A colleague provides you with a certificate file in PKCS#12 format. What must you do before using it in NGINX?

Convert it to PEM format and extract the private key

Rename the file to have a .pem extension

Use it directly in the ssl_certificate directive

Place it in the same directory as the private key

An administrator receives a certificate in PKCS#12 format (.pfx) from a certificate authority. They need to configure NGINX to use this certificate for HTTPS. What is the correct first step?

Place the .pfx file directly in the `ssl_certificate` directive

Use the .pfx file directly in the `ssl_certificate_key` directive

Convert the PKCS#12 file to PEM format using `openssl pkcs12 -in cert.pfx -out cert.pem -nodes`

Rename the .pfx file to .crt and use it in the `ssl_certificate` directive

An administrator is generating a new SSL certificate for an NGINX server. They have already created a private key. What is the next step in the certificate issuance process?

Submit the private key directly to the certificate authority

Generate a Certificate Signing Request (CSR) using the private key

Install the private key in the NGINX configuration before obtaining the certificate

Use the private key to encrypt the certificate after issuance

An administrator is migrating an SSL certificate from a Windows server to an NGINX server. The certificate is stored in a .pfx file. What is the correct way to extract the certificate and private key for use in NGINX?

Use `openssl rsa -in cert.pfx -out key.pem` to extract the private key

Rename the .pfx file to .pem and use it directly

Use `openssl pkcs12 -in cert.pfx -out cert.pem -nodes` to extract both the certificate and private key in PEM format

Use `openssl x509 -in cert.pfx -out cert.pem` to convert the file

Which command displays the validity period of a certificate?

openssl x509 -in cert.pem -noout -dates

openssl s_client -connect example.com:443

F5 Certified Administrator NGINX - Configuration:Demonstrate

Domain 4Objective 2

Describe the Components Necessary to Use an SSL Certificate F5N3 Practice Questions (Page 4)

Part of the Demonstrate how to configure certificates domain, which makes up ~22% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

Questions 16–20

16foundation · easy
A colleague provides you with a certificate file in PKCS#12 format. What must you do before using it in NGINX?
Select an answer first
17application · medium
An administrator receives a certificate in PKCS#12 format (.pfx) from a certificate authority. They need to configure NGINX to use this certificate for HTTPS. What is the correct first step?
Select an answer first
18application · medium
An administrator is generating a new SSL certificate for an NGINX server. They have already created a private key. What is the next step in the certificate issuance process?
Select an answer first
19application · medium
An administrator is migrating an SSL certificate from a Windows server to an NGINX server. The certificate is stored in a .pfx file. What is the correct way to extract the certificate and private key for use in NGINX?
Select an answer first
20foundation · easy
Which command displays the validity period of a certificate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N3

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N3” is a trademark of its owner, used for identification only.