An administrator is configuring an NGINX server that must support both RSA and ECDSA certificates for the same domain. They have two certificate/key pairs. How should they configure NGINX to serve both?

Use only the ECDSA certificate, as it is more secure

Concatenate both certificates into one file and use one key

Use the `ssl_certificate` and `ssl_certificate_key` directives twice in the same server block, once for each pair

Use two separate server blocks, one for RSA and one for ECDSA

An administrator is configuring HTTPS on an NGINX server and has the following files: `example.com.crt` (certificate) and `example.com.key` (private key). When they run `nginx -t`, they get an error: `SSL_CTX_use_PrivateKey_file ... failed`. What is the most likely cause?

The certificate is in DER format

The private key does not match the certificate

The private key file has incorrect permissions

An administrator is setting up a new NGINX server and wants to ensure that clients can validate the certificate chain without downloading intermediate certificates manually. What is the correct way to configure the chain?

Use the root certificate in the `ssl_certificate` directive and the server certificate in the `ssl_certificate_key` directive

Place the intermediate certificate in a separate file and reference it with a second `ssl_certificate` directive

Include the intermediate certificate in the same file as the server certificate, with the server certificate first

Configure the `ssl_trusted_certificate` directive with the intermediate certificate

What is the most likely result if NGINX is configured with a certificate that does not match its private key?

NGINX starts but serves HTTP instead of HTTPS

Clients receive a certificate signed by an unknown CA

NGINX fails to start or reload with an SSL error

The certificate is automatically regenerated

An administrator notices that NGINX is serving an expired certificate for a domain. The certificate expired two days ago. What is the immediate impact on clients trying to access the site over HTTPS?

Only the private key will be invalidated

The site will continue to work without any warnings

NGINX will automatically renew the certificate

Clients will receive a security warning and may be blocked from accessing the site

F5 Certified Administrator NGINX - Configuration:Demonstrate

Domain 4Objective 2

Describe the Components Necessary to Use an SSL Certificate F5N3 Practice Questions (Page 3)

Part of the Demonstrate how to configure certificates domain, which makes up ~22% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

Questions 11–15

11expert · hard
An administrator is configuring an NGINX server that must support both RSA and ECDSA certificates for the same domain. They have two certificate/key pairs. How should they configure NGINX to serve both?
Select an answer first
12application · medium
An administrator is configuring HTTPS on an NGINX server and has the following files: `example.com.crt` (certificate) and `example.com.key` (private key). When they run `nginx -t`, they get an error: `SSL_CTX_use_PrivateKey_file ... failed`. What is the most likely cause?
Select an answer first
13expert · hard
An administrator is setting up a new NGINX server and wants to ensure that clients can validate the certificate chain without downloading intermediate certificates manually. What is the correct way to configure the chain?
Select an answer first
14foundation · easy
What is the most likely result if NGINX is configured with a certificate that does not match its private key?
Select an answer first
15application · medium
An administrator notices that NGINX is serving an expired certificate for a domain. The certificate expired two days ago. What is the immediate impact on clients trying to access the site over HTTPS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N3

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N3” is a trademark of its owner, used for identification only.