Demonstrate How to Restrict URIs F5N3 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which NGINX directive is specifically designed to restrict HTTP methods within a location block?

   • Alimit_except
   • Bproxy_pass
   • Creturn
   • Dallow
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A REST API endpoint /api/orders accepts only GET and POST requests. The team wants to reject PUT, DELETE, and PATCH requests with a 405 response. Which configuration should be used inside the location block?

   • Alimit_except GET POST { deny all; }
   • Ballow GET POST; deny all;
   • Cif ($request_method = PUT) { return 405; }
   • Dreturn 405;
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a location block for /reports that requires authentication and restricts access to the 10.0.0.0/8 network. An administrator tests from a machine on that network and receives a 401 Unauthorized response. What is the most likely cause?

   • AThe auth_basic_user_file path is incorrect.
   • BThe allow directive is missing, so the deny rule blocks the request.
   • CThe location block uses a regex that does not match the requested URI.
   • DThe user is not in the .htpasswd file or the password is incorrect.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   An administrator configures a location block to deny access to /private from all IPs except 203.0.113.5. After reloading NGINX, a request from 203.0.113.5 is still denied. The configuration is: location /private { allow 203.0.113.5; deny all; }. What is the most likely cause?

   • AThe deny all directive is processed before the allow directive.
   • BThe location block uses a regex that does not match the requested URI.
   • CThe allow directive is misspelled as 'alow'.
   • DThe client's IP address is not 203.0.113.5 due to a proxy or load balancer.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has a location block for /secure that should be accessible only from the 192.168.1.0/24 network. An administrator tests from a machine on that network and receives a 403 Forbidden response. The configuration is: location /secure { deny all; allow 192.168.1.0/24; }. What is the most likely cause?

   • AThe client's IP address is not in the 192.168.1.0/24 range.
   • BThe location block uses a regex that does not match the requested URI.
   • CThe allow directive is misspelled as 'alow'.
   • DThe deny all directive is processed before the allow directive.
   Reveal Solution Discussion Select an answer first