Why do worker processes typically run as a non-privileged user rather than root?

To enable workers to bind to ports above 1024

To improve performance by reducing context switching

To allow workers to read configuration files that are user-owned

To limit the impact of a security vulnerability in the worker process

In a typical NGINX installation, under which OS user does the master process run?

The user who started the NGINX service

A security team wants to minimize the impact of a potential NGINX worker process compromise. Currently, workers run as root. What is the most effective configuration change to reduce risk?

Add 'user nginx;' to the main context of nginx.conf

Add 'user root;' to the main context of nginx.conf

Set 'master_process off;' to run NGINX as a single process

Set 'worker_processes 1;' to reduce the number of processes

An administrator wants to ensure that NGINX worker processes can read files in /var/lib/webapp, which is owned by the 'webapp' user and the 'webgrp' group. The administrator adds 'user webapp webgrp;' to nginx.conf. What else must be true for the workers to access the files?

The files must have read permission for the owner or group

The files must be in the same directory as nginx.conf

The master process must also run as webapp

The files must be owned by root

F5Certified Administrator NGINX

Domain 3Objective 4

Describe the Relationship Between NGINX Processes and Users F5N1 Practice Questions (Page 1)

Part of the Demonstrate how to manage user permissions domain, which makes up ~23% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–5 in this domain), expect 1–1 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

5concepts

Questions 1–5

1application · medium
An administrator needs NGINX worker processes to access files owned by the 'webapp' user and the 'webgrp' group. The current nginx.conf has no 'user' directive. What should the administrator add to the main context of nginx.conf?
Select an answer first
2foundation · easy
Why do worker processes typically run as a non-privileged user rather than root?
Select an answer first
3foundation · easy
In a typical NGINX installation, under which OS user does the master process run?
Select an answer first
4application · medium
A security team wants to minimize the impact of a potential NGINX worker process compromise. Currently, workers run as root. What is the most effective configuration change to reduce risk?
Select an answer first
5application · medium
An administrator wants to ensure that NGINX worker processes can read files in /var/lib/webapp, which is owned by the 'webapp' user and the 'webgrp' group. The administrator adds 'user webapp webgrp;' to nginx.conf. What else must be true for the workers to access the files?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N1” is a trademark of its owner, used for identification only.