In Edge security, CAP stands for Content Security. Which capability is part of CAP?

• A. Prevents malicious content from reaching a service during runtime execution
• B. Blocks all external services
• C. Encrypts all responses
• D. Validates user permissions in a database

Answer: (A)

Content security at the edge focuses on stopping harmful content before it reaches downstream services by inspecting and filtering data as it flows, at the boundary. The capability described—preventing malicious content from reaching a service during runtime execution—fits this idea precisely, since it aims to block or sanitize payloads in real time so only safe content gets processed by the target service. The other options don’t align with this focus: blocking all external services is more about broad access control, encrypting all responses concerns confidentiality rather than content handling, and validating user permissions in a database deals with authorization, not content security at the edge.