Ruankao System Architect (Senior) flashcards
Ruankao System Architect (Senior) · Build recall with a focused review session.
30 cards. Read the term and the definition here. The deck at the top of this page is optional.
- CPU
- The central processing unit is the main processor in a computer. It fetches instructions, decodes them, and carries out arithmetic, logic, and control operations while coordinating other components.
- RAM
- Temporary, volatile computer memory that holds programs and data currently in use. Its contents disappear when power is lost, but it allows fast reading and writing.
- Cache memory
- A small, fast memory area close to the processor that stores frequently used instructions and data. It reduces average access time by keeping likely-needed information nearby.
- Addressable unit
- The quantity identified by one memory address, such as a byte or a word. A bus-width calculation requires this convention before converting address counts into byte capacity.
- TLB miss
- A failed lookup in the translation cache, requiring the processor’s defined translation procedure. It does not alone establish that the target virtual page is absent from physical memory.
- Page fault
- An architectural exception caused by an absent or disallowed page translation or access under the platform model. Handling depends on mapping, protection and residency rather than always reading a disk.
- Quality scenario
- A stated stimulus, operating condition and observable response with a measurement criterion, allowing alternative designs and tests to be compared against an actual requirement.
- 信息系统生命周期
- 信息系统从立项、开发、运行维护到退役的完整过程，通常划分为系统规划、系统分析、系统设计、系统实施、系统运行与维护五个阶段，各阶段有明确的输入、输出和评审要求。
- 系统集成
- 将硬件、网络、软件、数据等异构部件通过接口与协议连接，使其协同工作并满足用户整体业务目标的工程活动，强调技术整合与项目管理双重能力。
- 中间件
- 位于操作系统与应用软件之间、屏蔽底层异构性并提供通信、事务、消息等公共服务的软件层，常见类型包括消息中间件、应用服务器和数据库访问中间件。
- 面向服务架构
- 将业务功能封装为松耦合、可复用、通过标准协议调用的服务，并据此组合业务流程的架构风格，其实现常借助Web服务与注册中心完成服务发现与编排。
- 数据仓库
- 面向主题、集成、相对稳定且反映历史变化的数据集合，用于支持管理决策分析；其数据通常经抽取、转换、加载过程从业务系统汇入。
- 数据挖掘
- 从大量数据中自动发现潜在模式、关联规则与预测模型的分析技术，常用方法包括分类、聚类、关联分析和回归，其结果需结合业务判断使用。
- 数据治理
- 对数据资产的质量、标准、安全、权责和生命周期进行制度化管理的活动集合，目标是使数据可信、可用、可追溯，并明确数据所有者与 stewards 的职责。
- 信息安全等级保护
- 按信息系统的重要程度和受破坏后的危害程度划分安全保护等级，并据此实施分等级建设、测评与监管的制度，是信息系统安全合规工作的基础框架。
- Idempotency key
- An identifier used with a defined storage and processing protocol to recognize repeated requests and avoid duplicating a specified side effect. Its scope and expiration must match the actual operation.
- Software composition analysis
- Analysis of software components and dependency information to identify relevant known issues and licensing or provenance questions, complementing code review and dynamic security testing.
- Security requirement
- An explicit protection outcome or constraint linked to the system’s assets, users, threats and obligations, with criteria that can be designed, implemented and verified.
- Encryption
- The process of converting readable data into an encoded form that unauthorized people cannot easily understand. A key is used to encrypt and typically to decrypt the data.
- Authentication
- The process of verifying a user's or system's claimed identity, often through passwords, tokens, biometrics, or multi-factor methods. It answers whether the identity is genuine.
- Phishing
- A social-engineering attack that tricks people into revealing sensitive information or clicking malicious links by impersonating a trustworthy organization or person.
- Malware
- Software designed to harm, disrupt, or gain unauthorized access to a computer system. Examples include viruses, worms, ransomware, spyware, and trojan horses.
- Digital divide
- The gap between people who have effective access to digital technologies and those who do not, often due to cost, location, skills, or infrastructure.
- Intellectual property
- Legal rights that protect creations of the mind, such as inventions, artistic works, software, and trademarks. These rights control use, copying, and distribution.
- CIA Triad
- A model that describes the three core goals of information security: confidentiality (keeping data secret), integrity (keeping data accurate and unaltered), and availability (ensuring data and systems are accessible when needed).
- Confidentiality
- The property that information is not disclosed to unauthorized individuals, processes, or devices. It is achieved through encryption, access controls, and proper handling procedures.
- Integrity
- The property that data has not been altered or destroyed in an unauthorized manner. It ensures data is accurate, complete, and trustworthy throughout its lifecycle.
- Availability
- The property that systems and data are accessible and usable by authorized users when required. It is supported by redundancy, backups, and resilience measures.
- Defense in Depth
- A security strategy that uses multiple layers of controls (physical, technical, and administrative) so that if one layer fails, others still protect the asset.
- IT governance
- The leadership, structures, and processes that ensure IT supports enterprise strategy, objectives, and risk appetite while using resources responsibly.