Demonstrate How to Authenticate (auth Basic / Auth Request) F5N3 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company wants to protect a web application with HTTP Basic Authentication. The application is served from a backend server via proxy_pass. The administrator wants to ensure that the Authorization header is NOT passed to the backend server after authentication succeeds. Which configuration should be used?

   • AUse the satisfy any directive with auth_basic and allow all.
   • BUse the proxy_hide_header directive to remove the Authorization header from the response.
   • CUse auth_basic_user_file with a file that contains no users.
   • DUse proxy_set_header Authorization "";
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In an NGINX configuration, which directive specifies the URI of the external authentication service used by `auth_request`?

   • A`auth_request`
   • B`proxy_pass`
   • C`auth_request_set`
   • D`auth_basic_user_file`
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which directive is used to capture a response header from the `auth_request` subrequest and store it in a variable for later use?

   • A`auth_request_set`
   • B`proxy_set_header`
   • C`add_header`
   • D`set`
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   An NGINX server uses auth_request to validate API keys. The validation service returns a 200 status for valid keys and a 401 for invalid ones. The administrator wants to pass the client's IP address to the validation service so it can enforce rate limits per IP. Which NGINX variable should be used in the auth_request subrequest?

   • A$request_uri
   • B$http_x_forwarded_for
   • C$server_addr
   • D$remote_addr
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company wants to protect a staging environment with HTTP Basic Authentication, but only for external traffic. Internal traffic from the corporate network should bypass authentication. Which NGINX configuration should be used?

   • AUse the satisfy any directive with allow for the internal network and auth_basic for all other requests.
   • BUse the deny directive to block external traffic entirely.
   • CUse the satisfy all directive with allow for the internal network and auth_basic for all requests.
   • DUse two separate server blocks, one for internal and one for external traffic.
   Reveal Solution Discussion Select an answer first