A company has a public website and an internal admin panel at /admin. The admin panel should only be accessible from the 10.0.0.0/8 network. An administrator tests from a machine on that network and receives a 200 OK response, but the page content is not the admin panel. What is the most likely cause?

The allow directive is missing, so the deny rule is ignored.

The location block for /admin is not matching the request; another location block handles it.

The location block uses a regex that matches the URI but the allow rule is incorrect.

The client's IP address is not in the 10.0.0.0/8 range.

A web server has a location block for /secure that should be accessible only from the 192.168.1.0/24 network. After deploying the configuration, an administrator tests from a machine on that network and receives a 403 Forbidden response. What is the most likely cause?

The allow directive is listed after the deny directive.

The location block uses a regex that does not match the requested URI.

The client's IP address is not in the 192.168.1.0/24 range.

In which configuration context can the allow and deny directives be used?

In http, server, and location contexts

An administrator configures a location block to deny access to /admin from all IPs except 203.0.113.5. After reloading NGINX, a request from 203.0.113.5 is still denied. Which command should be used to verify the configuration?

curl -I http://example.com/admin

tail -f /var/log/nginx/error.log

An administrator wants to require both a valid username/password and a specific source IP for access to /admin. Which configuration approach achieves this?

Use only auth_basic in the /admin location

Use only allow/deny in the /admin location

Use auth_basic in the server block and allow/deny in the http block

Use both auth_basic and allow/deny directives in the /admin location

F5 Certified Administrator NGINX - Configuration:Demonstrate

Domain 2Objective 4

Demonstrate How to Restrict URIs F5N3 Practice Questions (Page 3)

Part of the Demonstrate how to restrict access domain, which makes up ~19% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

6concepts

Questions 11–15

11expert · hard
A company has a public website and an internal admin panel at /admin. The admin panel should only be accessible from the 10.0.0.0/8 network. An administrator tests from a machine on that network and receives a 200 OK response, but the page content is not the admin panel. What is the most likely cause?
Select an answer first
12application · medium
A web server has a location block for /secure that should be accessible only from the 192.168.1.0/24 network. After deploying the configuration, an administrator tests from a machine on that network and receives a 403 Forbidden response. What is the most likely cause?
Select an answer first
13foundation · easy
In which configuration context can the allow and deny directives be used?
Select an answer first
14application · medium
An administrator configures a location block to deny access to /admin from all IPs except 203.0.113.5. After reloading NGINX, a request from 203.0.113.5 is still denied. Which command should be used to verify the configuration?
Select an answer first
15foundation · easy
An administrator wants to require both a valid username/password and a specific source IP for access to /admin. Which configuration approach achieves this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N3

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N3” is a trademark of its owner, used for identification only.