Describe How to Run NGINX as a Specific User Type F5N1 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common issue when NGINX worker processes run as a non-root user?

   • AInability to write to log files and temporary directories
   • BInability to load kernel modules
   • CInability to read the configuration file
   • DInability to bind to port 80
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary security reason for running NGINX worker processes as a non-privileged user instead of root?

   • ATo enable the use of the 'user' directive
   • BTo limit the impact of a security vulnerability in NGINX
   • CTo improve performance by reducing context switches
   • DTo allow NGINX to bind to ports above 1024
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which directive in nginx.conf is used to run NGINX worker processes as a specific user and group?

   • Aworker_processes_user
   • Brun_as
   • Cworker_user
   • Duser
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In which section of the main NGINX configuration file is the user directive typically placed to set the user for worker processes?

   • AAt the top level (main context)
   • BInside a server block
   • CInside the http block
   • DInside the events block
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator configures NGINX to run worker processes as the 'nginx' user. After a reload, the administrator finds that NGINX cannot create the PID file /run/nginx.pid. The directory /run is owned by root:root with permissions 755. What is the most likely cause and the recommended fix?

   • AThe PID file must be created by the worker processes; change the user directive to 'user root;' to allow PID file creation.
   • BThe user directive must include a group; add 'user nginx nginx;' to fix PID file creation.
   • CThe 'nginx' user cannot write to /run; change the PID file location to a directory writable by nginx, such as /var/run/nginx/.
   • DThe master process runs as root and creates the PID file, so the nginx user is not the issue; check the master process user.
   Reveal Solution Discussion Select an answer first