Practice Test Geeks(CDN) Content Delivery Network Certification Practice Test
← All CDN Flashcard Decks

DNS & Domain Management Flashcards

7 cards from real CDN practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 DNS & Domain Management flashcards as text

  1. What DNS record type is used to map a hostname to an IPv6 address?

    Answer: AAAA

    AAAA records map hostnames to 128-bit IPv6 addresses, while A records handle IPv4.

  2. Which DNS failover strategy routes traffic to a backup CDN origin only when health checks fail?

    Answer: Active-passive failover

    Active-passive failover keeps a secondary endpoint idle until the primary fails a health check.

  3. A CDN provider uses DNS-based load balancing to distribute users across PoPs. What latency metric does the DNS resolver typically use to select the nearest PoP?

    Answer: RTT to the resolver's IP

    CDN authoritative DNS servers measure round-trip time (RTT) from the resolver's IP to select the closest PoP.

  4. What is the purpose of DNSSEC's RRSIG record?

    Answer: It contains a cryptographic signature over a DNS record set

    RRSIG holds the digital signature for a resource record set, allowing resolvers to verify authenticity.

  5. When a CDN edge node receives a DNS query for content.example.com, which authoritative server is ultimately responsible for answering?

    Answer: The authoritative nameserver listed in example.com's NS records

    The authoritative nameserver designated by the domain's NS records holds the final, definitive answer for that zone.

  6. What DNS record would you add to verify domain ownership to a CDN provider during onboarding?

    Answer: TXT record

    CDN providers commonly require a TXT record with a provider-supplied verification token to prove domain control.

  7. Which DNS attack exploits a vulnerable resolver to redirect users to a malicious IP by poisoning its cache?

    Answer: DNS cache poisoning

    DNS cache poisoning inserts forged records into a resolver's cache, redirecting victims without their knowledge.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy