Practice Test Geeks(CDN) Content Delivery Network Certification Practice Test
← All CDN Flashcard Decks

SSL/TLS & Certificate Management Flashcards

7 cards from real CDN practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 SSL/TLS & Certificate Management flashcards as text

  1. What is the function of Certificate Transparency (CT) logs in the context of CDN certificate management?

    Answer: They provide a public, auditable record of all issued certificates

    CT logs are append-only public ledgers that record every certificate issued by a CA, allowing domain owners and browsers to detect unauthorized certificates.

  2. Which protocol is ACME (Automatic Certificate Management Environment) most commonly associated with?

    Answer: Let's Encrypt certificate issuance automation

    ACME is the protocol developed alongside Let's Encrypt to automate DV certificate issuance, renewal, and revocation.

  3. A CDN notices that the cipher suite TLS_RSA_WITH_AES_128_CBC_SHA is still negotiated by some clients. What is the primary concern?

    Answer: It lacks forward secrecy because RSA key exchange is used

    RSA key exchange does not provide forward secrecy; if the server's private key is later compromised, all past recorded sessions can be decrypted.

  4. What does HSTS (HTTP Strict Transport Security) instruct a browser to do?

    Answer: Always connect to the domain over HTTPS, even if the user types HTTP

    HSTS tells the browser to reject plain HTTP connections and always use HTTPS for the specified domain and duration.

  5. When a CDN performs SSL bridging (re-encryption) to the origin, what is the key security requirement?

    Answer: The CDN must validate the origin's certificate to prevent MITM between edge and origin

    Without validating the origin's certificate, the CDN-to-origin connection is vulnerable to man-in-the-middle attacks even though the client-to-CDN leg is secure.

  6. What is a SAN (Subject Alternative Name) certificate and why is it preferred in CDN deployments?

    Answer: A certificate that lists multiple domain names, allowing one cert to cover many CDN customer domains

    SAN certificates embed multiple domain names in one certificate, reducing the number of certificates a CDN must manage across its shared infrastructure.

  7. Which TLS 1.3 feature reduces connection setup latency compared to TLS 1.2?

    Answer: 0-RTT (Zero Round Trip Time) resumption

    TLS 1.3's 0-RTT allows clients to send application data in the first message when resuming a previous session, eliminating one round trip.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy