Exam CAS-004 topic 1 question 84 discussion

Option B, a load-balanced group of reverse proxy servers with SSL acceleration, could potentially improve the performance of the social media application and provide some protection against DoS and DDoS attacks, but it would not address the issue of latency for mobile users in remote locations. In this case, setting the origin of the CDN to the organization's datacenter would allow the social media application to be served from the CDN's edge servers located closer to the users, reducing latency and improving the users' experience. The CDN's edge servers could also be configured to perform SSL offloading, improving the performance of the organization's web servers by handling the SSL/TLS encryption and decryption. Additionally, the CDN's edge servers could be configured to protect against DoS (Denial of Service) and DDoS (Distributed Denial of Service) attacks by filtering out malicious traffic and limiting the amount of traffic that is allowed to reach the origin servers. This would help ensure the high availability of the social media application.

Low Latency: CDNs have distributed edge servers located in various geographic locations around the world. This ensures that content is delivered from a server that is geographically close to the user, significantly reducing latency and improving the user experience. SSL Offloading: Many CDNs offer SSL/TLS offloading, which offloads the encryption and decryption tasks from the origin server, thus improving the performance of the web servers at the datacenter. Protection against DoS and DDoS Attacks: CDNs have built-in protections against DoS and DDoS attacks. They can absorb and mitigate attack traffic before it reaches the origin server, providing an additional layer of security. High Availability: CDNs provide high availability by distributing content across multiple servers. In case of server failure or high traffic, the CDN can route requests to other available servers, ensuring continuous availability of the application.

[correct]B. A load-balanced group of reverse proxy servers with SSL acceleration: Low latency: YES SSL offloading: YES DoS and DDoS protection: YES High availability: YES [incorrect]C. A CDN with the origin set to its datacenter: Low latency: When a request is made for content that is not cached at an edge location of the CDN, the CDN fetches the content from the organization's datacenter, which serves as the origin server. This means that the content is pulled from the primary storage location, processed if necessary (e.g., for dynamic content), and then delivered to the user through the CDN's network. Since origin is set to datacenter datacenter, users may experience higher latency compared to when content is served directly from nearby edge servers. Thus this option has potential to FAIL to meet the low latency requirement. SSL offloading: YES DoS and DDoS protection: YES High availability: YES

"used by customers in multiple remote geographic locations around the world"

Best Choice: C. A CDN with the origin set to its datacenter Explanation: CDNs provide low-latency access by caching content closer to end-users. SSL offloading is often supported by CDNs at the edge. CDNs inherently provide protection against DoS and DDoS attacks with their distributed infrastructure. CDNs contribute to high availability by distributing content across multiple edge servers.

To meet the requirements of low latency, SSL offloading, protection against DoS and DDoS attacks, and high availability for a social media application used by customers in multiple remote geographic locations around the world, the organization should implement the following: B. A load-balanced group of reverse proxy servers with SSL acceleration.

This is textbook AWS shit guys. CDN + load balancer + SSL offloading

I don't think the CDN would be the best answer because you are still using a single origin. If your single origin goes down, the CDNs may be able to continue to server up some content but the entire app will not continue to function. Therefore you are not highly available.

A CDN exists for the sole purpose of getting after all of those requirements. Source: Verifying each answer against Chat GPT, my experience, other test banks, a written book, and weighing in the discussion from all users to create a 100% accurate guide for myself before I take the exam. (It isn't easy because of the time needed, but it is doing my diligence)

Content Delivery Network (CDN) CDNs are geographically dispersed servers delivering content in the form of web pages, media, and images to worldwide consumers. A large proportion of all web traffic is delivered by CDNs. Sites such as YouTube, Netflix, and Amazon depend upon this service to deliver reliable low latency content to their customers. As the data is dispersed, it also offers an effective defense against DDoS attacks. CDNs use caching to ensure data is available on the edge of the network, where users or customers will benefit from lower latency and improved responses. This type of design will allow an enterprise to be very resilient, offering customers a reliable low-latency experience over a large geographic area. see chapter 15 The correct answer is: A CDN with the origin set to its datacenter

A cache server farm in its datacenter would improve performance, but it does not address the requirements for SSL offloading, DoS/DDoS protection, or high availability. A CDN with the origin set to its datacenter would help with low latency, but it does not address the requirements for SSL offloading, DoS/DDoS protection, or high availability. Dual gigabit-speed internet connections with managed DDoS prevention would provide some level of protection against DoS/DDoS attacks, but it does not address the requirements for SSL offloading, low latency, or high availability. Therefore, a load-balanced group of reverse proxy servers with SSL acceleration would be the best choice to meet all the given requirements.

A content delivery network, or content distribution network, is a geographically distributed network of proxy servers and their data centers. The goal is to provide high availability and performance by distributing the service spatially relative to end users. What are the Pros & Cons of CDN? Pros of CDN. Quick Delivery of Assets. Caters to a Large Number of Users. Managing Traffic Load. Control Over Delivery of Assets. Cons of CDN. Good Things Come With Extra Cost. Location of Servers. Support can be an Issue.

I use C in my work, prefer to select option C

Does a CDN fulfill the SSL offloading requirement? Can't find much in terms of SSL offloading/termination with CDNs.

CDN addresses the global latency

Only C addresses the global latency

Addresses availability and latency