A retail company wants to use NGINX to inspect incoming HTTPS requests for SQL injection attempts before they reach the backend application servers. The security team requires that the inspection happens at the load balancer. The backend servers are trusted and reside in a secured data center. Which approach should the administrator configure?

Disable TLS to allow inspection

TLS termination at the load balancer

End-to-end encryption with passthrough

In an end-to-end encryption setup, what does the load balancer do with the TLS traffic?

It decrypts the traffic and re-encrypts it with a new session to the backend

It passes the encrypted traffic through without decrypting it

It terminates the TLS session and then creates a new TLS session to the backend

It decrypts the traffic and forwards plaintext to the backend

When is TLS passthrough the preferred choice?

When the load balancer should cache static content

When the backend servers have limited CPU capacity

When the load balancer needs to route based on URL paths

When the backend application must see the original client's TLS session

A company runs a high-throughput API service where the backend servers handle all TLS termination themselves. The NGINX load balancer is only used for routing and must not decrypt any traffic. The operations team wants to minimize CPU usage on the load balancer. Which approach should be used?

End-to-end encryption with re-encryption

A company runs a legacy application on backend servers that do not support TLS. The security team requires that client-to-load balancer traffic be encrypted. The operations team wants to use the load balancer for SSL session resumption to improve performance. However, the backend servers cannot handle TLS. Which approach should the administrator choose?

End-to-end encryption with session resumption

TLS termination at the load balancer with session resumption enabled

Disable TLS and rely on the internal network

TLS passthrough with session resumption

F5 Certified Administrator NGINX - Configuration:Demonstrate

Domain 5Objective 1

Compare the Advantages of TLS Termination, End to End Encryption, and TLS Passthrough F5N3 Practice Questions (Page 1)

Part of the Demonstrate how to enable HTTPS and associated security settings domain, which makes up ~21% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

6concepts

Questions 1–5

1application · medium
A retail company wants to use NGINX to inspect incoming HTTPS requests for SQL injection attempts before they reach the backend application servers. The security team requires that the inspection happens at the load balancer. The backend servers are trusted and reside in a secured data center. Which approach should the administrator configure?
Select an answer first
2foundation · easy
In an end-to-end encryption setup, what does the load balancer do with the TLS traffic?
Select an answer first
3foundation · easy
When is TLS passthrough the preferred choice?
Select an answer first
4application · medium
A company runs a high-throughput API service where the backend servers handle all TLS termination themselves. The NGINX load balancer is only used for routing and must not decrypt any traffic. The operations team wants to minimize CPU usage on the load balancer. Which approach should be used?
Select an answer first
5expert · medium
A company runs a legacy application on backend servers that do not support TLS. The security team requires that client-to-load balancer traffic be encrypted. The operations team wants to use the load balancer for SSL session resumption to improve performance. However, the backend servers cannot handle TLS. Which approach should the administrator choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N3

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N3” is a trademark of its owner, used for identification only.

Compare the Advantages of TLS Termination, End to End Encryption, and TLS Passthrough F5N3 Practice Questions (Page 1)

Questions 1–5

In an end-to-end encryption setup, what does the load balancer do with the TLS traffic?

When is TLS passthrough the preferred choice?

A company runs a high-throughput API service where the backend servers handle all TLS termination themselves. The NGINX load balancer is only used for routing and must not decrypt any traffic. The operations team wants to minimize CPU usage on the load balancer. Which approach should be used?

Keep studying — Demonstrate how to enable HTTPS and associated security settings