A security team is testing an NGINX configuration and wants to identify all SELinux denials without actually blocking any actions. They want to see what would be denied if SELinux were enforcing. What is the best way to achieve this?

Set SELinux to Disabled mode by editing /etc/selinux/config and rebooting.

Keep SELinux in Enforcing mode and check /var/log/nginx/error.log for denials.

Use setsebool -P httpd_can_network_connect 1 to allow all connections and see what fails.

Set SELinux to Permissive mode with setenforce 0, run the tests, and review ausearch -m avc -ts recent.

An NGINX server fails to start with an error indicating it cannot bind to port 8080. SELinux is in Enforcing mode. What is the most likely cause?

The SELinux mode is set to Disabled

The firewall is blocking port 8080

The SELinux policy does not allow NGINX to bind to a non-standard port

The NGINX configuration file has incorrect syntax

F5Certified Administrator NGINX - Troubleshooting

Domain 2Objective 8

Describe Basic SELinux Use Cases F5N4 Practice Questions (Page 2)

Part of the Troubleshoot basic use cases domain, which makes up ~60% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~6–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

Questions 6–10

6foundation · easy
An NGINX administrator needs to test a configuration change without fully enforcing SELinux policies. Which SELinux mode allows operations to proceed while logging what would have been denied?
Select an answer first
7foundation · easy
What does the SELinux context type for NGINX worker processes typically look like when viewed with ps -Z?
Select an answer first
8foundation · easy
Which SELinux boolean allows NGINX to make outbound network connections, such as when acting as a reverse proxy?
Select an answer first
9application · medium
A security team is testing an NGINX configuration and wants to identify all SELinux denials without actually blocking any actions. They want to see what would be denied if SELinux were enforcing. What is the best way to achieve this?
Select an answer first
10foundation · easy
An NGINX server fails to start with an error indicating it cannot bind to port 8080. SELinux is in Enforcing mode. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N4

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N4” is a trademark of its owner, used for identification only.

Describe Basic SELinux Use Cases F5N4 Practice Questions (Page 2)

Questions 6–10

An NGINX administrator needs to test a configuration change without fully enforcing SELinux policies. Which SELinux mode allows operations to proceed while logging what would have been denied?

What does the SELinux context type for NGINX worker processes typically look like when viewed with ps -Z?

Which SELinux boolean allows NGINX to make outbound network connections, such as when acting as a reverse proxy?

A security team is testing an NGINX configuration and wants to identify all SELinux denials without actually blocking any actions. They want to see what would be denied if SELinux were enforcing. What is the best way to achieve this?

An NGINX server fails to start with an error indicating it cannot bind to port 8080. SELinux is in Enforcing mode. What is the most likely cause?

Keep studying — Troubleshoot basic use cases