Compare the Advantages of TLS Termination, End to End Encryption, and TLS Passthrough F5N3 Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A company runs a multi-tenant SaaS platform. Each tenant has its own backend server that handles TLS termination. The NGINX load balancer is shared across all tenants and must not decrypt traffic because the tenants require that their data remain encrypted end-to-end. The load balancer is also used for health checks. The operations team notices that health checks are failing because the load balancer cannot inspect the encrypted traffic. What should the administrator do to maintain end-to-end encryption while enabling health checks?

   • AUse TCP health checks on the backend port
   • BTerminate TLS at the load balancer for health checks only
   • CDisable health checks
   • DUse HTTP health checks on the backend port
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In TLS passthrough, what does the load balancer use to make routing decisions?

   • AThe TLS Server Name Indication (SNI) and IP information
   • BThe decrypted HTTP headers
   • CThe client's cookies
   • DThe URL path and query parameters
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which approach typically consumes more CPU resources on the load balancer?

   • ATLS termination
   • BNeither consumes CPU
   • CBoth consume the same CPU
   • DTLS passthrough
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In NGINX, what is the primary function of TLS termination at the load balancer?

   • ATo forward the encrypted TLS traffic unchanged to the backend server
   • BTo decrypt traffic only for inspection and then re-encrypt it before forwarding
   • CTo re-encrypt traffic between the load balancer and the backend using a different certificate
   • DTo decrypt incoming TLS traffic and forward plaintext HTTP to backend servers
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is migrating to a microservices architecture. The NGINX load balancer sits in front of several backend services. The security team wants to ensure that the load balancer cannot see the content of the requests, but the backend services need to handle TLS. Which approach should the administrator choose?

   • APlain HTTP with no TLS
   • BEnd-to-end encryption with re-encryption
   • CTLS termination
   • DTLS passthrough
   Reveal Solution Discussion Select an answer first