What is the purpose of the `ssl_ciphers` directive in NGINX?

To specify the cryptographic algorithms used for encryption and authentication during the TLS handshake

To specify the location of the certificate and key files

To specify the TLS protocol versions that are allowed

To enable or disable TLS session resumption

A developer generated a self-signed certificate for internal testing using the command: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes The admin copies cert.pem and key.pem to /etc/nginx/ssl/ and configures the server block. After reloading NGINX, a browser shows a certificate warning. What is the most likely cause?

The certificate and key do not match because they were generated separately.

The certificate is self-signed and not trusted by the browser's certificate store.

The ssl_protocols directive is set to TLSv1.2 only, and the browser only supports TLS 1.3.

The private key file has incorrect permissions, so NGINX cannot read it.

What is the purpose of redirecting HTTP traffic to HTTPS in an NGINX configuration?

To reduce server load by using a more efficient protocol

To allow clients to access the site without a certificate

To improve search engine rankings by using a different domain

To ensure that all client communications are encrypted, preventing eavesdropping and tampering

What is the purpose of OCSP stapling in NGINX?

To automatically renew the certificate before it expires

To encrypt the certificate with a stronger algorithm

To allow the server to provide the certificate revocation status to the client during the TLS handshake, improving performance and reliability

To redirect clients to a different server if the certificate is revoked

F5 Certified Administrator NGINX - Configuration:Demonstrate

Domain 5Objective 2

Demonstrate How to Enable TLS Encryption F5N3 Practice Questions (Page 3)

Part of the Demonstrate how to enable HTTPS and associated security settings domain, which makes up ~21% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

8concepts

Questions 11–15

11foundation · easy
What is the purpose of the `ssl_ciphers` directive in NGINX?
Select an answer first
12application · medium
A developer generated a self-signed certificate for internal testing using the command: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes The admin copies cert.pem and key.pem to /etc/nginx/ssl/ and configures the server block. After reloading NGINX, a browser shows a certificate warning. What is the most likely cause?
Select an answer first
13foundation · easy
Which NGINX directive is used to specify which TLS protocol versions are allowed?
Select an answer first
14foundation · easy
What is the purpose of redirecting HTTP traffic to HTTPS in an NGINX configuration?
Select an answer first
15foundation · easy
What is the purpose of OCSP stapling in NGINX?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N3

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N3” is a trademark of its owner, used for identification only.

Demonstrate How to Enable TLS Encryption F5N3 Practice Questions (Page 3)

Questions 11–15

What is the purpose of the `ssl_ciphers` directive in NGINX?

Which NGINX directive is used to specify which TLS protocol versions are allowed?

What is the purpose of redirecting HTTP traffic to HTTPS in an NGINX configuration?

What is the purpose of OCSP stapling in NGINX?

Keep studying — Demonstrate how to enable HTTPS and associated security settings