Practice Test Geeks(CDN) Content Delivery Network Certification Practice Test
← All CDN Flashcard Decks

SSL/TLS & Certificate Management Flashcards

7 cards from real CDN practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 SSL/TLS & Certificate Management flashcards as text

  1. What is the purpose of OCSP stapling in a CDN environment?

    Answer: To allow the server to cache and serve certificate revocation status directly

    OCSP stapling lets the server cache and attach the certificate revocation response to the TLS handshake, reducing latency and load on OCSP responders.

  2. Which TLS extension allows a CDN to serve multiple SSL certificates on a single IP address?

    Answer: Server Name Indication (SNI)

    SNI allows the client to send the requested hostname during the TLS handshake, enabling the server to select the correct certificate for that domain.

  3. What does 'certificate pinning' achieve in a CDN security context?

    Answer: Forces clients to accept only a pre-approved certificate or public key

    Certificate pinning instructs clients to reject any certificate not matching a pinned value, preventing MITM attacks using rogue certificates.

  4. A CDN operator needs to inspect encrypted HTTPS traffic for WAF purposes. Which technique makes this possible?

    Answer: TLS termination at the edge

    TLS termination at the CDN edge decrypts traffic so the WAF can inspect it before re-encrypting and forwarding to the origin.

  5. What is the risk of using a wildcard certificate (*.example.com) across a CDN with many PoPs?

    Answer: Compromise of one PoP exposes the private key for all subdomains

    A single wildcard private key stored across many PoPs means a breach at any single PoP compromises all subdomains covered by that certificate.

  6. Which certificate type provides the highest level of identity assurance for an e-commerce site served via CDN?

    Answer: Extended Validation (EV)

    EV certificates require rigorous identity verification of the organization and historically triggered a green address bar, providing the highest assurance level.

  7. What happens during a TLS session resumption using session tickets in a CDN with multiple edge nodes?

    Answer: The session ticket encrypted with a shared key allows resumption at any PoP holding that key

    Session tickets encrypt session state with a server-held key; if CDN PoPs share that key, clients can resume sessions at any participating node.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy