CDN Security & Performance Optimization 2

Question 1

Which TLS feature allows a CDN edge server to send the certificate status during the handshake, eliminating a separate OCSP lookup by the client?

Accepted Answer

OCSP Stapling

Answer

OCSP Stapling lets the server attach a cached OCSP response to the TLS handshake, removing the client's need to query a CA.

Question 2

A CDN operator wants to prevent attackers from exploiting vulnerabilities in old TLS versions. Which minimum protocol version is recommended by current industry best practice?

Accepted Answer

TLS 1.2

Answer

TLS 1.2 is the current minimum recommended by NIST and major CDN vendors; TLS 1.3 is preferred where supported.

Question 3

What does a CDN's Bot Management system use to distinguish legitimate users from automated scrapers?

Accepted Answer

Behavioral fingerprinting and challenge-response

Answer

Bot management combines behavioral signals (mouse movement, request cadence) with challenges like CAPTCHAs or JS challenges to identify bots.

Question 4

Which HTTP response header instructs browsers to only connect to a site over HTTPS for a specified duration, even if the user types HTTP?

Accepted Answer

Strict-Transport-Security

Answer

The Strict-Transport-Security (HSTS) header tells browsers to enforce HTTPS connections for the specified max-age duration.

Question 5

A retail site experiences slow Time to First Byte (TTFB) during peak sales. Which CDN technique most directly reduces TTFB for cacheable responses?

Accepted Answer

Edge caching with cache HIT serving

Answer

When a CDN serves a cached HIT from an edge node close to the user, TTFB drops dramatically because no origin round-trip is needed.

(CDN) Content Delivery Network Certification Practice Test

(CDN) Content Delivery Network Certification Practice Test

CDN Security & Performance Optimization 2