Use the differences in the last column to choose from similar alternatives. The terms in English are preserved as they appear on the console and documentation.
Organization and identity
| Term | Meaning | Don't confuse him with |
|---|---|---|
| Tenancy | OCI environment of an organisation with root compartments | A region |
| Region | Geographical area with one or more AD | A logical compartments |
| Availability Domain (AD) | One or more isolated data centres within a region | A FD |
| Fault Domain (FD) | Hardware grouping within an AD That's 3 times AD. | Other AD or region |
| Commission | resources logical grouping and policy area | A warehouse of secrets |
| OCID | Unique identifier of a resource OCI | His name's visible |
| Identity domain | Identity, group and authentication management | The DNS network domain |
| Authentication | Check the identity of those who gain access | Grant all operations |
| Authorisation | Determining what operations are allowed | Know a password |
| Main | Identity to which an authorisation applies | The location of resource |
| Dynamic group | Selection of resources that can get permissions using policies | A group of people |
| Federation / MFA | Reliance to another information and information provider with several factors | A policy of access to VMs |
Networking and compute
| Term | Meaning | Useful distinction |
|---|---|---|
| VCN / CIDR | Regional virtual network / IP range notation | Design non-overlapping ranges when connecting networks |
| Subnet / VNIC | Subnet / virtual network interface | The VNIC connects the resource to the subnet |
| Route table | Rules for routing traffic | It does not define firewall permissions by itself |
| Internet Gateway | Internet path for resources with public configuration | It is not NAT |
| NAT Gateway | Outbound internet access and response traffic for private resources | It does not expose the VM to inbound connections |
| Service Gateway | Private access to supported Oracle services in the region | It does not provide access to arbitrary websites |
| DRG | Virtual router for connecting networks such as VCN and on-premises networks | It is not an HTTP load balancer |
| Security List / NSG | Rules for VNIC in a subnet / a group of VNIC or supported resources | Subnet versus resource function |
| Stateful / stateless | Connection tracking / explicit rules for the required directions | Both require permission design |
| Listener / backend set | Load balancer entry point / set of servers and configuration | Entry point versus destinations |
| Health check | Backend availability check | Running state of a VM |
| Shape / image | Compute capacity / boot software | Virtual hardware versus system and software |
| Instance configuration / pool | Reusable parameters / set of instances | Template versus managed instances |
| Autoscaling | Automatic scaling based on metrics or a schedule | It does not solve every bottleneck |
| Live Migration | Host change for a supported VM while it is running | It may include a short pause |
| OKE | Managed Kubernetes for orchestrating containers | Running a container does not require using it |
| Functions | Code execution triggered by an invocation or event | It does not require managing a VM for each function |
Data, Security and Government
| Term | Meaning | Useful distinction |
|---|---|---|
| Object / picket / namespace | Dates and metadata / grouping / Object Storage name space | An object isn't an attached disc |
| Block Volume | Storage for instance blocks | It's not a shared NFS folder |
| File Storage | NFS shared file system | It's not a API of objects |
| Auto-Tiering | Transition of eligible objects between Standard and Invalid Access | Archive requires another mechanism |
| Lifecycle policy | Acts and transitions of objects by rules | That's not synonymous with Auto-Tiering. |
| PAR | Pre-authorized access link with scope and validity | It protects the link as a credential |
| Durability / availability | Retain data / can be accessed as necessary | No one by itself replaces a backup |
| iSCSI | Protocol to connect storage blocks | Adjuncting doesn't mean assembling files |
| Online Resizing | Volume extension connected | It may require work within the operating system |
| Vault / key / secret | Service management / cryptographic / credential material or other sensitive value | The figure key. The secret holds a protected value |
| Cloud Guard | To detect risks and to provide configured responses | Do not preventative denial of every operation |
| Security Zone | Scope with policies that may refuse incompatible operations | That's not a special subnet. |
| WAF | requests web monitoring and filtering | Do not replace validation of application |
| Audit / Monitoring | Record of actions / metrics and alarms | Who did what about how resource behaves |
| Budget / ü a / service limit | Monetary threshold / quantity allowed / service limit | Notifying doesn't mean stopping consumption |
| Cost Analysis / Cloud Advisor | Analyze expenditure / get recommendations | Data consumption versus proposals for improvement |
| Defined tag | Label with namespace and definition administered | More ruled than a free-form tag |
| BYOL / Support Rewards | Using eligible licenses / benefits on eligible support | Both depend on their conditions |
Go back to course outline or applying differences in practice.