ACE Professional key terms

A direct private network connection between two virtual private clouds that routes traffic using private IP addresses without traversing the public internet, gateways, or a VPN.

A central hub that connects multiple VPCs, on-premises networks, and VPNs through a single attachment point, simplifying routing and reducing the number of peering connections required.

A set of rules that determines where network traffic from a subnet or gateway is directed, matching destination prefixes to next-hop targets such as gateways, peer connections, or appliances.

A stateful virtual firewall that controls inbound and outbound traffic for associated resources, allowing rules based on protocol, port, and source or destination IP addresses.

A stateless subnet-level filter with ordered allow and deny rules that evaluates each packet independently, commonly used as a coarse secondary layer of network access control.

A firewall technique that tracks active connections and automatically permits return traffic for sessions initiated from an allowed direction, avoiding the need for reciprocal rules.

A service that distributes incoming application traffic across multiple backend targets to improve availability and scalability, performing health checks and connection management.

A periodic probe sent to a backend target to verify that it can serve traffic, so the load balancer can remove unhealthy targets from rotation until they recover.

An addressing method where the same IP prefix is advertised from multiple locations, so each client is routed to the topologically nearest instance, improving latency and resilience.

A design pattern that links private data centers to cloud environments using dedicated circuits, VPN tunnels, or software-defined interconnects to support consistent routing and security policies.

A set of protocols that encrypts and authenticates IP packets between sites or between a client and a gateway, commonly used to build secure tunnels over untrusted networks.

The exterior gateway protocol used to exchange reachability information between autonomous systems, forming the basis for internet routing and many data-center and cloud routing designs.

A BGP router that receives routes from peers and reflects them to other clients, reducing the full-mesh peering requirement and improving scalability in large routing domains.

A group of IP networks under a single administrative control that presents a consistent routing policy to the internet and is identified by a unique number.

An overlay control-plane solution that distributes MAC and IP reachability information using BGP, enabling scalable layer-2 and layer-3 services across a routed underlay.

A tunneling protocol that encapsulates layer-2 frames in UDP packets, extending segments across layer-3 networks and supporting large numbers of isolated virtual networks.

A logical network built on top of an existing physical or virtual infrastructure, using encapsulation to provide connectivity and segmentation independent of the underlying topology.

The physical or base routed infrastructure that provides IP connectivity for an overlay, responsible for forwarding encapsulated packets between overlay endpoints.

A source-routing architecture that encodes a path as an ordered list of segments in the packet header, simplifying state in the core and enabling traffic engineering.

A routing capability that installs multiple next hops of equal cost for a destination and balances traffic across them, improving utilization and redundancy.

The practice of advertising a single aggregate prefix that covers multiple more-specific networks, reducing routing table size and limiting the scope of topology changes.

A software-defined approach to wide-area networking that centrally manages policies and steers traffic across multiple links based on application requirements and link quality.

A forwarding method that selects a path based on criteria such as source address, application, or security posture rather than solely on the destination prefix.

An extension of the Wi-Fi 6 standard into the 6 GHz band, offering additional clean spectrum, wider channels, and reduced interference for high-density wireless deployments.

The process by which a wireless client moves its association from one access point to another while maintaining connectivity, ideally without noticeable disruption to active sessions.

A set of automated functions that adjust transmit power, channel assignment, and client steering to optimize coverage and capacity across access points in a wireless network.

The amount of radio spectrum used by a wireless channel; wider channels carry more data but reduce the number of non-overlapping channels available in a band.

A Wi-Fi 6 mechanism that tags frames with a color identifying the basic service set, helping devices distinguish same-channel transmissions from neighboring networks and reduce unnecessary backoff.

A capability that estimates the physical position of wireless clients and assets using signal measurements from access points, enabling tracking, analytics, and policy enforcement.

The process of securely connecting Internet of Things devices to a campus network, often using profiling, certificate enrollment, or dedicated SSIDs to apply appropriate access policies.

The division of a network into isolated logical zones to limit lateral movement, enforce policy boundaries, and simplify compliance for different user and device groups.

The automated collection and streaming of operational data such as interface statistics, flow records, and device health from network elements to monitoring and analytics platforms.

A push-based model that continuously exports structured operational data from network devices at high frequency, enabling near-real-time visibility compared with periodic polling.

A telemetry approach that uses standardized data models and encodings to define what is collected and how it is structured, improving consistency across multi-vendor devices.

Summaries of network conversations that include addresses, ports, protocol, byte and packet counts, and timestamps, used for traffic analysis and security monitoring.

A widely used flow-export standard that aggregates packets into unidirectional flows and sends summarized records to a collector for accounting, capacity planning, and anomaly detection.

A technique that generates simulated traffic and transactions to measure availability, latency, and path performance from multiple vantage points independently of real user activity.

The practice of measuring end-user experience across devices, networks, and applications by combining endpoint, network, and application telemetry to diagnose performance issues.

The alignment of clocks across network devices and telemetry collectors so that events and logs from different sources can be correlated accurately during analysis.