CDN CDN Web Application Firewall & Bot Management

Question 1

What is the primary purpose of a Web Application Firewall (WAF) deployed at the CDN edge?

Accepted Answer

To inspect and filter HTTP/HTTPS traffic against application-layer attacks

Answer

To compress static assets

Answer

To balance load across origin servers

Answer

To generate SSL certificates

Question 2

Which OWASP Top 10 threat is most commonly blocked by a CDN WAF rule targeting user-supplied input in URL parameters?

Accepted Answer

SQL Injection

Answer

Broken Access Control

Answer

Insecure Deserialization

Answer

Security Misconfiguration

Question 3

A CDN WAF is configured in 'monitor' mode. What is the effect on malicious traffic?

Accepted Answer

Traffic is allowed but logged for analysis

Answer

Traffic is blocked and logged

Answer

Traffic is rate-limited

Answer

Traffic is redirected to a honeypot

Question 4

What CDN feature allows operators to challenge suspected bots with a JavaScript-based browser check before serving content?

Accepted Answer

Bot challenge / managed challenge

Answer

Rate limiting

Answer

IP allowlisting

Answer

Geo-blocking

Question 5

Which metric best indicates that a WAF rule is producing false positives in production?

Accepted Answer

Spike in legitimate user 403 errors after rule deployment

Answer

High cache-hit ratio

Answer

Increase in origin CPU utilization

Answer

Decrease in DNS TTL

Question 6

What is a 'positive security model' WAF approach?

Accepted Answer

Allowing only explicitly defined legitimate request patterns and blocking everything else

Answer

Blocking only known bad signatures

Answer

Allowing all traffic by default

Answer

Blocking traffic based on IP reputation only