Describe NGINX as a Reverse Proxy F5N1 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization runs a legacy HTTP web application that does not support TLS. They need to provide secure HTTPS access to external users without modifying the application code. What is the most appropriate way to achieve this using NGINX?

   • AInstall a TLS certificate directly on the application server and enable HTTPS in the application's configuration.
   • BConfigure NGINX to use the stream module to pass raw TCP traffic to the application without any TLS handling.
   • CUse NGINX to redirect all HTTP traffic to an external third-party CDN that provides TLS.
   • DConfigure NGINX as a reverse proxy that terminates TLS on the front end and forwards plain HTTP to the application backend.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is using NGINX as a reverse proxy for a web application. They have a requirement to block requests from a specific set of IP addresses. They also want to allow all other traffic. What is the most appropriate way to implement this access control in NGINX?

   • AUse the limit_req directive to rate-limit requests from the specific IP addresses.
   • BUse the return directive to send a 403 response for the specific IP addresses.
   • CUse the allow and deny directives within a location or server block, with deny for the specific IPs and allow for all others.
   • DUse the proxy_pass directive to forward the request to a different backend for the blocked IPs.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company has a legacy application that uses sticky sessions (session affinity) to store user session data on a specific backend server. They are deploying NGINX as a reverse proxy in front of two backend servers. They want to ensure that a user's requests are always sent to the same backend server during their session. What is the most appropriate NGINX configuration?

   • AUse the ip_hash directive in the upstream block to consistently route requests from the same client IP to the same backend.
   • BUse the round-robin default load balancing method without any additional configuration.
   • CUse the least_conn directive in the upstream block to distribute requests to the server with the fewest active connections.
   • DUse the proxy_bind directive to bind the proxy connection to a specific backend server.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A startup has a single NGINX server acting as a reverse proxy for a web application. They are concerned about a single point of failure and want to ensure high availability. What is the most appropriate action to take?

   • AAdd more backend servers to the upstream block.
   • BEnable keepalive connections to the backend servers.
   • CIncrease the worker_processes directive in the NGINX configuration.
   • DDeploy a second NGINX instance in an active-passive configuration with a floating IP address for failover.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A web application is experiencing slow response times. The administrator notices that NGINX is forwarding every request to the backend, even for static assets like images and CSS files that rarely change. What is the most effective way to reduce the load on the backend?

   • ASet the proxy_read_timeout directive to a higher value.
   • BConfigure NGINX to cache static assets using proxy_cache and serve them directly.
   • CIncrease the number of worker_processes in the NGINX configuration.
   • DEnable gzip compression for all responses.
   Reveal Solution Discussion Select an answer first