.Foundational
- Scoped ApplicationCustom application with a unique namespace that protects its tables, scripts and resources from other apps.Intermediate
- ScopingDetermining which controls or requirements apply to a system, process, or assessment.Intermediate
- Scoping RuleRule that sets which records users see by default in list views and reports, without restricting access.Advanced
- Scoring and GradingAccount Engagement method where score measures a prospect's interest from activities and grade measures fit against an ideal profile.Intermediate
- Scratch OrgShort-lived, source-driven Salesforce org created from a definition file for development and automated testing.Intermediate
- Screen Capture ProtectionMobile controls that prevent sensitive screens from appearing in screenshots, screen recordings or the app switcher.Advanced
- Screen FlowFlow with user-facing screens that guides users through data entry or processes.Foundational
- Screen LockA device setting that requires authentication to unlock after inactivity or on demand.Foundational
- Screened SubnetNetwork segment, formerly called a DMZ, that hosts public-facing services between the internet and the internal network.Foundational
- Script File TypesCommon script file extensions tested at the A+ level: .bat, .ps1, .vbs, .sh, .js, and .py.Foundational
- Script IncludeReusable server-side JavaScript class or function library callable from other scripts.Intermediate
- Scripted REST APICustom REST endpoint defined in ServiceNow with resources and server scripts.Advanced
- ScriptingWriting small programs, typically in interpreted languages such as Bash, Python, or PowerShell, to automate repetitive tasks.Foundational
- ScrumA lightweight framework that helps people, teams, and organizations generate value through adaptive solutions for complex problems.Foundational
- Scrum ArtifactsThe Product Backlog, Sprint Backlog, and Increment, each with a commitment.Foundational
- Scrum EventsThe Sprint, Sprint Planning, Daily Scrum, Sprint Review, and Sprint Retrospective.Foundational
- Scrum GuideThe official definition of Scrum written by Ken Schwaber and Jeff Sutherland; the current edition was published in November 2020.Foundational
- Scrum Master (SM)The Scrum accountability for establishing Scrum as defined in the Scrum Guide and for the Scrum Team's effectiveness.Foundational
- Scrum of ScrumsA coordination technique in which representatives from multiple Scrum teams meet to manage dependencies.Intermediate
- Scrum PillarsTransparency, inspection, and adaptation: the three pillars of Scrum's empirical process control.Foundational
- Scrum TeamA small, cohesive, self-managing unit of one Scrum Master, one Product Owner, and Developers.Foundational
- Scrum ValuesCommitment, Focus, Openness, Respect, and Courage.Foundational
- ScrumbanA hybrid of Scrum and Kanban practices.Intermediate
- scryptMemory-hard key derivation function designed to make large-scale hardware password cracking expensive.Advanced
- SD-WAN ColorA Cisco SD-WAN label on a transport interface (such as mpls, private1, biz-internet, lte) that identifies the transport type for tunnel building and policy.Advanced
- SD-WAN ControllerThe Cisco Catalyst SD-WAN control plane element (formerly vSmart) that distributes routes, TLOCs and policies to WAN Edges via OMP.Intermediate
- SD-WAN ManagerThe Cisco Catalyst SD-WAN management plane (formerly vManage): GUI and API for configuration, templates, monitoring and policy.Intermediate
- SD-WAN Service VPNA Cisco SD-WAN segment (VRF) on the LAN side carrying user traffic, numbered 1-511 except the reserved VPN 0 and VPN 512.Intermediate
- SD-WAN ValidatorThe Cisco Catalyst SD-WAN orchestration element (formerly vBond) that authenticates devices and helps them discover controllers and traverse NAT.Intermediate
- SDP Security Descriptions (SDES)A method (RFC 4568) of exchanging SRTP keys in SDP a=crypto attributes within SIP signaling.Advanced
- Search IndexData 360 index (vector or hybrid) built over chunked unstructured or structured data to support semantic search for AI grounding.Advanced
- Search Optimization ServiceA Snowflake Enterprise feature that builds a persistent search access path to speed selective point lookups, substring searches and VARIANT field searches.Advanced
- Search RuleAn Expressway rule that matches a call's alias by pattern and priority and sends the search to a target zone.Advanced
- SeasonalityRegular, calendar-related patterns that repeat over fixed periods, such as daily, weekly or yearly cycles.Foundational
- SEC Cybersecurity Disclosure Rules2023 SEC rules requiring public companies to disclose material cybersecurity incidents and describe cyber risk management and governance.Intermediate
- SeccompA Linux kernel feature that restricts which system calls a process may make, reducing kernel attack surface for containers.Advanced
- Second Normal Form (2NF)A table is in 2NF when it is in 1NF and every non-key column depends on the whole primary key, not part of it.Intermediate
- Second-Order SQL InjectionSQL injection in which malicious input is stored safely first and later used unsafely in another query.Advanced
- Secondary RiskA risk that arises as a direct result of implementing a risk response.Intermediate
- Secret Manager (Google Cloud)Google Cloud service for storing, versioning and accessing secrets such as API keys and passwords with IAM control and audit logging.Intermediate
- Secret ScanningAutomatically detecting credentials such as API keys, tokens, and passwords committed to source repositories.Intermediate
- Secrets ManagementSecurely storing, distributing, rotating, and auditing credentials such as passwords, API keys, and certificates.Foundational
- Sector AntennaA high-gain antenna covering a pie-slice sector, often grouped to form 360-degree coverage.Intermediate
- Secure Access Service Edge (SASE)Cloud-delivered architecture converging SD-WAN networking with security services such as SWG, CASB, ZTNA and FWaaS.Intermediate
- Secure BootUEFI feature that allows only cryptographically signed bootloaders and OS components to run at startup.Intermediate
- Secure by DefaultPrinciple that systems ship with the most secure settings enabled out of the box.Foundational
- Secure by DesignApproach where security is built into a product's architecture and development from the start rather than added later.Intermediate
- Secure Code ReviewManual examination of source code to find security flaws, often focused on high-risk components and guided by checklists and tool output.Foundational
- Secure Coding StandardAn organization's documented rules for writing code that avoids known vulnerability classes.Foundational
- Secure Cookie AttributeA cookie flag that instructs browsers to send the cookie only over HTTPS connections.Foundational
- Secure Data SharingSnowflake's capability to share live, read-only database objects with other accounts without copying or moving data.Intermediate
- Secure Digital Card (SD)A removable flash memory card format used in cameras, drones, and some laptops and phones.Foundational
- Secure EnclaveIsolated, hardware-protected processor or memory region that handles sensitive data and keys apart from the main OS.Intermediate
- Secure EraseA drive firmware command that erases all user data on SSDs or HDDs, including remapped areas.Intermediate
- Secure Error HandlingHandling errors and exceptions so the application fails securely, reveals minimal information and logs useful detail internally.Foundational
- Secure Firmware UpdateA device update mechanism that delivers firmware authenticated by digital signature, protected in transit and resistant to rollback.Intermediate
- Secure Hash Algorithm 1 (SHA-1)Legacy 160-bit hash function with practical collision attacks; deprecated for security use.Foundational
- Secure Hash Algorithm 2 (SHA-2)NIST family of hash functions including SHA-224, SHA-256, SHA-384, and SHA-512.Foundational
- Secure Hash Algorithm 3 (SHA-3)NIST hash standard based on the Keccak sponge construction, standardized in FIPS 202.Intermediate
- Secure Multi-Party Computation (SMPC)Cryptographic technique letting parties jointly compute a function over their inputs without revealing those inputs to each other.Advanced
- Secure Print ReleaseA printing feature that holds jobs until the user authenticates at the printer.Foundational
- Secure PropertiesMule module for encrypting sensitive configuration values, referenced with ${secure::key}.Intermediate
- Secure Real-time Transport Protocol (SRTP)Profile of RTP that provides encryption, authentication, and replay protection for voice and video streams.Intermediate
- Secure Remote Access for OTControlled, monitored remote connectivity for vendors and engineers into industrial environments.Intermediate
- Secure Shell (SSH)An encrypted protocol for remote command-line access, tunneling and file transfer, using TCP port 22.Foundational
- Secure Software Development Attestation FormA CISA form in which software producers attest that they follow key secure development practices derived from NIST SSDF.Advanced
- Secure Software Development Framework (SSDF)NIST SP 800-218, a set of high-level secure software development practices grouped into Prepare, Protect, Produce and Respond categories.Intermediate
- Secure Software Development Life Cycle (SSDLC)A software development life cycle that builds security activities into every phase, from requirements and design through deployment and retirement.Foundational
- Secure ViewA Snowflake view whose definition is hidden from unauthorized users and whose optimizations cannot expose underlying data.Intermediate
- Secure Web Gateway (SWG)Security service that filters user web traffic for malware, URL categories, and policy violations.Intermediate
- Secure/Multipurpose Internet Mail Extensions (S/MIME)Standard for signing and encrypting email using X.509 certificates.Intermediate
- Security as a Service (SECaaS)Delivery of security capabilities, such as email filtering, web gateways or SIEM, as cloud-hosted subscription services.Intermediate
- Security Assertion Markup Language (SAML)XML-based standard for exchanging authentication and authorization data between an IdP and SP.Intermediate
- Security Assessment Report (SAR)Document presenting results of a control assessment, including findings and recommendations.Intermediate
- Security Awareness Training (SAT)Education that teaches staff to recognize and report security threats such as phishing and social engineering.Foundational
- Security BaselineA documented minimum set of security configurations and controls that a system type must meet.Foundational
- Security BenchmarkA consensus-based configuration standard specifying secure settings for systems and applications.Intermediate
- Security CategorizationProcess of determining the impact level of a system or information based on potential harm from loss of CIA.Intermediate
- Security ChampionA developer or engineer embedded in a product team who acts as the team's security advocate and liaison to the security group.Foundational
- Security Command Center (SCC)Google Cloud's security and risk management platform providing asset inventory, misconfiguration detection and threat detection.Intermediate
- Security Content Automation Protocol (SCAP)A NIST suite of specifications for automating vulnerability management, measurement and compliance checking.Advanced
- Security ContextPod- and container-level Kubernetes settings that define privilege and access controls such as user ID, capabilities, and read-only filesystems.Advanced
- Security Context Constraints (SCC)OpenShift resources that control the security permissions pods can request, such as running as root or using host resources.Advanced
- Security ControlSafeguard or countermeasure that protects confidentiality, integrity, or availability of information.Foundational
- Security Data LakeA centralized repository that stores large volumes of raw and normalized security telemetry for analytics and long-term retention.Advanced
- Security DebtAccumulated unresolved security flaws and deferred security work in software, which increase risk over time.Foundational
- Security EventAny observable occurrence in a system or network that may have security relevance.Foundational
- Security GateA checkpoint in the SDLC or CI/CD pipeline where defined security criteria must be met before work proceeds.Foundational
- Security Group (SG)Stateful virtual firewall attached to instances or network interfaces that allows specified inbound and outbound traffic.Foundational
- Security IncidentAn occurrence that actually or potentially jeopardizes the confidentiality, integrity or availability of information or systems, or violates security policy.Foundational
- Security Information and Event Management (SIEM)A platform that collects, normalizes, correlates and analyzes log data from across an environment to detect and investigate threats.Foundational
- Security KernelThe hardware, firmware, and software within the TCB that implements the reference monitor concept.Advanced
- Security ListOCI virtual firewall rules applied at the subnet level, specifying allowed ingress and egress traffic.Intermediate
- Security Logging and Monitoring FailuresOWASP Top 10 category for insufficient logging, detection, alerting and response that allows breaches to go unnoticed.Foundational
- Security MetricsQuantifiable measurements used to track security program performance, risk, and control effectiveness.Intermediate
- Security MisconfigurationOWASP Top 10 category for insecure default, incomplete or ad hoc configurations across the application stack.Foundational
- Security Operations (SecOps)ServiceNow suite including Security Incident Response, Vulnerability Response, Threat Intelligence and Configuration Compliance.Foundational
- Security Operations Center (SOC)A centralized team and facility that monitors, detects, analyzes and responds to cybersecurity incidents around the clock.Foundational
- Security Orchestration, Automation and Response (SOAR)A platform that integrates security tools and automates investigation and response workflows using playbooks.Intermediate
- Security PerimeterThe boundary separating trusted components from untrusted ones, either within a system or around a network.Foundational
- Security PillarWell-architected pillar focused on protecting data, systems and assets through identity, detection, infrastructure and data protection, and incident response.Foundational
- Security PolicyHigh-level management statement of intent, direction, and requirements for protecting information assets.Foundational
- Security PostureAn organization's overall security status and its ability to prevent, detect, and respond to threats.Foundational
- Security QuestionnaireStandardized set of questions used to assess a third party's security and privacy controls.Intermediate
- Security Regression TestingRe-running security tests after changes to confirm that previously fixed vulnerabilities have not returned.Foundational
- Security RequirementsStatements of what security properties and controls software must provide, defined early in the SDLC alongside functional requirements.Foundational
- Security Service Edge (SSE)Cloud-delivered security stack combining secure web gateway, CASB and zero trust network access, often with firewall as a service.Intermediate
- Security StandardMandatory requirement specifying uniform use of technologies, configurations, or methods to support policy.Foundational
- Security Steering CommitteeCross-functional management group that prioritizes security initiatives, resolves conflicts, and aligns security with business needs.Intermediate
- Security Technical Implementation Guide (STIG)DISA configuration standards for securing DoD information systems and software.Intermediate
- Security Test CaseA documented test that verifies a specific security requirement or control behaves as intended.Foundational
- Security Through ObscurityRelying on secrecy of design or implementation, rather than sound controls, as the main form of protection.Foundational
- Security User StoryAn agile user story written to capture a security requirement, often from the viewpoint of a defender or attacker.Foundational
- Security ZoneLogical grouping of networks or interfaces with the same trust level, with policy applied between zones.Foundational
- Security-Enhanced Linux (SELinux)A Linux kernel mandatory access control system that confines processes using security labels and policy.Intermediate
- Security.stripInaccessibleApex method that removes fields the user cannot access from records instead of throwing an error.Advanced
- security.txtA standard file (RFC 9116) placed at /.well-known/security.txt that tells researchers how to report security vulnerabilities to an organization.Intermediate
- sedThe Linux stream editor that transforms text non-interactively, most often for search-and-replace.Intermediate
- SeeAllDataTest annotation parameter (@isTest(SeeAllData=true)) giving tests access to existing org data; discouraged.Intermediate
- Seed MetricThe initial metric assigned to routes redistributed into a routing protocol.Intermediate
- SegmentThe Layer 4 PDU produced by TCP, consisting of a TCP header and a chunk of application data.Foundational
- Segment Identifier (SID)An identifier for a segment: an MPLS label in SR-MPLS or an IPv6 address in SRv6.Advanced
- Segment Routing (SR)A source-routing architecture where the ingress node encodes a path as an ordered list of segments, with no per-flow state in the core.Advanced
- Segment Routing Global Block (SRGB)The label range reserved on each router for global SR-MPLS prefix SIDs, default 16000-23999 on Cisco.Advanced
- Segment Routing Header (SRH)An IPv6 routing extension header (routing type 4) that lists SRv6 segments and a Segments Left pointer.Advanced
- Segment Routing Traffic Engineering (SR-TE)Traffic engineering using SR policies identified by headend, color and endpoint, steering traffic onto explicit or dynamic segment lists.Advanced
- SegmentationUsing network separation as a containment measure to restrict an attacker's ability to move or communicate.Foundational
- Segmentation TestingTesting that verifies network segmentation controls actually isolate sensitive zones from other networks.Intermediate
- Segregation of Duties (SoD)Dividing critical tasks among different people so no single person can both commit and conceal errors or fraud.Foundational
- SEI CERT Coding StandardsLanguage-specific secure coding rules from Carnegie Mellon's Software Engineering Institute for C, C++, Java, Perl and Android.Intermediate
- SELECT StatementThe SQL statement that retrieves rows and columns from one or more tables or views.Foundational
- Selection BiasBias introduced when the way subjects or data are selected relates to the outcome being studied.Intermediate
- Selective Forwarding Unit (SFU)A media server that receives streams from participants and forwards selected streams to others without decoding or mixing them.Advanced
- Self JoinA join of a table to itself, using two aliases, to compare rows within the same table.Intermediate
- Self-Assessment Questionnaire (SAQ)PCI DSS validation tool for eligible merchants and service providers to self-assess compliance.Intermediate
- Self-AttentionAttention in which each token in a sequence attends to every other token in the same sequence.Intermediate
- Self-Encrypting Drive (SED)Storage drive with built-in hardware encryption that encrypts all data automatically.Intermediate
- Self-Managing TeamA team that internally decides who does what, when, and how.Foundational
- Self-Monitoring, Analysis, and Reporting Technology (S.M.A.R.T.)Built-in drive health monitoring that tracks attributes such as reallocated sectors and wear level.Intermediate
- Self-RegistrationExperience Cloud setting allowing visitors to create their own site user account.Intermediate
- Self-Service BIEnabling business users to create their own reports and analyses from governed data without relying on IT for each request.Foundational
- Self-Service PortalA web portal where users can log tickets, request services, check status, and search knowledge.Foundational
- Self-Signed CertificateCertificate signed with its own private key rather than by a trusted CA.Foundational
- Self-Supervised Learning (SSL)Learning in which the training signal is generated automatically from the data itself, without human labels.Intermediate
- SELinux BooleanAn on/off SELinux policy switch that enables optional behaviors without writing custom policy.Advanced
- SELinux ContextThe security label (user:role:type:level) attached to every file, process and port that SELinux uses for access decisions.Advanced
- SELinux ModesThe three SELinux operating states: enforcing (blocks and logs), permissive (logs only) and disabled.Intermediate
- semanageThe SELinux policy management tool for persistently configuring file contexts, port labels, booleans and user mappings.Advanced
- Semantic LayerA business-friendly abstraction over physical data that defines entities, relationships and metrics once for consistent use across tools.Intermediate
- Semantic ModelPower BI's model, formerly called a dataset, containing tables, relationships, measures, hierarchies and security that reports query.Intermediate
- Semantic SearchSearch that retrieves results by meaning, using embeddings, rather than by exact keyword match.Foundational
- Semantic Versioning (SemVer)A versioning scheme of MAJOR.MINOR.PATCH where major indicates breaking changes, minor adds compatible features, and patch fixes bugs.Foundational
- SemgrepAn open-source, pattern-based static analysis tool that scans code for bugs and security issues using rules that resemble source code.Intermediate
- Semi JoinA join pattern that returns rows from one table that have at least one match in another, without duplicating them.Advanced
- Semi-Additive MeasureA fact that can be summed across some dimensions but not across time, such as account balances or inventory levels.Advanced
- Semi-Directional AntennaAn antenna that focuses energy in one general direction, such as patch, panel, and Yagi antennas.Intermediate
- Semi-Quantitative Risk AnalysisHybrid approach that assigns numeric scores to qualitative scales to rank and combine risks.Intermediate
- Semi-Structured DataData with self-describing tags or keys but no rigid tabular schema, such as JSON, XML, Avro or Parquet with nested fields.Foundational
- Semi-Supervised LearningLearning that combines a small labeled dataset with a large unlabeled dataset to improve model accuracy.Intermediate
- Send ClassificationMarketing Cloud setting combining a sender profile, delivery profile and commercial or transactional designation.Intermediate
- Sendable Data ExtensionData extension configured with a send relationship mapping a field to Subscriber Key so it can be emailed.Intermediate
- Sender Authentication Package (SAP)Marketing Cloud add-on bundle providing a branded private domain, dedicated IP and reply mail management.Advanced
- Sender ProfileMarketing Cloud setting specifying the From name and From address for sends.Intermediate
- Senior Agency Information Security Officer (SAISO)Federal official responsible for carrying out the CIO's FISMA security responsibilities, often the agency CISO.Advanced
- Senior SupplierPRINCE2 Project Board role representing those designing, developing, and implementing the project's products.Intermediate
- Senior UserPRINCE2 Project Board role representing those who will use the project's products and realize benefits.Intermediate
- Sensitive Authentication Data (SAD)Card security data such as full track data, card verification codes, and PINs that must not be stored after authorization.Intermediate
- Sensitive Information DisclosureAn LLM application risk where the model reveals confidential data, PII or secrets in its outputs.Intermediate
- Sensitive Personal Information (SPI)CPRA category of personal information subject to the right to limit its use and disclosure.Intermediate
- Sensitivity AnalysisQuantitative technique that determines which individual risks or uncertainties have the most potential impact on outcomes.Advanced
- Sensitivity LabelMicrosoft Purview metadata tag that classifies content and can apply encryption, marking, and DLP policies.Intermediate
- Sentiment AnalysisAn NLP task that determines whether text expresses positive, negative or neutral opinion.Foundational
- SentinelHashiCorp's policy-as-code framework that enforces rules on Terraform runs in HCP Terraform and Terraform Enterprise.Advanced
- Separation of Duties (SoD)Dividing a critical task among multiple people so no single individual can complete it alone.Foundational
- Separation of PrivilegeRequire more than one condition, key or party to grant access to sensitive functions.Intermediate
- Separation of Storage and ComputeAn architecture in which data lives in independent storage and compute resources scale, start and stop separately.Intermediate
- Separation PadA friction pad that ensures only one sheet of paper feeds at a time.Foundational
- SequenceA standalone database object that generates unique numbers on request, independent of any one table.Intermediate
- Sequence ActivitiesProcess of identifying and documenting relationships among project activities.Foundational
- Sequence NumberA 32-bit TCP header field that numbers the bytes in a stream so the receiver can reorder data and detect loss.Intermediate
- Sequential Color PaletteA single-hue (or light-to-dark) color scale for ordered numeric data running from low to high.Intermediate
- Serial ATA (SATA)A common serial interface for hard drives and SSDs, with a 6 Gb/s maximum in SATA III, used in desktops and lower-tier servers.Foundational
- Serial Attached SCSI (SAS)A point-to-point serial interface for enterprise drives, offering dual-porting, higher reliability and compatibility with SATA drives.Foundational
- Serial Digital Interface (SDI)A SMPTE standard for uncompressed digital video over 75-ohm coaxial cable with BNC connectors, used in broadcast and live production.Intermediate
- Serial PortA legacy RS-232 interface (DB-9) used for console connections and older peripherals.Foundational
- Serial Presence Detect (SPD)A small EEPROM on a memory module that stores its size, speed, timings, and voltage.Advanced
- SerializableThe strictest isolation level, in which concurrent transactions behave as if they had run one after another.Advanced
- Serialization DelayThe time required to clock a frame's bits onto a physical link, equal to frame size divided by link speed.Intermediate
- Servant LeadershipLeadership style that focuses on understanding and addressing team members' needs and development to enable high performance.Foundational
- Server CoreA minimal Windows Server installation option without the desktop GUI, managed remotely or from the command line.Foundational
- Server GroupA CUBE voice class that lists multiple SIP destinations with preferences so one dial peer can target several servers.Advanced
- Server ManagerThe built-in Windows Server console for adding roles and features and monitoring local and remote servers.Foundational
- Server Message Block (SMB)The Windows file and printer sharing protocol, running directly over TCP port 445.Foundational
- Server-Side JavaScript (SSJS)JavaScript executed on Marketing Cloud servers for complex logic in CloudPages and Script Activities.Advanced
- Server-Side Request Forgery (SSRF)An attack that makes a server issue requests to unintended internal or external destinations on the attacker's behalf.Advanced
- Server-Side Template Injection (SSTI)A vulnerability where user input is embedded into a server-side template as template code rather than data, potentially leading to remote code execution.Advanced
- Serverless ComputingCloud execution model where the provider manages servers and scaling, and customers pay only for actual usage.Foundational
- ServiceA Kubernetes object that provides a stable virtual IP and DNS name to load balance traffic to a set of pods selected by labels.Foundational
- Service AccountA Kubernetes identity for processes running in pods to authenticate to the API server and, via federation, to cloud services.Intermediate
- Service Account (Google Cloud)Google Cloud identity used by applications and workloads rather than people, authenticated with short-lived tokens or keys.Intermediate
- Service AppointmentRecord representing a scheduled visit to perform field work, assigned to one or more service resources.Intermediate
- Service CatalogSelf-service collection of orderable items and services presented through portals.Foundational
- Service Catalogue ManagementThe ITIL practice of providing a single source of consistent information on all services and offerings.Intermediate
- Service Configuration ManagementThe ITIL practice of ensuring accurate information about configuration items and their relationships is available.Intermediate
- Service ConnectionAn Azure DevOps object that securely stores credentials pipelines use to access external services such as Azure subscriptions, registries, or Kubernetes.Intermediate
- Service ConsoleLightning console app with workspace tabs and subtabs optimized for high-volume support work.Foundational
- Service Control Policy (SCP)AWS Organizations policy that sets the maximum available permissions for IAM principals in member accounts.Intermediate
- Service Desk PracticeThe ITIL 4 practice that captures demand for incident resolution and service requests as the single point of contact.Foundational
- Service EndpointAzure VNet feature that extends a subnet's identity to Azure PaaS services over the Azure backbone so services can restrict access to that subnet.Intermediate
- Service GatewayOCI gateway that lets resources in a VCN access Oracle services such as Object Storage privately without the internet.Intermediate
- Service Graph ConnectorCertified integration that imports third-party data (such as Microsoft SCCM, Intune, AWS) into the CMDB through the IRE.Advanced
- Service Instance (SAP BTP)Provisioned instance of a BTP service plan, with service bindings or keys providing credentials to applications.Advanced
- Service LevelA contact center metric measuring the percentage of contacts answered within a target time, such as 80 percent in 20 seconds.Foundational
- Service Level Agreement (SLA)Contractual commitment from a provider defining service availability or performance targets and remedies if they are missed.Foundational
- Service Level Agreement (ServiceNow) (SLA)Task SLA record tracking time against a commitment, such as resolve P1 incidents within 4 hours.Intermediate
- Service Level Expectation (SLE)Mist metrics measuring user experience against configurable thresholds, such as Time to Connect and Coverage.Intermediate
- Service Level Indicator (SLI)A quantitative measure of some aspect of a service's level of service, such as request latency, error rate, or availability.Foundational
- Service Level ManagementThe ITIL practice of setting clear business-based targets for service levels and monitoring performance against them.Intermediate
- Service Level Objective (SLO)A target value or range for an SLI over a time window, such as 99.9% of requests succeeding over 30 days.Foundational
- Service MappingITOM application that discovers application services top-down from an entry point, mapping their components and dependencies.Advanced
- Service MeshAn infrastructure layer that manages service-to-service communication with traffic management, mTLS security, and observability, usually via proxies.Intermediate
- Service OfferingCSDM record defining a variation of a service with specific commitments, such as Email - Gold.Advanced
- Service PortalAngularJS-based framework for building self-service portals using pages, widgets and themes.Intermediate
- Service PrincipalSecurity identity in an Entra tenant representing an application or automation tool that needs access to resources.Intermediate
- Service Principal Name (SPN)A unique identifier registered in AD that maps a service instance to the account it runs under for Kerberos authentication.Advanced
- Service ProfileA Cisco UCS software definition of a server's identity and configuration, such as MACs, WWNs, UUID, firmware, BIOS and boot policy.Advanced
- Service Provider (SP)Application that relies on an identity provider's assertion to grant users access; called a relying party in OIDC.Intermediate
- Service Record (SRV)A DNS record that specifies the host and port for a particular service, with priority and weight.Intermediate
- Service Request ManagementThe ITIL practice of handling pre-defined, user-initiated requests for services.Foundational
- Service ResourceRecord for a technician, crew or asset that can be assigned to service appointments.Intermediate
- Service Set Identifier (SSID)The human-readable name of a wireless network, up to 32 octets.Foundational
- Service TerritoryRegion in which field service work is performed, with members and operating hours.Intermediate
- Service TypesThe Kubernetes Service exposure modes: ClusterIP, NodePort, LoadBalancer, and ExternalName.Foundational
- Service Value ChainThe ITIL 4 operating model of six activities that convert demand into value.Foundational
- Service Value System (SVS)ITIL 4's model of how components work together to create value from opportunity and demand.Foundational
- ServiceNow AI AgentAutonomous agent on the Now Platform that plans and executes tasks using tools, with human oversight.Intermediate
- ServiceNow InstanceA single customer environment of ServiceNow with its own URL, database and configuration, such as dev, test or prod.Foundational
- ServiceNow Integrated Risk Management (IRM)ServiceNow GRC suite for managing policies, compliance, risk, audit, vendor risk and business continuity on the Now Platform.Foundational
- ServiceNow Now PlatformServiceNow's single cloud platform and data model on which ITSM, CSM, HR, SecOps, IRM, SPM and custom apps run.Foundational
- ServiceNow Security Incident Response (SIR)A ServiceNow application for managing security incidents with workflows, playbooks, threat intelligence and integrations.Advanced
- ServiceNow StoreMarketplace of certified applications and integrations from ServiceNow and partners.Foundational
- ServiceNow StudioIDE within ServiceNow for building and managing scoped application files.Intermediate
- ServiceNow TableDatabase structure storing records in ServiceNow; every list, form and module is based on a table.Foundational
- ServiceNow Third-Party Risk Management (TPRM)ServiceNow application for assessing and monitoring vendor risk through tiering, questionnaires, documents and issues.Intermediate
- Services ConsoleThe Windows tool (services.msc) for starting, stopping, and configuring background services.Foundational
- Session Border Controller (SBC)A device at the edge of a VoIP network that secures, normalizes and controls SIP signaling and media between domains.Intermediate
- Session Description Protocol (SDP)A text format (RFC 8866) carried in SIP bodies that describes media streams: IP address, port, codecs and attributes.Intermediate
- Session FixationAn attack in which the attacker sets a victim's session ID before login and then uses it after the victim authenticates.Intermediate
- Session HijackingTaking over a valid user session by stealing or predicting its session identifier or token.Intermediate
- Session ID in URLPassing session tokens in URL query strings or paths, which exposes them in logs, history and Referer headers.Foundational
- Session Initiation Protocol (SIP)A signaling protocol that sets up, modifies and tears down VoIP and video sessions, using port 5060 (unencrypted) and 5061 (TLS).Foundational
- Session InvalidationDestroying a session on the server so its identifier can no longer be used, such as at logout or password change.Foundational
- Session KeyA temporary symmetric key used to encrypt a single communication session.Foundational
- Session Layer (L5)OSI Layer 5, which establishes, manages and terminates sessions (dialogs) between applications.Foundational
- Session ManagementThe secure creation, maintenance and termination of user sessions after authentication.Foundational
- Session Management Edition (SME)A CUCM deployment used as a central SIP routing core that aggregates multiple CUCM clusters, PBXs and gateways.Advanced
- Session ManagerAWS Systems Manager capability providing browser or CLI shell access to instances without open inbound ports, bastions or SSH keys.Intermediate
- Session SettingsOrg settings controlling session timeout, IP locking, clickjack protection and session security levels.Intermediate
- Session TimeoutAutomatic expiration of a session after inactivity (idle timeout) or after a maximum lifetime (absolute timeout).Foundational
- Session Token EntropyThe unpredictability of a session identifier, which must be high enough that guessing a valid one is infeasible.Intermediate
- Session Traversal Utilities for NAT (STUN)A protocol (RFC 8489) that lets an endpoint discover its public IP and port as seen by a server outside the NAT.Advanced
- Session WindowA dynamic window per key that groups events separated by less than a gap of inactivity.Advanced
- Set Group ID (SGID)A special permission that runs a file with its group's privileges, or makes new files in a directory inherit the directory's group.Intermediate
- Set User ID (SUID)A special permission that makes an executable run with the privileges of the file's owner rather than the user running it.Intermediate
- Setup Audit TrailLog of the last 180 days of configuration changes made in Setup, showing who changed what and when.Foundational
- Seven Basic Quality ToolsClassic quality tools: cause-and-effect diagram, flowchart, check sheet, Pareto chart, histogram, control chart, and scatter diagram.Foundational
- Seven Patterns of AICPMAI classification of AI use cases into seven patterns, used to clarify data needs, approach, and success criteria.Intermediate
- Shadow AIUse of AI tools by employees without the organization's approval or oversight.Foundational
- Shadow APIAn API endpoint that is undocumented or unknown to the security team and therefore unmanaged.Intermediate
- Shadow DeploymentRunning a new model alongside production on live traffic without returning its predictions to users.Intermediate
- Shadow ITHardware, software or cloud services used inside an organization without the approval or knowledge of IT and security.Foundational
- Shadow LocationA built-in CUCM location assigned to SIP intercluster trunks so Enhanced Locations CAC can be applied end to end between clusters.Advanced
- Shadow StackA hardware- or software-protected copy of return addresses used to detect tampering with the regular call stack.Advanced
- Shamir's Secret Sharing (SSS)Algorithm that splits a secret into N shares where any threshold of M shares can reconstruct it.Advanced
- SHAPSHapley Additive exPlanations: a method that attributes a prediction to each feature using game-theoretic Shapley values.Intermediate
- ShapingA QoS action that buffers excess traffic to send it at a configured rate, smoothing bursts.Foundational
- Shard KeyThe field or fields used to decide which shard stores each document or row.Advanced
- ShardingHorizontal partitioning of data across multiple database servers (shards) to scale writes and storage.Intermediate
- Share (Risk Response)Opportunity response that allocates ownership of an opportunity to a third party best able to capture it.Intermediate
- Share GroupGroup that shares records owned by high-volume external users with internal or external users.Advanced
- Share ObjectSystem object (such as AccountShare or MyObject__Share) that stores the sharing entries for records of an object.Advanced
- Share PermissionsPermissions on an SMB shared folder (Full Control, Change, Read) that apply only when accessed over the network.Foundational
- Shared Access Signature (SAS)Signed URI token granting restricted, time-limited delegated access to Azure Storage resources.Intermediate
- Shared Address SpaceThe 100.64.0.0/10 block reserved by RFC 6598 for carrier-grade NAT between an ISP and customer routers.Intermediate
- Shared CallingA Teams Phone feature that lets users make and receive PSTN calls using a shared number from a resource account.Advanced
- Shared FateGoogle Cloud's extension of shared responsibility in which the provider actively helps customers deploy securely.Intermediate
- Shared Key AuthenticationLegacy WEP-based 802.11 authentication using a challenge-response with the static WEP key.Intermediate
- Shared LineA directory number configured on multiple devices so that all ring together and see each other's call states.Foundational
- Shared Responsibility ModelFramework dividing security and operational duties between the cloud provider (of the cloud) and customer (in the cloud).Foundational
- Shared Risk Link Group (SRLG)A group of links that share a common physical resource, such as a conduit, and could fail together.Advanced
- Shared TreeA multicast distribution tree rooted at the RP and used by all sources for a group, written (*,G).Intermediate
- Shared VPCGoogle Cloud feature letting a host project share its VPC networks with service projects in the same organization.Intermediate
- Shared-Disk ArchitectureA distributed design in which all compute nodes access a common storage layer.Advanced
- Shared-Nothing ArchitectureA distributed design in which each node has its own CPU, memory and disk, sharing nothing with other nodes.Advanced
- Sharing KeywordsApex class declarations with sharing, without sharing and inherited sharing that control whether record sharing rules are enforced.Intermediate
- Sharing RuleAutomatic exception to OWDs that grants read or read/write access to groups of users based on record owner or field criteria.Foundational
- Sharing SetExperience Cloud feature granting high-volume external users access to records related to their account or contact.Intermediate
- SHARPScalable Hierarchical Aggregation and Reduction Protocol: NVIDIA in-network computing that performs collectives inside switches.Advanced
- ShebangThe #! line at the top of a script that specifies which interpreter should execute it.Foundational
- Shell ScriptA text file containing shell commands and control logic executed in sequence to automate administrative tasks.Intermediate
- Sherwood Applied Business Security Architecture (SABSA)Business-driven enterprise security architecture framework built on six layers of views.Advanced
- Shield Platform EncryptionShield feature encrypting data at rest in fields, files and attachments using tenant secrets and optional customer-managed keys.Advanced
- Shielded Twisted Pair (STP)Twisted-pair cable with foil or braided shielding around pairs or the whole cable to reduce EMI and crosstalk.Foundational
- Shielded VMA Hyper-V Generation 2 VM protected by encryption and a Host Guardian Service so only authorized hosts can run it.Advanced
- Shift LeftThe practice of moving testing, security, and quality activities earlier in the software delivery lifecycle.Foundational
- Shift-Right TestingTesting and validating software in production using monitoring, canaries, feature flags, chaos experiments, and real user data.Intermediate
- ShodanA search engine that indexes internet-connected devices and their service banners.Foundational
- Shor's AlgorithmQuantum algorithm that efficiently factors integers and computes discrete logarithms, breaking RSA, DH, and ECC.Advanced
- Short Interframe Space (SIFS)The shortest 802.11 interframe space, used before ACKs, CTS, and frames in a TXOP.Advanced
- Shortest Path First Algorithm (SPF)Dijkstra's algorithm, used by OSPF and IS-IS to compute a loop-free shortest path tree from the LSDB.Intermediate
- Shortest Path Tree (SPT)A multicast source tree rooted at the source, written (S,G), giving the optimal path from source to receivers.Intermediate
- Shoulder SurfingObserving someone's screen or keyboard to obtain sensitive information such as passwords or PINs.Foundational
- Show Interfaces CommandThe Cisco IOS command that displays an interface's status, speed, duplex, counters and errors.Foundational
- ShowbackReporting cloud costs to the teams or business units that incurred them without actually billing them.Foundational
- ShuffleRedistributing data across Spark executors by key, involving disk and network I/O, to perform joins, aggregations or repartitioning.Advanced
- shutdown CommandA Windows command to shut down, restart, or log off local or remote computers.Foundational
- Side LobeUnintended secondary radiation lobes outside an antenna's main beam.Advanced
- Side-by-Side ExtensionExtension built on SAP BTP that runs separately from the ERP and integrates via APIs and events.Intermediate
- Side-Channel AttackAttack that extracts secrets from physical or implementation leaks such as timing, power, or electromagnetic emissions.Advanced
- Sidecar ContainerA helper container that runs alongside the main application container in the same pod to extend its functionality.Intermediate
- SideloadingInstalling apps on a mobile device from outside the official app store.Foundational
- SigmaA generic, vendor-neutral signature format for writing log-based detection rules that convert to SIEM queries.Advanced
- Sigma LevelA measure of process capability expressing how many standard deviations fit between the mean and nearest specification limit.Advanced
- Sigmoid FunctionAn S-shaped activation that maps any real number to the range 0 to 1.Foundational
- Signal FlowThe path an audio, video or control signal takes from source through processing and distribution to destination devices.Foundational
- Signal QuantizationThe step in digitization that rounds each sample to the nearest discrete level, introducing small quantization error.Foundational
- Signal-to-Interference-plus-Noise Ratio (SINR)The ratio of desired signal power to the sum of interference and noise.Intermediate
- Signal-to-Noise Ratio (SNR)The difference in dB between received signal strength and the noise floor.Foundational
- Signaling System 7 (SS7)The carrier-grade out-of-band signaling network used between PSTN switches for call setup, routing and number portability.Intermediate
- Signature-Based DetectionDetecting threats by matching known patterns, such as file hashes or byte sequences, against a database of signatures.Foundational
- Signed CommitA Git commit cryptographically signed with GPG, SSH, or S/MIME keys to verify the author's identity.Advanced
- Significance Level (α)The threshold probability α for rejecting the null hypothesis, commonly 0.05, which equals the accepted Type I error rate.Foundational
- Significant DeficiencyControl deficiency less severe than a material weakness but important enough to merit attention of those charged with governance.Advanced
- Significant DigitsA setting on inbound CUCM gateways and trunks that keeps only the rightmost N digits of the called number.Intermediate
- SigstoreAn open-source project (OpenSSF) providing free tooling and public infrastructure for signing and verifying software artifacts.Advanced
- Silver LayerThe medallion layer that holds cleansed, deduplicated, validated and conformed data at roughly entity grain.Intermediate
- Silver TicketA forged Kerberos service ticket created with a service account's hash to access a specific service.Advanced
- SIM SwappingFraudulently transferring a victim's phone number to an attacker-controlled SIM to intercept calls and SMS codes.Intermediate
- Simple Mail Transfer Protocol (SMTP)The protocol for sending email and relaying it between mail servers, using TCP port 25 (server-to-server) and 587 (client submission).Foundational
- Simple Network Management Protocol (SNMP)A traditional UDP-based protocol for monitoring and managing network devices using MIBs, polling (ports 161) and traps (port 162).Foundational
- Simple Network Management Protocol version 3 (SNMPv3)Version of SNMP adding user-based authentication and encryption for device monitoring and management.Foundational
- Simple Random Sampling (SRS)A sampling method in which every member of the population has an equal chance of being selected.Foundational
- Simpson's ParadoxA phenomenon in which a trend in several groups reverses or disappears when the groups are combined.Advanced
- Simulation ExerciseAn exercise that simulates an incident with hands-on activity in a controlled environment to test response capabilities.Intermediate
- SimulcastSending several independently encoded versions of the same video at different resolutions so a server can forward the right one.Advanced
- Simultaneous Authentication of Equals (SAE)Password-authenticated key exchange (Dragonfly) used by WPA3-Personal.Intermediate
- Simultaneous Multithreading (SMT)A CPU feature that lets each physical core run two hardware threads, presenting more logical processors to the OS.Intermediate
- Single InboxA Unity Connection feature that synchronizes voicemails into users' Exchange or Microsoft 365 mailboxes alongside email.Intermediate
- Single Loss Expectancy (SLE)Expected monetary loss from one occurrence of a threat event: SLE = Asset Value x Exposure Factor.Foundational
- Single Number Reach (SNR)A Cisco Unified Mobility feature that rings a user's remote devices such as a mobile phone simultaneously with the desk phone.Intermediate
- Single Point of Failure (SPOF)Component whose failure stops the entire system because no redundant alternative exists.Foundational
- Single Root I/O Virtualization (SR-IOV)A PCIe standard that lets one physical device present multiple virtual functions directly to VMs, bypassing the hypervisor switch.Advanced
- Single Sign-On (SSO)Allowing a user to authenticate once and access multiple applications without signing in again.Foundational
- Single Sign-On for Collaboration (SSO)Using a SAML or OIDC identity provider so users authenticate once to CUCM, Unity Connection, Expressway or Webex services.Intermediate
- Single Source of Truth (SSOT)The practice of having one authoritative source for each data element or metric so that everyone uses consistent numbers.Foundational
- Single-Minute Exchange of Die (SMED)Lean method for reducing setup or changeover time to under ten minutes.Advanced
- Single-Mode Fiber (SMF)Fiber with a very small core (about 9 microns) that carries a single light path, supporting distances of tens to hundreds of kilometers.Foundational
- Single-User MIMO (SU-MIMO)MIMO in which all spatial streams of a transmission go to one client.Intermediate
- SIP Application Layer Gateway (SIP ALG)A firewall or router feature that inspects and rewrites SIP messages and opens pinholes for RTP media across NAT.Intermediate
- SIP DialogA peer-to-peer SIP relationship between two user agents identified by Call-ID, From tag and To tag that persists for a call.Advanced
- SIP Digest AuthenticationSIP's challenge-response authentication in which a server responds 401 or 407 with a nonce and the client returns a hashed credential.Intermediate
- SIP INVITEThe SIP request method that initiates a session, normally carrying an SDP offer describing the caller's media.Foundational
- SIP Normalization ScriptA Lua script attached to a CUCM SIP trunk that modifies SIP messages for interoperability with other systems.Advanced
- SIP OPTIONS PingPeriodic SIP OPTIONS requests used to monitor whether a SIP trunk peer is reachable and in service.Intermediate
- SIP over TLS (SIPS)Securing SIP signaling with TLS, normally on TCP port 5061, to provide confidentiality, integrity and authentication.Intermediate
- SIP ProfileA rule set that adds, modifies or removes SIP headers and SDP lines on CUBE, or a set of SIP parameters on CUCM trunks and phones.Advanced
- SIP Proxy ServerA SIP intermediary that receives requests and forwards them toward the destination, applying routing and policy.Intermediate
- SIP Recording (SIPREC)The IETF standard (RFC 7866) in which an SBC forks call media and metadata to a recording server using SIP.Advanced
- SIP Redirect ServerA SIP server that answers a request with a 3xx response telling the caller where to resend it rather than forwarding it.Intermediate
- SIP RegistrarA SIP server that accepts REGISTER requests and binds a user's address of record to the device's current contact address.Foundational
- SIP Registration HijackingAn attack in which an adversary sends a forged REGISTER to bind a victim's SIP address to the attacker's device.Advanced
- SIP Reliable Provisional Responses (PRACK)The RFC 3262 extension that makes 1xx responses reliable by requiring a PRACK acknowledgment, signaled by the 100rel option tag.Advanced
- SIP Response CodesThree-digit SIP status codes grouped into classes 1xx provisional, 2xx success, 3xx redirection, 4xx client error, 5xx server and 6xx global failure.Intermediate
- SIP Route PatternA CUCM pattern that routes calls by domain or IP address, or by ILS route string, to a SIP trunk.Advanced
- SIP ScanningAutomated probing of the internet or a network for SIP devices and extensions, often as reconnaissance for toll fraud.Intermediate
- SIP TrunkA SIP signaling connection between two call control systems or between an enterprise and a service provider.Foundational
- SIP URIA SIP address in the form sip:user@host that identifies a user, device or service, similar to an email address.Foundational
- SIP User Agent (UA)A SIP endpoint that originates requests as a user agent client (UAC) and answers them as a user agent server (UAS).Foundational
- SIPOCHigh-level process map listing Suppliers, Inputs, Process, Outputs, and Customers.Foundational
- Site of Origin (SoO)A BGP extended community identifying the customer site a route came from, preventing loops at multihomed sites.Advanced
- Site Reliability Engineering (SRE)A discipline, created at Google, that applies software engineering to operations problems to build scalable and highly reliable systems.Foundational
- Site SurveyAssessment of the RF environment to design, deploy, or validate a WLAN for coverage and capacity.Foundational
- Site TagA Catalyst 9800 object that assigns an AP join profile and, for remote sites, a flex profile.Advanced
- Site-to-Site VPNEncrypted IPsec tunnel over the internet connecting an on-premises network to a cloud virtual network.Foundational
- Situational LeadershipLeadership model in which the leader adapts style (directing, coaching, supporting, delegating) to followers' competence and commitment.Intermediate
- Six Decibel RuleEach doubling of distance causes approximately 6 dB of additional free space path loss.Intermediate
- Six SigmaData-driven quality methodology aiming to reduce process variation to no more than 3.4 defects per million opportunities.Foundational
- Six Sigma BeltsRole structure in Six Sigma: Champion, Master Black Belt, Black Belt, Green Belt, Yellow Belt, and White Belt.Foundational
- SkewnessA measure of a distribution's asymmetry: right (positive) skew has a long right tail, left (negative) skew a long left tail.Intermediate
- Skills-Based RoutingOmni-Channel routing model that assigns work to agents with the required skills and levels.Advanced
- Skinny Client Control Protocol (SCCP)A Cisco proprietary stimulus protocol (TCP 2000, 2443 secure) used by older Cisco phones and by media resources to talk to CUCM.Intermediate
- SkopeoA command-line tool for inspecting, copying, and signing container images between registries without pulling them locally.Advanced
- SLA ClassA Cisco SD-WAN policy object defining maximum loss, latency and jitter for application-aware routing.Advanced
- SLA DefinitionConfiguration defining when an SLA starts, pauses, stops and its duration and schedule.Intermediate
- SLA TierService level definition for an API that sets request limits for client applications that request access.Intermediate
- Slack SpaceUnused space between the end of a file's data and the end of the last cluster allocated to it.Intermediate
- Sleep ModeA low-power state that keeps memory powered so the system resumes quickly.Foundational
- Slice and DiceOLAP operations: slicing fixes one dimension to a single value, and dicing selects a sub-cube using values from several dimensions.Foundational
- SlicerAn on-canvas Power BI visual that lets users filter other visuals on the page by selecting values.Foundational
- Sliding WindowA TCP mechanism that lets a sender transmit multiple segments before needing an acknowledgment, with the allowed amount adjusting dynamically.Intermediate
- Sliding Window (Stream Processing)Fixed-size windows that overlap because they advance by a smaller interval, so an event can fall into several windows.Advanced
- Slot TimeThe basic time unit for 802.11 backoff counting: 9 microseconds for OFDM or 20 microseconds for DSSS.Advanced
- Slowly Changing Dimension (SCD)Techniques for handling changes to dimension attributes over time, such as a customer moving city.Intermediate
- SLSA Build LevelsThe graded levels of the SLSA Build track that describe increasing guarantees about how an artifact was built.Advanced
- SlurmAn open-source workload manager and job scheduler widely used for HPC and large AI training clusters.Intermediate
- Small File ProblemPerformance degradation caused by large numbers of tiny files, which increase metadata overhead and per-file open costs.Advanced
- Small Form Factor PC (SFF)A compact desktop design that uses smaller boards, low-profile cards, and limited internal space.Foundational
- Small Form-Factor Pluggable (SFP)A hot-swappable transceiver module, typically 1 Gbps, that plugs into a switch or router port to provide fiber or copper connectivity.Foundational
- Small Form-Factor Pluggable Plus (SFP+)An enhanced SFP module supporting 10 Gbps, physically compatible with SFP ports.Foundational
- Small Language Model (SLM)A language model with relatively few parameters (typically under ~15B) designed for efficiency, edge or cost-sensitive use.Intermediate
- Small MultiplesA grid of small charts with the same scale and axes, each showing a different subset of the data, for easy comparison.Intermediate
- Small Outline DIMM (SO-DIMM)A smaller memory module used in laptops, mini PCs, and some all-in-ones.Foundational
- Smart AntennaAn antenna system that dynamically adjusts its pattern to focus energy toward clients.Advanced
- Smart CardCredit-card-sized card with an embedded chip that securely stores certificates and private keys for authentication.Foundational
- Smart Card ReaderA device that reads chip-based cards used for authentication, such as PIV and CAC cards.Foundational
- Smart JackAn intelligent network interface device at the demarc that lets the carrier run remote diagnostics, such as loopback tests, on a circuit.Intermediate
- Smartphone TetheringSharing a phone's cellular data connection with another device via USB, Bluetooth, or Wi-Fi hotspot.Foundational
- SmartScreenA Microsoft reputation-based protection that warns about malicious sites and untrusted downloads.Intermediate
- SmishingPhishing conducted through SMS or other text messaging.Foundational
- Smoke TestA quick, shallow test run after a build or deployment to confirm the most critical functions work.Foundational
- SMPTE ST 2110A suite of SMPTE standards for carrying separate video, audio and ancillary data streams over IP networks in professional media.Advanced
- SMS-Based AuthenticationSending one-time codes by text message as a second factor; convenient but weak.Foundational
- SnapMirrorNetApp's replication technology that copies Snapshot-based volume data between ONTAP systems for disaster recovery or backup.Advanced
- SnapshotA point-in-time capture of the state of a volume, virtual machine or storage system.Foundational
- Snapshot IsolationAn isolation level in which each transaction reads a consistent snapshot of the data as of its start, using row versions.Advanced
- Snapshot TechniqueContinuous audit technique capturing images of a transaction at selected points as it flows through an application.Advanced
- Sniffer ModeAn AP mode that captures frames on one channel and forwards them to a remote packet analyzer.Intermediate
- SNMP TrapAn unsolicited message an SNMP agent sends to a manager on UDP 162 when a significant event occurs.Intermediate
- SNMPv3The secure version of SNMP, providing user-based authentication, message integrity and encryption.Intermediate
- SnortAn open-source network intrusion detection and prevention system using rule-based signature matching, now maintained by Cisco.Intermediate
- Snowflake ArchitectureSnowflake's three independent layers: database storage, query processing (virtual warehouses) and cloud services.Foundational
- Snowflake Cortex AISnowflake's built-in AI features for running LLM functions, search and agents on data inside Snowflake.Intermediate
- Snowflake CreditThe unit of Snowflake compute consumption, charged for warehouses, serverless features and cloud services above the daily threshold.Foundational
- Snowflake EditionsSnowflake service tiers (Standard, Enterprise, Business Critical, Virtual Private Snowflake) that unlock progressively more features and security.Foundational
- Snowflake Fail-safeA non-configurable 7-day period after Time Travel during which Snowflake can recover permanent table data for disaster recovery.Intermediate
- Snowflake Iceberg TableA Snowflake table that stores data and metadata in the Apache Iceberg format in customer-managed cloud storage, using Snowflake or an external catalog.Advanced
- Snowflake MarketplaceSnowflake's marketplace of free and paid listings of live datasets, data services and Native Apps from third-party providers.Intermediate
- Snowflake Replication and FailoverFeatures that replicate Snowflake databases and account objects to other regions or clouds, with failover groups and client redirect for continuity.Advanced
- Snowflake Resource MonitorA Snowflake object that tracks credit usage by warehouses against a quota and can notify, suspend, or suspend immediately at thresholds.Intermediate
- Snowflake SchemaA dimensional model whose dimension tables are normalized into multiple related tables, such as Product to Subcategory to Category.Intermediate
- Snowflake StageA named or implicit location of data files used for loading and unloading: internal (Snowflake-managed) or external (S3, Azure Blob, GCS).Intermediate
- Snowflake StreamA Snowflake object that records DML changes (inserts, updates, deletes) to a table since an offset, enabling CDC processing.Intermediate
- Snowflake System-Defined RolesSnowflake's built-in roles: ORGADMIN, ACCOUNTADMIN, SECURITYADMIN, USERADMIN, SYSADMIN and PUBLIC.Intermediate
- Snowflake TaskA Snowflake object that runs a SQL statement, procedure call or Snowflake Scripting block on a schedule or after a predecessor task, forming DAGs.Intermediate
- SnowparkSnowflake's developer framework with Python, Java and Scala DataFrame APIs whose operations are pushed down and executed inside Snowflake.Intermediate
- SnowpipeSnowflake's serverless continuous ingestion service that loads staged files soon after arrival, triggered by cloud event notifications or REST calls.Intermediate
- Snowpipe StreamingA Snowflake API for low-latency, row-level ingestion of streaming data directly into tables without staging files.Advanced
- SnowsightSnowflake's web interface for worksheets, notebooks, dashboards, data browsing, administration and monitoring.Foundational
- SnowSQLSnowflake's legacy command-line client for executing SQL and PUT/GET file transfers; the newer Snowflake CLI is its successor.Intermediate
- SOAPA legacy XML-based messaging protocol for web services that wraps requests in an envelope and is described by WSDL.Intermediate
- SOAP APISalesforce's XML-based API using strongly typed Enterprise or loosely typed Partner WSDLs.Intermediate
- SOC 1Report on a service organization's controls relevant to user entities' internal control over financial reporting.Intermediate
- SOC 2Report on a service organization's controls relevant to security, availability, processing integrity, confidentiality, or privacy.Foundational
- SOC 3General-use summary report of a SOC 2 examination suitable for public distribution.Intermediate
- SOC Analyst TiersThe tiered structure of SOC roles, typically Tier 1 triage, Tier 2 investigation and Tier 3 hunting and advanced response.Foundational
- SOC Type 1 ReportSOC report on the fairness of the description and suitability of control design as of a specific date.Foundational
- SOC Type 2 ReportSOC report covering both design and operating effectiveness of controls over a specified period.Foundational
- Social EngineeringManipulating people into revealing information, granting access or performing actions that compromise security.Foundational
- Social Engineering Penetration TestingAssessing human susceptibility to manipulation through phishing, vishing, pretexting and physical impersonation.Foundational
- Social Engineering PrinciplesThe psychological levers attackers use to persuade victims, such as authority, urgency, scarcity, trust and consensus.Foundational
- Social-Engineer Toolkit (SET)An open-source Python framework by TrustedSec for social engineering attacks such as credential harvesting and malicious payload delivery.Intermediate
- SocketThe combination of an IP address, transport protocol and port number that identifies one endpoint of a connection.Intermediate
- Socket Statistics Command (ss)The modern Linux command that displays socket information, replacing netstat.Intermediate
- Soft ReconfigurationA BGP option that stores unmodified inbound routes from a neighbor so policy can be re-applied locally.Advanced
- SoftmaxA function that converts a vector of raw scores (logits) into a probability distribution summing to 1.Intermediate
- Software and Data Integrity FailuresOWASP Top 10 category for code and infrastructure that do not protect against integrity violations, such as untrusted updates and insecure deserialization.Intermediate
- Software as a Service (SaaS)Cloud service model delivering complete applications over the internet; the provider manages everything except user data and access.Foundational
- Software Asset Management (SAM)ServiceNow application for managing software licenses, compliance and optimization across vendors.Intermediate
- Software Assurance (SwA)The level of confidence that software is free from vulnerabilities and functions as intended throughout its life cycle.Foundational
- Software Assurance Maturity Model (SAMM)OWASP's open framework for assessing and improving an organization's software security posture across five business functions.Intermediate
- Software Bill of Materials (SBOM)A formal, machine-readable inventory of all components and dependencies in a piece of software.Intermediate
- Software Composition Analysis (SCA)Identifying open-source and third-party dependencies in software and checking them for known vulnerabilities and license issues.Intermediate
- Software Defined Video over Ethernet (SDVoE)An AV-over-IP platform from the SDVoE Alliance that uses 10 Gigabit Ethernet for very low latency, high-quality video.Advanced
- Software DeploymentDistributing and installing applications to many endpoints with management tools.Intermediate
- Software EntitlementRecord of purchased software rights (quantity, metric, term) for a software model.Intermediate
- Software LicensingThe legal terms governing how software can be installed and used.Foundational
- Software ModelDefinition of a software product with publisher, product, version and edition used to match installations and entitlements.Advanced
- Software NormalizationProcess of standardizing discovered software publisher, product and version data against the ServiceNow content library.Advanced
- Software Package Data Exchange (SPDX)An open standard (ISO/IEC 5962:2021) from the Linux Foundation for communicating SBOM information, including components, licenses and relationships.Intermediate
- Software RAIDRAID implemented by the operating system rather than a dedicated controller, such as Linux mdadm or Windows Storage Spaces.Intermediate
- Software RepositoryA server-hosted collection of signed software packages and metadata from which package managers install and update software.Foundational
- Software Security Group (SSG)The central team responsible for an organization's software security initiative.Advanced
- Software Supply Chain FailuresOWASP Top 10 2025 category (A03) for compromises or weaknesses in dependencies, build systems and distribution infrastructure.Intermediate
- Software Supply Chain SecurityProtecting the integrity, provenance and security of all code, dependencies, tools and processes used to build and deliver software.Intermediate
- Software-Defined Networking (SDN)A network architecture that separates the control plane from the data plane and centralizes control in software controllers with programmable APIs.Foundational
- Software-Defined Perimeter (SDP)Architecture that hides resources from the network and grants per-session access only after authentication.Advanced
- Software-Defined Storage (SDS)Storage in which management and data services run as software on commodity hardware, decoupled from proprietary arrays.Intermediate
- SolarWinds Supply Chain AttackThe 2020 compromise in which attackers inserted the SUNBURST backdoor into SolarWinds Orion builds, which were signed and distributed to about 18,000 customers.Foundational
- Solicited-Node Multicast AddressA multicast address (ff02::1:ffXX:XXXX) formed from the last 24 bits of a unicast address, used for efficient address resolution.Advanced
- Solid-State Drive (SSD)A storage device using NAND flash memory with no moving parts, offering fast access and low latency.Foundational
- Solid-State Hybrid Drive (SSHD)A hard drive with a small built-in flash cache that stores frequently accessed data.Foundational
- Solution Building Block (SBB)Building block representing components used to implement the required capability, potentially products or vendor-specific.Intermediate
- Solution EvaluationBABOK knowledge area assessing the performance and value delivered by a solution in use and recommending actions to increase value.Intermediate
- Solution TrainSAFe organizational construct coordinating multiple ARTs and suppliers to build large, complex solutions.Advanced
- Solutions ContinuumPart of the Enterprise Continuum classifying solution assets from Foundation Solutions to Organization-Specific Solutions.Intermediate
- SonarQubeA code quality and security platform (from SonarSource) that performs static analysis for bugs, code smells, vulnerabilities and security hotspots.Intermediate
- SOQL InjectionVulnerability where untrusted input alters a dynamic SOQL query's logic.Advanced
- Sound CardA device that converts digital audio to analog output and analog input to digital, via expansion card or onboard chip.Foundational
- Sound MaskingAdding engineered background sound to a space to reduce speech intelligibility and distractions, improving privacy.Intermediate
- Sound Pressure Level (SPL)The acoustic pressure of a sound expressed in decibels relative to 20 micropascals, the threshold of human hearing.Foundational
- Source Control IntegrationFeature linking a scoped app to a Git repository for commits, branches and imports.Advanced
- Source Selection CriteriaAttributes the buyer uses to evaluate and select sellers.Intermediate
- Source TrackingFeature that records metadata changes between a local project and an org so only changed components are pushed or pulled.Advanced
- Source-Specific Multicast (SSM)A PIM mode in which receivers join a specific (S,G) channel directly, eliminating the RP and shared tree.Intermediate
- Source-to-Image (S2I)An OpenShift build strategy that produces container images by injecting application source code into a builder image.Advanced
- SourcetypeA Splunk field that identifies the format of data, determining how it is parsed and how fields are extracted.Foundational
- Sovereign CloudCloud offering designed so data, operations and control remain within a specific jurisdiction to satisfy sovereignty laws.Intermediate
- SOX Section 302SOX provision requiring CEOs and CFOs to certify the accuracy of financial reports and effectiveness of disclosure controls.Intermediate
- SOX Section 404SOX provision requiring annual management assessment of ICFR and, for accelerated filers, external auditor attestation.Intermediate
- Space-Time Block Coding (STBC)Transmitting redundant copies of a data stream across multiple antennas to improve reliability.Advanced
- Spam over Internet Telephony (SPIT)Unsolicited bulk VoIP calls or messages, the telephony equivalent of email spam.Intermediate
- SpanA single named, timed operation within a distributed trace, such as an HTTP call or database query.Intermediate
- SpannerGoogle Cloud's fully managed, globally distributed relational database with strong consistency and horizontal scalability.Intermediate
- Spanning Tree Protocol (STP)IEEE 802.1D protocol that prevents Layer 2 loops by electing a root bridge and blocking redundant paths.Foundational
- Spark ActionA Spark operation that triggers execution and returns a result to the driver or writes output, such as count, collect, show, take or write.Intermediate
- Spark CachingPersisting a DataFrame in memory and/or disk with cache() or persist() so that repeated actions reuse it instead of recomputing.Intermediate
- Spark DataFrameA distributed collection of rows organized into named, typed columns, optimized by Spark's Catalyst optimizer.Intermediate
- Spark DriverThe Spark process that runs the main program, builds the DAG, schedules tasks and collects results.Intermediate
- Spark ExecutorA JVM process on a worker node that runs Spark tasks and stores cached data for an application.Intermediate
- Spark StageA set of Spark tasks that can run without a shuffle; a job is split into stages at shuffle boundaries.Advanced
- Spark TransformationA lazy Spark operation that defines a new DataFrame from an existing one, such as select, filter, withColumn, join or groupBy.Intermediate
- SparklineA small, word-sized line chart without axes that shows the trend shape alongside a number or in a table.Intermediate
- Spatial Multiplexing (SM)Sending multiple unique data streams over the same channel at the same time using different antennas.Intermediate
- Spatial Reuse802.11ax mechanisms allowing transmission during weak overlapping-BSS frames to increase channel reuse.Advanced
- Spatial Stream (SS)An independent data stream transmitted simultaneously from separate antennas on the same channel.Intermediate
- Speaker LevelThe high-power amplified signal sent from a power amplifier to loudspeakers, from a few volts to tens of volts.Foundational
- Speaker TrackingCamera automation that uses microphone arrays and face detection to frame the active speaker automatically.Intermediate
- Spear PhishingA targeted phishing attack crafted for a specific individual or group using personal or organizational details.Foundational
- Spearman Rank Correlation (ρ)A nonparametric correlation computed on ranks, measuring the strength of a monotonic relationship.Advanced
- Special Categories of Personal DataSensitive personal data under GDPR Article 9 requiring heightened protection and a specific processing condition.Intermediate
- Special Cause VariationVariation arising from specific, assignable causes outside the normal process.Intermediate
- Specification LimitsCustomer- or engineering-defined boundaries (USL and LSL) for acceptable output.Intermediate
- Spectrum AnalyzerA tool that measures RF energy across frequencies to identify interference, regardless of protocol.Intermediate
- Spectrum-XNVIDIA's Ethernet networking platform for AI, pairing Spectrum-4 switches with BlueField-3 SuperNICs.Advanced
- Speculative DecodingSpeeding up generation by having a small draft model propose tokens that the large model verifies in parallel.Advanced
- Speech Transmission Index (STI)A 0-to-1 objective measure of speech intelligibility through a sound system and room, defined in IEC 60268-16.Advanced
- Speech-to-Text (STT)Converting spoken audio into written text; also called automatic speech recognition (ASR).Foundational
- SpiderFootAn automated OSINT tool that queries over 200 data sources to map a target's attack surface.Intermediate
- SpikeA timeboxed research or prototyping effort to reduce uncertainty or answer a technical question.Foundational
- SpillingWriting intermediate query data to local disk, or remote cloud storage, when warehouse or executor memory is insufficient.Advanced
- Spindle SpeedThe rotational speed of a hard drive's platters in revolutions per minute (RPM).Foundational
- Spine-and-Leaf ArchitectureA two-tier data center design in which every leaf switch connects to every spine switch, giving predictable, low-latency paths.Intermediate
- Spine-Leaf ArchitectureA two-tier data center network topology in which every leaf switch connects to every spine switch, giving predictable, equal-cost paths.Foundational
- Split HorizonA loop-prevention rule that stops a router from advertising a route out the interface on which it was learned.Intermediate
- Split KnowledgeDividing a secret, such as a cryptographic key, so that no single person knows the whole value.Intermediate
- Split MAC ArchitectureDivision of 802.11 MAC functions between a lightweight AP (real-time) and a controller (non-real-time).Intermediate
- Split PairA wiring fault in which wires from two different pairs are used together as a pair, so pin-to-pin continuity is correct but twisting is broken.Intermediate
- Split TunnelingVPN configuration that sends only corporate traffic through the tunnel while other traffic goes directly to the internet.Foundational
- Splunk BucketA directory in a Splunk index that holds data for a time range, moving through hot, warm, cold, frozen and thawed stages.Advanced
- Splunk Enterprise Security (ES)Splunk's premium SIEM application providing correlation searches, notable events, risk-based alerting and security dashboards.Intermediate
- Splunk Heavy Forwarder (HF)A full Splunk Enterprise instance configured to parse, filter, route and forward data before indexing.Advanced
- Splunk IndexA repository in Splunk where ingested data is stored and from which searches retrieve events.Foundational
- Splunk IndexerThe Splunk component that parses incoming data, writes it to indexes and responds to search requests.Intermediate
- Splunk Search HeadThe Splunk component that provides the user interface and distributes searches to indexers.Intermediate
- Splunk Search Processing LanguageThe query language used in Splunk to search, filter, transform and visualize machine data.Foundational
- Splunk Universal Forwarder (UF)A lightweight Splunk agent that collects data from hosts and sends it to indexers or heavy forwarders.Intermediate
- SpokeScoped application packaging Flow Designer actions for a specific system, such as Microsoft Teams, Jira or AWS.Intermediate
- SpoofingPretending to be another user, system or component in order to gain its access or trust.Foundational
- Spot InstancesSpare EC2 capacity offered at up to 90 percent discount that AWS can reclaim with a two-minute interruption notice.Foundational
- Spot VMs (Google Cloud)Google Cloud VMs using excess capacity at large discounts that can be preempted at any time with a short notice.Intermediate
- SpotlightThe macOS system-wide search tool for finding files, apps, settings, and information.Foundational
- Spread SpectrumTransmitting a signal over a wider bandwidth than strictly required to improve resilience.Intermediate
- SprintA fixed-length event of one month or less in which ideas are turned into value.Foundational
- Sprint BacklogThe Sprint Goal (why), the set of Product Backlog items selected for the Sprint (what), and an actionable plan for delivering the Increment (how).Foundational
- Sprint CancellationEnding a Sprint early because its Sprint Goal has become obsolete.Intermediate
- Sprint GoalThe single objective for the Sprint, created during Sprint Planning and added to the Sprint Backlog.Foundational
- Sprint PlanningScrum event that initiates the Sprint by laying out the work to be performed.Foundational
- Sprint RetrospectiveScrum event to plan ways to increase quality and effectiveness.Foundational
- Sprint ReviewScrum event to inspect the outcome of the Sprint and determine future adaptations.Foundational
- SpywareMalware that secretly monitors user activity and collects information without consent.Foundational
- SQL Analytics EndpointA read-only T-SQL interface automatically created for each Fabric lakehouse (and mirrored database) to query its Delta tables.Advanced
- SQL Data TypesThe categories of values a column can hold: numeric (INT, DECIMAL, FLOAT), character (CHAR, VARCHAR), date/time, Boolean, binary and semi-structured.Foundational
- SQL Injection (SQLi)Injecting malicious SQL into application inputs to read, modify or delete database data or bypass authentication.Foundational
- SQL Injection PreventionThe set of defenses that stop SQL injection, led by parameterized queries and supported by validation and least privilege.Foundational
- SQL Logical Query Processing OrderThe order in which SQL logically evaluates clauses: FROM/JOIN, WHERE, GROUP BY, HAVING, SELECT, DISTINCT, ORDER BY, then LIMIT/TOP.Intermediate
- SQL Query ActivityAutomation Studio activity that runs SQL against data extensions and system data views, writing results to a target data extension.Intermediate
- Squash MergeCombining all commits from a branch into a single new commit on the target branch.Intermediate
- SR-MPLSSegment routing using the MPLS data plane, where each segment is an MPLS label.Advanced
- SRv6Segment routing over the IPv6 data plane, where segments are IPv6 addresses carried in the destination address and optional Segment Routing Header.Advanced
- ssA Linux socket statistics command that shows listening ports and connections, replacing netstat.Foundational
- SSH File Transfer Protocol (SFTP)A secure file transfer protocol that runs as a subsystem of SSH over TCP port 22.Foundational
- SSH Key-Based AuthenticationLogging in to SSH servers with a public/private key pair instead of a password.Intermediate
- SSL StrippingAn on-path attack that downgrades a user's HTTPS connection to HTTP so traffic can be read in clear text.Intermediate
- SSRF PreventionDefenses that stop an application from being used to send requests to unintended internal or external destinations.Intermediate
- Stable DiffusionA family of open-weight latent diffusion models from Stability AI for text-to-image generation.Intermediate
- Stacey MatrixModel plotting agreement on requirements against certainty about technology to classify work as simple, complicated, complex, or anarchic.Intermediate
- Stack CanaryA random value placed before the return address on the stack and checked before a function returns, detecting stack buffer overflows.Intermediate
- Stack CountingA hunting technique that counts occurrences of values across many hosts to find rare outliers.Advanced
- Stack-Based Buffer OverflowWriting past the end of a buffer allocated on the call stack, which can overwrite the saved return address and hijack execution.Intermediate
- Stacked Bar ChartA bar chart in which each bar is divided into segments showing the parts that make up the total.Foundational
- StackSetsA CloudFormation feature for deploying stacks across multiple AWS accounts and Regions from a single operation.Advanced
- StackWise VirtualCisco Catalyst 9000 technology that combines two switches into one logical switch with a single control plane.Advanced
- Staging AreaThe Git index where changes are prepared with git add before being recorded in the next commit.Foundational
- Staging Area (Data Warehousing)An intermediate storage location where extracted data lands before being cleansed, transformed and loaded into target tables.Foundational
- StakeholderAn individual, group, or organization that may affect, be affected by, or perceive itself to be affected by a project.Foundational
- Stakeholder AnalysisTechnique of systematically gathering and analyzing information to determine whose interests should be considered.Foundational
- Stakeholder CubeA three-dimensional refinement of grid models combining stakeholder dimensions such as power, interest, and attitude.Advanced
- Stakeholder Engagement Assessment MatrixA matrix comparing current and desired stakeholder engagement levels.Intermediate
- Stakeholder Engagement PlanComponent of the project management plan identifying strategies and actions to promote productive stakeholder involvement.Intermediate
- Stakeholder ManagementTOGAF technique for identifying stakeholders, their concerns and power/interest, and engaging them appropriately.Foundational
- Stakeholder RegisterProject document containing identification, assessment, and classification of project stakeholders.Foundational
- Stakeholder-Specific Vulnerability Categorization (SSVC)A decision-tree method for prioritizing vulnerabilities based on exploitation, exposure, automatability and impact.Advanced
- Standard ChangePre-authorized, low-risk, repeatable change that follows a template without CAB approval.Foundational
- Standard Contractual Clauses (SCC)European Commission-approved contract clauses providing safeguards for transfers of personal data outside the EU.Intermediate
- Standard Deviation (SD)The square root of variance, describing typical distance from the mean in the data's own units.Foundational
- Standard Deviation (PERT)Measure of estimate uncertainty calculated as (Pessimistic - Optimistic) / 6.Advanced
- Standard Error (SE)The standard deviation of a sampling distribution, usually of the mean: SE = s / √n.Intermediate
- Standard ObjectObject delivered by Salesforce out of the box, such as Account, Contact, Lead, Opportunity and Case.Foundational
- Standard Power (SP)A 6 GHz device class allowed higher power indoors or outdoors under AFC control.Advanced
- Standard StreamsThe three default data channels of a Linux process: standard input (0), standard output (1) and standard error (2).Foundational
- StandardizationScaling a feature to have mean 0 and standard deviation 1 (z-score scaling).Foundational
- Star SchemaA dimensional model with a central fact table joined directly to denormalized dimension tables, forming a star shape.Foundational
- Star TopologyA topology in which every node connects to a central device such as a switch.Foundational
- Start of Authority Record (SOA)The DNS record at the top of every zone that names the primary server, administrator email, serial number and timers.Intermediate
- Startup ProbeA Kubernetes probe for slow-starting containers that disables liveness and readiness checks until it succeeds.Advanced
- Startup RepairA WinRE tool that automatically diagnoses and fixes problems that prevent Windows from booting.Foundational
- State Comprehensive Privacy LawsUS state laws, following California and Virginia, granting consumer privacy rights and imposing duties on controllers.Intermediate
- Stateful DHCPv6A DHCPv6 mode in which the server assigns IPv6 addresses and tracks leases, signaled by the RA M flag.Intermediate
- Stateful FirewallA firewall that tracks the state of connections and automatically allows return traffic for sessions initiated from trusted networks.Foundational
- Stateful Hash-Based SignaturesQuantum-resistant signature schemes such as LMS and XMSS that require tracking which one-time keys have been used.Advanced
- Stateful Switchover (SSO)A Cisco high-availability feature where the standby route processor is kept synchronized so it can take over without resetting interfaces.Advanced
- StatefulSetA Kubernetes workload object for stateful applications that need stable network identities, ordered deployment, and persistent storage per pod.Intermediate
- Stateless Address Autoconfiguration (SLAAC)An IPv6 method in which hosts build their own addresses from a router-advertised /64 prefix plus a self-generated interface ID.Foundational
- Stateless ApplicationApplication that keeps no client session data on the server, so any instance can handle any request.Intermediate
- Stateless DHCPv6A mode in which hosts use SLAAC for addresses but obtain other settings, such as DNS servers and domain name, from a DHCPv6 server.Intermediate
- Stateless Hash-Based Digital Signature Algorithm (SLH-DSA)NIST post-quantum signature standard (FIPS 205) based on SPHINCS+, relying only on hash function security.Advanced
- Statement of Applicability (SoA)ISO/IEC 27001 document listing all Annex A controls, whether each is included or excluded, and justification.Intermediate
- Statement of Architecture WorkDeliverable defining scope, approach, schedule and resources for an architecture project, signed off at the end of Phase A.Intermediate
- Statement of Work (SOW)A contract document detailing the specific deliverables, timeline, scope and cost of a particular engagement.Foundational
- Statement on Standards for Attestation Engagements No. 18 (SSAE 18)AICPA attestation standard under which SOC 1, SOC 2, and SOC 3 examinations are performed.Advanced
- Static Application Security Testing (SAST)Analyzing source code, bytecode, or binaries for security vulnerabilities without executing the application.Intermediate
- Static Code Analysis Taint AnalysisA static analysis technique that tracks untrusted data from sources to dangerous sinks to find injection-type flaws.Advanced
- Static IP AddressAn IP address manually configured on a device that does not change unless an administrator changes it.Foundational
- Static Malware AnalysisExamining a malware sample without executing it, using file properties, strings, headers and disassembly.Intermediate
- Static NATA one-to-one, permanent mapping between a private (inside local) address and a public (inside global) address.Foundational
- Static PodA pod managed directly by the kubelet from a manifest file on the node rather than by the API server.Advanced
- Static RAM (SRAM)Fast memory that holds data in flip-flop circuits without needing refresh; used for CPU cache.Intermediate
- Static ResourceUploaded file or archive (JS, CSS, images) referenced by Visualforce or Lightning components.Foundational
- Static RouteA manually configured route to a destination prefix through a next-hop address or exit interface.Foundational
- Statistical PowerThe probability that a test correctly rejects a false null hypothesis (1 - β); 80% is a common target.Advanced
- Statistical Process Control (SPC)Use of statistical methods, chiefly control charts, to monitor and control a process.Advanced
- Statistical SamplingSampling that uses random selection and probability theory to evaluate results and quantify sampling risk.Intermediate
- stats CommandAn SPL transforming command that calculates aggregate statistics such as count, sum, average and distinct count, grouped by fields.Foundational
- Status ReportPeriodic report describing where the project currently stands on scope, schedule, cost, risks, and issues.Foundational
- SteganographyHiding the existence of data inside other data, such as an image, audio, or network traffic.Foundational
- StepAn individual task in a CI job that either runs a shell command or uses a reusable action.Foundational
- Sticky BitA directory permission that allows only a file's owner, the directory owner or root to delete or rename files within it.Intermediate
- Sticky ClientA client that remains associated to a distant AP despite better APs being available.Intermediate
- STIR/SHAKENStandards that let carriers cryptographically sign and verify caller ID on SIP calls to combat spoofed robocalls.Intermediate
- Stochastic Gradient Descent (SGD)Gradient descent that updates parameters using one example or a small mini-batch at a time.Intermediate
- Stop ErrorA critical Windows error that halts the system with a stop code, commonly called a blue screen of death (BSOD).Foundational
- Stop ReasonA field in an LLM API response indicating why generation stopped, such as end_turn, max_tokens or tool_use.Intermediate
- Stop-or-Go SamplingAttribute sampling technique that allows the auditor to stop testing early if few or no errors are found.Advanced
- Storage Area Network (SAN)A dedicated high-speed network that gives servers block-level access to shared storage.Intermediate
- Storage ClassA Kubernetes object describing a class of storage and its provisioner, used for dynamic volume provisioning.Intermediate
- Storage LatencyThe time taken to complete a single storage I/O request, usually measured in milliseconds or microseconds.Intermediate
- Storage ReplicaA Windows Server feature that replicates volumes at the block level between servers or clusters, synchronously or asynchronously.Advanced
- Storage SenseA Windows Settings feature that automatically frees disk space by deleting temporary files and offloading cloud files.Foundational
- Storage SnapshotA point-in-time, typically space-efficient image of a volume, created using copy-on-write or redirect-on-write.Intermediate
- Storage SpacesA Windows feature that pools physical disks and creates virtual disks with mirror or parity resiliency.Intermediate
- Storage Spaces Direct (S2D)Windows Server Datacenter software-defined storage that pools local drives across cluster nodes into highly available volumes.Advanced
- Storage TieringAutomatically placing data on different classes of media, such as NVMe, SSD, HDD or cloud, based on access frequency and policy.Intermediate
- Storage Virtual Machine (SVM)In NetApp ONTAP, a secure logical storage server (formerly Vserver) that owns volumes and network interfaces and serves data to clients.Intermediate
- Storage vMotionA VMware feature that migrates a running VM's disk files between datastores without downtime.Intermediate
- Stored Cross-Site ScriptingXSS in which a malicious script is saved by the application and later served to other users.Foundational
- Stored ProcedureA named, precompiled set of SQL (and procedural) statements stored in the database and executed with CALL or EXEC.Intermediate
- Storefront Reference Architecture (SFRA)Reference storefront framework for B2C Commerce built on controllers, models and ISML templates using a cartridge architecture.Intermediate
- Storm ControlA switch feature that limits broadcast, multicast or unknown unicast traffic on a port to a threshold.Intermediate
- Story MappingTechnique by Jeff Patton that arranges user stories along a user journey (backbone) and by priority (vertical) to plan releases.Intermediate
- Story PointsA unit of relative estimation representing the effort, complexity, and uncertainty of a backlog item.Foundational
- Story SplittingBreaking a large user story into smaller stories that each still deliver value.Intermediate
- STP Path CostThe cost STP assigns to a port based on its speed, summed toward the root to choose root and designated ports.Intermediate
- STP Port States802.1D states: blocking, listening, learning, forwarding and disabled; RSTP collapses these to discarding, learning and forwarding.Foundational
- STP TimersThe 802.1D timers: hello time 2 s, forward delay 15 s and max age 20 s, all dictated by the root bridge.Intermediate
- Straight Tip ConnectorA round fiber connector with a 2.5 mm ferrule and a bayonet twist-lock, common in legacy multimode installations.Foundational
- Straight-Through CableA twisted-pair cable with the same pinout (both T568A or both T568B) on each end, used to connect unlike devices.Foundational
- Strategic AlignmentEnsuring the information security strategy directly supports and enables business goals and objectives.Foundational
- Strategic GoalIn EBM, an important, ambitious long-term goal the organization aims to achieve, often with uncertain paths.Advanced
- Strategic Portfolio Management (SPM)ServiceNow suite (formerly IT Business Management) for aligning strategy, planning, portfolios, projects, agile work and resources.Foundational
- Strategic Threat IntelligenceHigh-level intelligence about threat trends, motivations and risks for executives and decision-makers.Intermediate
- Strategy AnalysisBABOK knowledge area focused on defining the business need, current state, future state, risks, and change strategy.Intermediate
- Stratified SamplingDividing a population into homogeneous subgroups (strata) and sampling from each.Advanced
- StratisA Red Hat local storage management solution that builds pools and thin-provisioned XFS filesystems on top of block devices.Advanced
- Stream CipherA symmetric cipher that encrypts data one bit or byte at a time by combining it with a pseudorandom keystream.Foundational
- Stream ProcessingContinuously processing data records as they arrive to produce near-real-time results.Intermediate
- StreamingReturning a model's output incrementally as tokens are generated instead of waiting for the full response.Intermediate
- Streaming APILegacy CometD-based API for receiving notifications about data changes and events.Intermediate
- Streaming InsightNear-real-time aggregation over streaming engagement data in time windows, often driving data actions.Advanced
- Streamlit in SnowflakeA feature for building and hosting interactive Python Streamlit data apps directly inside Snowflake, governed by Snowflake roles.Intermediate
- STRIDEMicrosoft's threat classification mnemonic: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service and Elevation of privilege.Foundational
- STRIDE per ElementA threat modeling technique that applies only the STRIDE categories relevant to each DFD element type.Advanced
- StripingSplitting data into blocks written sequentially across multiple drives so they can be accessed in parallel.Foundational
- Strong ConsistencyA guarantee that every read returns the most recent committed write, as if there were a single copy of the data.Intermediate
- Structured CablingA standardized, hierarchical approach to building cabling that organizes entrance facilities, equipment rooms, backbone and horizontal cabling, and work areas.Foundational
- Structured DataData organized into a fixed schema of rows and columns, such as relational tables or spreadsheets.Foundational
- Structured LoggingWriting log events as machine-parseable key-value data, typically JSON, rather than free-form text.Foundational
- Structured OutputConstraining model responses to a defined format, typically valid JSON matching a schema.Intermediate
- Structured Query Language (SQL)The standard declarative language for defining, querying and manipulating data in relational databases.Foundational
- Structured StreamingSpark's stream processing engine, which treats a stream as an unbounded table and processes it incrementally with the DataFrame API.Intermediate
- Structured Threat Information Expression (STIX)A standardized JSON language for representing cyber threat intelligence objects and relationships.Intermediate
- Stuck in Active (SIA)An EIGRP condition where a router waits too long for replies to queries, eventually resetting neighbor adjacencies.Advanced
- Student SyndromeTendency to delay starting work until just before a deadline.Intermediate
- Student's t-TestA test comparing means (one sample against a value, or two independent groups) when the population standard deviation is unknown, using the t-distribution.Intermediate
- StuxnetA sophisticated worm discovered in 2010 that sabotaged Iranian uranium enrichment centrifuges by manipulating PLCs.Intermediate
- suThe Linux substitute-user command that starts a shell as another user, root by default.Foundational
- Sub-ProcessorProcessor engaged by another processor to carry out processing on behalf of a controller.Intermediate
- SubagentA separate agent instance, with its own context window, prompt and tools, to which a main agent delegates a task.Advanced
- SubcarrierA narrow frequency component of an OFDM channel carrying data, pilot, or null signals.Intermediate
- Subdomain EnumerationDiscovering subdomains of a target domain to expand the known attack surface.Foundational
- Subdomain TakeoverGaining control of a subdomain whose DNS record points to a deprovisioned external resource, such as a deleted cloud bucket or app.Intermediate
- SubflowFlow element that calls another flow, passing input and output variables.Intermediate
- Subflow (Mule)Reusable processor sequence with no source and no error handler, executed synchronously in the caller's context.Intermediate
- Subflow (ServiceNow)Reusable sequence of actions with inputs and outputs, called from flows or other subflows.Intermediate
- Subject Alternative Name (SAN)X.509 extension listing additional identities, such as DNS names or IPs, that a certificate is valid for.Foundational
- SubnetA logical subdivision of an IP network defined by a network address and prefix length.Foundational
- Subnet IDThe bits of an IPv6 address between the global routing prefix and the 64-bit interface ID, used to number subnets within a site.Intermediate
- Subnet MaskA 32-bit value with contiguous 1 bits marking the network portion of an IPv4 address and 0 bits marking the host portion.Foundational
- SubnettingDividing a larger IP network into smaller subnets by borrowing host bits for the network portion.Foundational
- SubqueryA query nested inside another statement, used as a value, a list, or a derived table.Foundational
- Subresource Integrity (SRI)A browser feature that verifies scripts or stylesheets loaded from third parties against a cryptographic hash in the HTML tag.Intermediate
- Subscriber ConnectorA square fiber connector with a 2.5 mm ferrule and push-pull latching, common in older enterprise and FTTH installations.Foundational
- Subscriber Identity Module (SIM)A secure smart card or embedded chip storing a subscriber's identity (IMSI) and authentication keys.Foundational
- Subscriber KeyUnique identifier for a subscriber in Marketing Cloud, ideally the Salesforce Contact or Lead ID rather than email.Intermediate
- Subservice OrganizationVendor used by a service organization whose controls may be relevant to the service organization's customers.Advanced
- Substantive TestingAudit testing that examines the integrity of actual data, balances, or transactions to detect material errors.Foundational
- Substitution CipherCipher that replaces each plaintext unit with another symbol according to a fixed or keyed system.Foundational
- SuccessorThe EIGRP neighbor offering the lowest-metric loop-free path to a destination; its route is installed in the routing table.Intermediate
- sudoA Linux command that lets permitted users run commands as root or another user, with logging and fine-grained policy.Foundational
- Sufficient Appropriate EvidenceAudit evidence that is adequate in quantity and of suitable quality to support conclusions.Intermediate
- SummarizationCondensing a document into a shorter version that preserves key information.Foundational
- Summary FormulaReport formula that calculates values on summarized data at grouping levels.Intermediate
- SUNBURSTThe backdoor inserted into SolarWinds Orion software updates in a 2020 supply chain attack.Advanced
- Sunk CostMoney already spent that cannot be recovered.Foundational
- Super TimelineA comprehensive timeline that merges timestamps from many artifact types into one chronological view.Advanced
- SuperkeyAny set of one or more columns whose combined values uniquely identify each row, whether or not it is minimal.Advanced
- SupernettingCombining multiple contiguous networks into one larger prefix with a shorter mask.Intermediate
- Supervised Fine-Tuning (SFT)Fine-tuning a model on labeled input-output pairs, such as instruction-response examples.Intermediate
- Supervised LearningMachine learning that trains a model on labeled examples, where each input is paired with the correct output.Foundational
- Supervisory AuthorityIndependent public authority in each EU/EEA member state responsible for enforcing GDPR.Foundational
- Supervisory Control and Data Acquisition (SCADA)An ICS architecture for monitoring and controlling geographically dispersed assets from a central location.Foundational
- Supervisory OrganizationWorkday's primary organization type representing management hierarchy and used to route business processes.Intermediate
- SupplicantThe client software or device requesting network access in an 802.1X exchange.Foundational
- Supplier Performance Risk System (SPRS)DoD system where contractors post NIST SP 800-171 assessment scores and CMMC status and affirmations.Advanced
- Supply Chain AttackAn attack that compromises a trusted vendor, software component or service provider to reach its downstream customers.Intermediate
- Supply-chain Levels for Software Artifacts (SLSA)An OpenSSF security framework of graduated levels for ensuring the integrity of build processes and artifact provenance.Advanced
- Support Vector Machine (SVM)A supervised algorithm that finds the hyperplane separating classes with the maximum margin.Intermediate
- Supported RateA data rate the BSS allows clients to use but does not require.Intermediate
- Suppression ListList of addresses excluded from sends in specific contexts, such as competitors or legal holds.Intermediate
- Surge ProtectorA power strip or device that diverts voltage spikes away from connected equipment.Foundational
- SuricataAn open-source, multithreaded intrusion detection and prevention engine and network security monitoring tool.Intermediate
- Surrogate KeyA system-generated identifier with no business meaning, such as an auto-increment integer or GUID, used as a primary key.Intermediate
- Surveillance AuditPeriodic audit by a certification body between certification and recertification to confirm ongoing conformity.Intermediate
- Survivable Branch Appliance (SBA)A component on a Teams Direct Routing SBC that lets Teams clients keep making PSTN calls when the branch loses connection to Microsoft.Advanced
- Survivable Remote Site Telephony (SRST)A Cisco router feature that lets branch phones register locally and keep basic calling when they lose contact with CUCM.Intermediate
- Survivorship BiasDrawing conclusions only from entities that 'survived' a selection process while ignoring those that failed or dropped out.Intermediate
- Sustainability PillarAWS Well-Architected pillar, added in 2021, focused on minimizing the environmental impact of cloud workloads.Foundational
- Sustainable PaceWorking at a pace the team can maintain indefinitely without burnout.Foundational
- Sustained Use Discounts (SUD)Automatic Google Cloud discounts applied to eligible Compute Engine resources that run for a significant portion of the billing month.Intermediate
- Swap SpaceDisk space used as overflow for physical RAM, where the kernel moves inactive memory pages when memory is under pressure.Foundational
- SwarmingMultiple team members working together on one item to finish it faster.Intermediate
- SWE-benchA benchmark that measures whether models can resolve real GitHub issues by producing patches that pass the project's tests.Advanced
- Swimlane DiagramA process diagram that divides activities into lanes by role, department, or system.Foundational
- SwitchA Layer 2 device that forwards frames to specific ports based on destination MAC addresses it has learned.Foundational
- Switch StackingConnecting multiple switches with dedicated stack cables so they operate as one logical switch with one management plane.Intermediate
- Switched Virtual Interface (SVI)A virtual Layer 3 interface on a switch representing a VLAN, used for inter-VLAN routing or management.Foundational
- SWOT AnalysisAnalysis of Strengths, Weaknesses, Opportunities, and Threats of an organization, project, or option.Foundational
- SymbolThe unit of transmitted information on an RF carrier; one modulation state that represents one or more bits.Intermediate
- Symbolic Link (symlink)A special file that contains a path to another file or directory, acting as a shortcut that can cross filesystems.Foundational
- Symbolic Link AttackExploiting a privileged process that follows an attacker-created symbolic link to read or overwrite a protected file.Advanced
- Symmetric EncryptionEncryption in which the same secret key is used to both encrypt and decrypt data.Foundational
- Symmetric IRBEVPN inter-subnet routing where both ingress and egress VTEPs route, using a shared L3VNI per tenant VRF.Advanced
- SYN FloodA DoS attack that sends many TCP SYN packets without completing the handshake, exhausting the server's connection table.Foundational
- Synchronized Data ExtensionRead-only data extension automatically populated from Salesforce CRM objects through Marketing Cloud Connect.Intermediate
- Synchronous ReplicationReplication in which a write is acknowledged only after it is committed on both the primary and the replica.Intermediate
- Synchronous vs Asynchronous APIWhether an API call returns the final result immediately or accepts the request and completes it later, with status retrieved by polling or callback.Intermediate
- Synthetic DataArtificially generated data used to train, fine-tune or evaluate models.Intermediate
- Synthetic Full BackupA full backup assembled on the backup server from an earlier full and subsequent incrementals, without re-reading production data.Intermediate
- Synthetic MonitoringProactively testing an application by running scripted transactions or probes from external locations at regular intervals.Intermediate
- sys_id32-character globally unique identifier assigned to every record in ServiceNow.Foundational
- sysctlA Linux command and configuration mechanism for reading and setting kernel parameters at runtime.Intermediate
- SyslogA standard for sending event log messages to a central collector, traditionally over UDP port 514.Foundational
- Syslog Severity LevelsThe eight syslog message levels from 0 (Emergency) to 7 (Debugging).Intermediate
- SysmonSystem Monitor, a free Microsoft Sysinternals tool that logs detailed process, network, file and registry activity to the Windows event log.Intermediate
- SysprepThe Microsoft System Preparation tool that generalizes a Windows installation by removing machine-specific data before imaging.Intermediate
- System and Organization Controls Report (SOC report)AICPA attestation report by a CPA on controls at a service organization.Foundational
- System APIAPI layer that exposes data from a system of record (ERP, CRM, database) in a canonical, system-insulating way.Foundational
- System Center Virtual Machine Manager (SCVMM)Microsoft's data center management tool for Hyper-V hosts, clusters, VM templates, networks and storage at scale.Intermediate
- System Configuration (msconfig)A Windows utility for configuring boot options, services, and diagnostic startup.Foundational
- System DemoSAFe event that demonstrates the integrated work of all teams on an ART at the end of each iteration.Intermediate
- System File Checker (sfc)A Windows command that scans and repairs protected system files.Foundational
- System for Cross-domain Identity Management (SCIM)REST/JSON standard (RFC 7643/7644) for automating user and group provisioning between identity systems.Intermediate
- System IDThe 6-byte field in an IS-IS NET that uniquely identifies a router within the routing domain.Advanced
- System Information (msinfo32)A Windows tool that displays detailed hardware, firmware, and software configuration.Foundational
- System IPA persistent IPv4 address identifying a Cisco SD-WAN device, similar to a router ID, independent of interface addresses.Intermediate
- System on a Chip (SoC)A single chip integrating CPU, GPU, memory controller, and other subsystems, common in mobile devices.Intermediate
- System Operating Margin (SOM)The actual difference between received signal level and the receiver's sensitivity.Intermediate
- System OwnerOfficial responsible for procurement, development, integration, operation, and maintenance of a system.Intermediate
- System PromptInstructions supplied separately from user messages that set a model's role, rules, tone and constraints for a conversation.Foundational
- System Prompt LeakageThe exposure of a system prompt's contents, potentially revealing rules, logic or embedded secrets.Intermediate
- System RestoreA Windows feature that rolls system files, drivers, registry, and installed programs back to an earlier restore point.Foundational
- System Security Plan (SSP)Formal document describing a system's boundary, environment, security requirements, and how controls are implemented.Intermediate
- System SettingsThe macOS app for configuring system preferences, replacing System Preferences since macOS Ventura.Foundational
- System-Specific ControlControl implemented and managed solely by an individual information system.Intermediate
- Systematic SamplingSelecting every kth item from an ordered list after a random start.Intermediate
- systemctlThe command-line tool for controlling systemd units and inspecting system state.Foundational
- systemdThe default Linux init system and service manager that runs as PID 1 and starts, stops and supervises services and other units.Foundational
- systemd TargetA systemd unit that groups other units to define a system state, replacing SysV runlevels.Intermediate
- systemd TimerA systemd unit that activates another unit on a calendar schedule or after a time interval, as an alternative to cron.Intermediate
- systemd Unit FileA configuration file describing a systemd-managed resource, such as a .service, .socket, .timer, .mount or .target unit.Intermediate
- SYSVOLA shared folder on every domain controller that stores Group Policy templates and logon scripts and replicates between DCs.Intermediate