Practice Test Geeks(CDN) Content Delivery Network Certification Practice Test
← All CDN Flashcard Decks

Security & Performance Optimization Flashcards

7 cards from real CDN practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Performance Optimization flashcards as text

  1. Which TLS feature allows a CDN edge server to send the certificate status during the handshake, eliminating a separate OCSP lookup by the client?

    Answer: OCSP Stapling

    OCSP Stapling lets the server attach a cached OCSP response to the TLS handshake, removing the client's need to query a CA.

  2. A CDN operator wants to prevent attackers from exploiting vulnerabilities in old TLS versions. Which minimum protocol version is recommended by current industry best practice?

    Answer: TLS 1.2

    TLS 1.2 is the current minimum recommended by NIST and major CDN vendors; TLS 1.3 is preferred where supported.

  3. What does a CDN's Bot Management system use to distinguish legitimate users from automated scrapers?

    Answer: Behavioral fingerprinting and challenge-response

    Bot management combines behavioral signals (mouse movement, request cadence) with challenges like CAPTCHAs or JS challenges to identify bots.

  4. Which HTTP response header instructs browsers to only connect to a site over HTTPS for a specified duration, even if the user types HTTP?

    Answer: Strict-Transport-Security

    The Strict-Transport-Security (HSTS) header tells browsers to enforce HTTPS connections for the specified max-age duration.

  5. A retail site experiences slow Time to First Byte (TTFB) during peak sales. Which CDN technique most directly reduces TTFB for cacheable responses?

    Answer: Edge caching with cache HIT serving

    When a CDN serves a cached HIT from an edge node close to the user, TTFB drops dramatically because no origin round-trip is needed.

  6. What is the purpose of a CDN's 'Shield' or 'Mid-tier Cache' architecture?

    Answer: Consolidate cache MISS requests to a single POP before hitting origin

    A shield POP acts as an intermediate cache layer, so only one request per unique object reaches the origin even if many edge nodes miss simultaneously.

  7. Which attack specifically targets the CDN caching layer by sending requests with unique cache-busting parameters to force repeated origin fetches?

    Answer: Cache Bypass / Cache Busting Attack

    A cache bypass attack appends random query strings to every request, ensuring cache misses that overwhelm the origin server.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy