Explain What Is Unique to NGINX as a Reverse Proxy F5N2 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is planning to deploy NGINX as a reverse proxy in front of a legacy application that only supports HTTP. They want to provide HTTPS to clients without modifying the application. They also want to ensure that the proxy can handle a high number of concurrent HTTPS connections. What should they consider?

   • ATerminate SSL/TLS on NGINX and use HTTP to the backend, while tuning worker_processes and worker_connections for high concurrency.
   • BSet up a separate NGINX instance for SSL/TLS termination and another for load balancing.
   • CConfigure NGINX to use the 'ssl_verify_client' directive to authenticate clients, but keep the backend on HTTP.
   • DUse a TCP proxy to pass through the HTTPS traffic to the backend, which must be updated to support HTTPS.
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A company runs a web application with a mix of dynamic and static content. They use NGINX as a reverse proxy with caching enabled. They notice that some users are receiving stale content even though the backend has updated the data. They suspect that the cache is not being invalidated correctly. They want to ensure that dynamic content is never served from cache, while static content is cached. What is the best approach?

   • AUse the 'expires' directive to set cache headers on the backend responses.
   • BUse 'proxy_cache_bypass' and 'proxy_no_cache' directives in location blocks for dynamic content, and 'proxy_cache_valid' for static content.
   • CDisable caching entirely and rely on the backend to handle all requests.
   • DSet 'proxy_cache_valid' to a very short duration for all content, such as 1 second.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which NGINX configuration block allows for the most granular control over request handling, such as applying different rules to different URL paths?

   • Astream
   • Bhttp
   • Clocation
   • Devents
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   A company runs a high-traffic e-commerce site. They use NGINX as a reverse proxy to terminate SSL/TLS and forward HTTP to backend servers. They are experiencing high CPU usage on the NGINX server during peak hours. They want to reduce the CPU overhead of SSL/TLS termination without compromising security. What should they do?

   • ADisable SSL session caching to free up memory.
   • BEnable SSL session caching and use TLS 1.3 with modern, efficient ciphers.
   • CUse a weaker cipher suite to reduce CPU usage.
   • DMove SSL/TLS termination to the backend servers to offload the proxy.
   Reveal Solution Discussion Select an answer first
6. 15expert · medium

   A company runs a critical application on a cluster of backend servers. They use NGINX as a reverse proxy with active health checks. They notice that during a backend server restart, NGINX continues to send traffic to the server, causing errors. They want to ensure that NGINX does not send traffic to a server that is restarting. What should they do?

   • AUse the 'backup' parameter to designate the server as a backup, so it is only used when all other servers are down.
   • BSet 'proxy_next_upstream' to 'error timeout' to retry on another server if the first fails.
   • CIncrease the 'fail_timeout' parameter to give the server more time to respond.
   • DUse the 'down' parameter in the upstream server definition to manually mark the server as down during maintenance.
   Reveal Solution Discussion Select an answer first