โ† All CDN Flashcard Decks

API Gateway & Rate Limiting Flashcards

7 cards from real CDN practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 API Gateway & Rate Limiting flashcards as text
  1. When a CDN API gateway returns an ETag header with an API response, what rate limiting benefit does client-side caching provide?

    Answer: It reduces redundant API calls by allowing conditional GET requests, preserving quota

    Clients using ETags with If-None-Match can receive 304 Not Modified responses, avoiding full API calls and conserving their rate limit quota.

  2. Which API gateway strategy helps prevent a 'noisy neighbor' tenant from degrading CDN API performance for other tenants?

    Answer: Per-tenant rate limit isolation with dedicated counters

    Per-tenant isolation ensures one high-traffic tenant's rate limit counters do not affect other tenants' quotas or performance.

  3. An API gateway uses GraphQL instead of REST. Which rate limiting dimension is most important to add beyond simple request count?

    Answer: Query complexity or depth scoring

    GraphQL queries can vary enormously in compute cost, so complexity or depth scoring prevents cheap request counts from hiding expensive query execution.

  4. What is the role of a 'developer portal' in a CDN's API gateway ecosystem?

    Answer: To provide documentation, API key management, and quota dashboards to API consumers

    A developer portal gives external consumers self-service access to API documentation, key generation, and usage/quota monitoring.

  5. A CDN API gateway needs to enforce rate limits even during a Redis cluster failover. Which approach maintains availability?

    Answer: Fall back to local in-memory approximate rate limiting per node

    Falling back to local in-memory counters provides approximate rate limiting continuity during a distributed cache outage instead of fully blocking traffic.

  6. Which CDN API gateway feature allows operators to test a new rate limiting policy on 5% of traffic before full rollout?

    Answer: Canary deployment / traffic splitting

    Canary deployment routes a small percentage of traffic through the new policy, allowing validation before exposing all traffic to the change.

  7. When configuring CORS on a CDN API gateway, which header must be present in the preflight OPTIONS response to allow cross-origin API calls from a browser?

    Answer: Access-Control-Allow-Origin

    Access-Control-Allow-Origin specifies which origins are permitted to make cross-origin requests; without it browsers block the API call.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy