Compare the Advantages of TLS Termination, End to End Encryption, and TLS Passthrough F5N3 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security auditor is reviewing the network architecture of a company that uses NGINX as a load balancer. The auditor notes that the load balancer terminates TLS and forwards plaintext to the backend servers. The auditor flags this as a risk because sensitive data is exposed on the internal network. The backend servers are modern and support TLS. Which change should the administrator make to address the auditor's concern?

   • ADisable TLS on the internal network
   • BSwitch to end-to-end encryption
   • CKeep TLS termination but add a firewall
   • DSwitch to TLS passthrough
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a key security benefit of TLS passthrough compared to TLS termination?

   • AIt keeps the data encrypted between the load balancer and the backend
   • BIt eliminates the need for TLS entirely
   • CIt allows the load balancer to inspect the traffic for threats
   • DIt reduces the need for certificates on the backend
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which component holds the private key in an end-to-end TLS encryption architecture?

   • ABoth the load balancer and the backend
   • BThe backend server
   • CThe load balancer only
   • DThe client only
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A financial services company runs a legacy customer portal on backend servers that cannot handle encrypted traffic. The security team requires that all traffic between the client and the load balancer be encrypted, but they accept plaintext on the internal network. The operations team wants to offload CPU-intensive cryptographic work from the backend servers. Which approach should the NGINX administrator implement?

   • ATLS termination at the load balancer
   • BDisable TLS and rely on the internal network
   • CEnd-to-end encryption from client to backend
   • DTLS passthrough at the load balancer
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An e-commerce platform experiences high CPU usage on its NGINX load balancer during peak traffic. The backend servers have spare CPU capacity and can handle TLS termination. The administrator wants to reduce the load balancer's CPU usage while keeping traffic encrypted between the client and the backend. Which change should be made?

   • AUse end-to-end encryption with re-encryption at the load balancer
   • BSwitch from TLS termination to TLS passthrough
   • CKeep TLS termination but add more load balancer instances
   • DDisable TLS on the load balancer
   Reveal Solution Discussion Select an answer first