An administrator is configuring an NGINX server to serve multiple domains with different certificates. They have a wildcard certificate for `*.example.com` and a separate certificate for `example.org`. How should they configure the server to serve both domains?

Use the wildcard certificate for both domains

Use SNI to select the certificate based on the domain

Use two separate `server` blocks, each with its own `ssl_certificate` and `ssl_certificate_key` directives

Use one `server` block with both certificates in the `ssl_certificate` directive

Which command can you use to verify that a private key matches a certificate?

openssl x509 -noout -modulus -in cert.pem | openssl md5; openssl rsa -noout -modulus -in key.pem | openssl md5

openssl s_client -connect localhost:443

openssl req -new -key key.pem -out new.csr

openssl verify -CAfile ca.pem cert.pem

An administrator is configuring HTTPS on an NGINX server. They have a certificate file and a private key file. They want to ensure that the private key is not accessible to unauthorized users. What file permissions should they set on the private key file?

644 (read for all, write for owner)

600 (read/write for owner only)

755 (read/execute for all, write for owner)

What is the purpose of an intermediate certificate in an SSL/TLS chain of trust?

It provides a backup if the server certificate expires

It bridges the server certificate to a trusted root certificate

It replaces the need for a private key

It encrypts the server's public key

An administrator is setting up HTTPS on an NGINX server. They have a certificate file in DER format and a private key in PEM format. What must they do before configuring NGINX?

Place both files in the same directory and reference them with the same filename

Use the DER certificate directly in the `ssl_certificate` directive

Convert the certificate from DER to PEM using `openssl x509 -in cert.der -inform DER -out cert.pem -outform PEM`

Convert the private key from PEM to DER using `openssl rsa -in key.pem -outform DER -out key.der`

F5 Certified Administrator NGINX - Configuration:Demonstrate

Domain 4Objective 2

Describe the Components Necessary to Use an SSL Certificate F5N3 Practice Questions (Page 2)

Part of the Demonstrate how to configure certificates domain, which makes up ~22% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

Questions 6–10

6expert · hard
An administrator is configuring an NGINX server to serve multiple domains with different certificates. They have a wildcard certificate for `*.example.com` and a separate certificate for `example.org`. How should they configure the server to serve both domains?
Select an answer first
7foundation · easy
Which command can you use to verify that a private key matches a certificate?
Select an answer first
8application · medium
An administrator is configuring HTTPS on an NGINX server. They have a certificate file and a private key file. They want to ensure that the private key is not accessible to unauthorized users. What file permissions should they set on the private key file?
Select an answer first
9foundation · easy
What is the purpose of an intermediate certificate in an SSL/TLS chain of trust?
Select an answer first
10application · medium
An administrator is setting up HTTPS on an NGINX server. They have a certificate file in DER format and a private key in PEM format. What must they do before configuring NGINX?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N3

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N3” is a trademark of its owner, used for identification only.