Describe How Force All Traffic to Redirect to HTTPS F5N3 Practice Questions (Page 3)

Questions 11–12

1. 11application · medium

   An administrator is configuring NGINX to serve a website over HTTPS. The SSL certificate and private key files have been placed in /etc/nginx/ssl/. The administrator has created a server block listening on port 443 with the ssl parameter and has specified the ssl_certificate and ssl_certificate_key directives. However, when the administrator runs nginx -t, the test fails with an error about the certificate. What is the most likely cause?

   • AThe ssl_certificate directive points to the private key file and ssl_certificate_key points to the certificate file.
   • BThe server block is missing the http2 parameter on the listen directive.
   • CThe ssl_protocols directive is set to TLSv1 only, which is too old for the certificate.
   • DThe server block is missing the listen 443 ssl; directive.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An NGINX server hosts a website at example.com and also has an API at api.example.com. The administrator wants to redirect all HTTP traffic for both the main site and the API to HTTPS. The SSL certificates for both domains are installed. What is the simplest configuration that achieves this?

   • ACreate one server block on port 80 with server_name _; and a 301 redirect to https://$host$request_uri;
   • BCreate one server block on port 443 with server_name example.com api.example.com; and a 301 redirect to https://$host$request_uri;
   • CCreate two server blocks on port 80: one with server_name example.com; and one with server_name api.example.com;, each returning a 301 to https://$host$request_uri;
   • DCreate one server block on port 80 with server_name example.com api.example.com; and a 301 redirect to https://example.com$request_uri;
   Reveal Solution Discussion Select an answer first