What it means
TCP and UDP provide different transport behaviors: TCP emphasizes connection state and reliable delivery, while UDP favors low overhead and application-managed reliability.
Why it matters
A precise mental model helps practitioners interpret activity correctly, select proportionate controls, and explain technical consequences without hiding behind vocabulary.
Practical focus
- Define the concept in operational terms
- Map it to observable system or user behavior
- Connect the behavior to preventive and detective controls
- Validate assumptions with evidence rather than labels
Common mistakes
- Memorizing terminology without understanding behavior
- Treating one indicator as conclusive evidence
- Ignoring normal operational context
- Applying a control without checking what it can actually observe
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: