A healthcare provider must ensure that patient data is encrypted at every hop between the client browser and the application server. The application server already has a valid TLS certificate and can handle encrypted traffic. The NGINX load balancer is used for routing and health checks only. Which configuration should the administrator choose?

TLS termination at the load balancer

End-to-end encryption with TLS maintained from client to backend

Terminate TLS at the backend only

TLS passthrough with the load balancer inspecting traffic

A company wants to use NGINX to insert a custom header into HTTP requests before they reach the backend. The backend servers are old and do not support TLS. The security team requires that client-to-load balancer traffic be encrypted. Which approach should the administrator use?

TLS termination at the load balancer

Use a separate header injection proxy

What is a performance advantage of TLS termination over TLS passthrough?

It reduces the load on backend servers by offloading TLS processing

It increases the security of the backend connection

It eliminates the need for certificates

It allows the load balancer to cache encrypted content

A company runs a high-traffic web application. The NGINX load balancer is currently configured for TLS termination, and the operations team observes that the load balancer CPU is consistently at 90% during peak hours. The backend servers have significant spare CPU capacity and support TLS. The administrator wants to reduce load balancer CPU usage without sacrificing security. Which action should be taken?

Add more load balancer instances

Which approach exposes plaintext data on the internal network between the load balancer and the backend?

All approaches expose plaintext data

F5 Certified Administrator NGINX - Configuration:Demonstrate

Domain 5Objective 1

Compare the Advantages of TLS Termination, End to End Encryption, and TLS Passthrough F5N3 Practice Questions (Page 4)

Part of the Demonstrate how to enable HTTPS and associated security settings domain, which makes up ~21% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

6concepts

Questions 16–20

16application · medium
A healthcare provider must ensure that patient data is encrypted at every hop between the client browser and the application server. The application server already has a valid TLS certificate and can handle encrypted traffic. The NGINX load balancer is used for routing and health checks only. Which configuration should the administrator choose?
Select an answer first
17application · medium
A company wants to use NGINX to insert a custom header into HTTP requests before they reach the backend. The backend servers are old and do not support TLS. The security team requires that client-to-load balancer traffic be encrypted. Which approach should the administrator use?
Select an answer first
18foundation · easy
What is a performance advantage of TLS termination over TLS passthrough?
Select an answer first
19expert · medium
A company runs a high-traffic web application. The NGINX load balancer is currently configured for TLS termination, and the operations team observes that the load balancer CPU is consistently at 90% during peak hours. The backend servers have significant spare CPU capacity and support TLS. The administrator wants to reduce load balancer CPU usage without sacrificing security. Which action should be taken?
Select an answer first
20foundation · easy
Which approach exposes plaintext data on the internal network between the load balancer and the backend?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N3

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N3” is a trademark of its owner, used for identification only.

Compare the Advantages of TLS Termination, End to End Encryption, and TLS Passthrough F5N3 Practice Questions (Page 4)

Questions 16–20

A company wants to use NGINX to insert a custom header into HTTP requests before they reach the backend. The backend servers are old and do not support TLS. The security team requires that client-to-load balancer traffic be encrypted. Which approach should the administrator use?

What is a performance advantage of TLS termination over TLS passthrough?

Which approach exposes plaintext data on the internal network between the load balancer and the backend?

Keep studying — Demonstrate how to enable HTTPS and associated security settings