Demonstrate How to Authenticate (auth Basic / Auth Request) F5N3 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When using `htpasswd` to create a new user file for NGINX Basic Auth, which command correctly creates the file and adds a user named `admin`?

   • A`htpasswd -b /etc/nginx/.htpasswd admin`
   • B`htpasswd -c /etc/nginx/.htpasswd admin`
   • C`htpasswd -n /etc/nginx/.htpasswd admin`
   • D`htpasswd /etc/nginx/.htpasswd admin`
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An NGINX server uses auth_request to validate JWT tokens. The validation service returns a 200 status for valid tokens and a 401 for invalid ones. The administrator wants to cache the validation result for 5 minutes to reduce load on the validation service. Which NGINX directive should be used?

   • Aauth_request_cache
   • Bfastcgi_cache_path and fastcgi_cache
   • CUse a separate caching layer, such as a reverse proxy cache or an external cache service, in front of the validation service.
   • Dproxy_cache_path and proxy_cache
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which command-line tool is commonly used to create and update the user file for NGINX HTTP Basic Authentication?

   • A`useradd`
   • B`authfile`
   • C`openssl passwd`
   • D`htpasswd`
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has an existing single sign-on (SSO) service that validates session cookies. They want NGINX to protect a new API endpoint by checking the session cookie with the SSO service before allowing access. Which NGINX configuration should be used?

   • AUse the limit_req directive to rate-limit requests from unauthenticated users.
   • BUse the proxy_pass directive to forward all requests to the SSO service.
   • CConfigure auth_basic with a user file containing all employee credentials.
   • DUse auth_request to send a subrequest to the SSO service and allow access only if it returns a 2xx response.
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   A company has two NGINX servers behind a load balancer. Both servers use auth_request to validate session cookies against a central authentication service. The authentication service occasionally returns a 500 status due to temporary overload. The company wants to fail open (allow access) when the authentication service is unavailable, but fail closed (deny access) when it returns a 401 or 403. Which configuration should be used?

   • AUse error_page 500 =200 /fallback; in the auth_request location, where /fallback returns a 200 status.
   • BUse proxy_next_upstream to retry the auth_request on a different authentication service.
   • CUse the satisfy any directive with auth_request and a separate allow rule for all IPs.
   • DUse error_page 401 403 =200 /fallback; in the auth_request location, where /fallback returns a 200 status.
   Reveal Solution Discussion Select an answer first