Demonstrate How to Authenticate (auth Basic / Auth Request) F5N3 Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A company uses NGINX with auth_request to validate OAuth2 tokens. The validation service returns a 200 status for valid tokens and a 401 for invalid ones. The administrator wants to pass the original request's HTTP method (GET, POST, etc.) to the validation service so it can enforce method-specific permissions. Which variable should be used?

   • A$args
   • B$http_user_agent
   • C$uri
   • D$request_method
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses NGINX Basic Authentication for a legacy application. The security team requires that passwords be stored using the strongest hashing algorithm supported by htpasswd. Which htpasswd option should be used when creating or updating user entries?

   • Ahtpasswd -p /etc/nginx/.htpasswd user
   • Bhtpasswd -D /etc/nginx/.htpasswd user
   • Chtpasswd -B /etc/nginx/.htpasswd user
   • Dhtpasswd -s /etc/nginx/.htpasswd user
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An NGINX server uses auth_request to validate API keys. The external validation service returns a 200 status for valid keys and a 403 status for invalid keys. The administrator wants to pass the original request's URI to the validation service so it can make context-aware decisions. Which variable should be used in the auth_request subrequest?

   • A$remote_addr
   • B$status
   • C$host
   • D$request_uri
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An NGINX server uses auth_request to validate access tokens. The validation service returns a 200 status for valid tokens and a 403 for invalid ones. The administrator wants to allow access only when the validation service returns a 200 status. Which configuration is correct?

   • Aauth_request /validate;
   • Bauth_request /validate; auth_request_set $auth_status $upstream_status;
   • Cauth_request /validate; error_page 403 =200 /custom;
   • Dauth_request /validate; satisfy any;
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which pair of directives is required to enable HTTP Basic Authentication for a location block in NGINX?

   • A`auth_request` and `auth_request_set`
   • B`auth_basic` and `auth_basic_user_file`
   • C`satisfy` and `allow`
   • D`proxy_pass` and `auth_basic`
   Reveal Solution Discussion Select an answer first