Cloudinary Media Developer flashcards
Cloudinary Media Developer · Build recall with a focused review session.
30 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Upload preset
- A supported collection of relevant upload defaults and restrictions whose security depends on actual scope, permissions and business authorization.
- Incoming transformation
- Processing applied to the relevant uploaded source before storage under its supported configuration, distinct from preparing a separately delivered derivative.
- Eager transformation
- Preparation of a derived representation within a supported processing workflow, whose asynchronous form requires completion evidence before readiness is assumed.
- Structured metadata
- Asset information governed by defined field types and validation, distinct from every free-form contextual value or arbitrary search tag.
- Fill crop
- A resizing/cropping arrangement targeting a specified box under its supported mode, with retained-region choice depending on the actual gravity and source.
- Automatic gravity
- A supported qualifier selecting relevant image regions using its actual detection/selection logic, not an implicit behavior of every fill crop.
- Transformation chain
- A sequence of supported processing components whose ordering and layer scope determine the resulting media, rather than an unordered list of interchangeable effects.
- Automatic format
- Supported selection of an eligible delivered format using actual content/client/configuration conditions, not a guarantee that every accepting browser receives the same format.
- Responsive candidate
- A supplied media resource with a relevant size/density descriptor that the browser can select using the actual layout and supported selection model.
- Delivery signature
- Operation-specific integrity/authentication information whose authorization and lifetime semantics must be verified rather than inferred from another signing workflow.
- Private delivery type
- A supported asset delivery arrangement with particular original/derived access rules, not a universal guarantee that every variant or cached copy is hidden.
- Freshness lifetime
- The relevant period a stored response can be reused as fresh under applicable cache rules, distinct from a promise that it will remain stored.
- ETag validator
- A representation identifier used in applicable conditional requests to test reuse, distinct from the media’s public identifier or authorization credential.
- Meaningful cache variation
- A response-changing request dimension that a caching design must distinguish appropriately to avoid mixing different authorized representations.
- Least Privilege
- The principle that users and systems should be granted only the minimum access rights necessary to perform their tasks, reducing the potential damage from accidents or malicious activity.
- Separation of Duties
- A control that divides critical tasks among different individuals so that no single person can complete a sensitive action alone, helping to prevent fraud and errors.
- Role-Based Access Control (RBAC)
- An access control model where permissions are assigned to roles rather than individual users, and users are assigned to roles based on their job responsibilities.
- Multi-Factor Authentication (MFA)
- An authentication method that requires two or more independent credentials from different categories (something you know, have, or are) to verify a user's identity.
- Authentication
- The process of verifying the identity of a user, device, or system, typically through credentials such as passwords, tokens, or biometrics.
- Authorization
- The process of determining what actions or resources an authenticated entity is permitted to access, often enforced through access control policies.
- Single Sign-On (SSO)
- A mechanism that allows a user to log in once and access multiple applications or systems without re-entering credentials, improving usability and centralizing access control.
- Encryption
- The process of converting plaintext into ciphertext using an algorithm and a key, so that only authorized parties can read the original information.
- Symmetric Encryption
- An encryption method that uses the same secret key for both encryption and decryption, offering speed but requiring secure key distribution.
- Asymmetric Encryption
- Encryption using a suitable public-key scheme and a corresponding private key for decryption. Authenticated key distribution and the specified padding/protocol remain essential; signatures and key agreement are distinct constructions.
- Hash Function
- A digest construction mapping input to an output under its defined algorithm, with cryptographic versions designed for appropriate resistance properties. Password storage needs a suitable salted password-hashing/KDF scheme rather than a bare fast digest.
- Digital Signature
- An electronic signature that uses asymmetric cryptography to verify the authenticity and integrity of a message or document.
- Access control
- The policies and mechanisms that determine who can access which systems, data, or facilities and under what conditions.
- Security Information and Event Management (SIEM)
- A system that collects, aggregates, and analyzes log data from various sources to detect security incidents and support compliance reporting.
- Incident Response
- A structured approach to handling security incidents, typically including preparation, detection, containment, eradication, recovery, and lessons learned.
- Business Continuity Plan (BCP)
- A document that outlines how an organization will continue critical operations during and after a disruption, including strategies for recovery and restoration.