A certificate is issued for the hostname 'www.example.com'. A user accesses 'example.com' and receives a hostname mismatch warning. What is the most likely cause?

The certificate does not include 'example.com' in its SAN or CN.

The certificate has been revoked.

The certificate is not signed by a trusted CA.

What does an Online Certificate Status Protocol (OCSP) response indicate?

Whether the certificate's issuer is trusted

Whether the certificate has been revoked

Whether the certificate's hostname matches

Whether the certificate is expired

An NGINX server hosts multiple virtual hosts. Users accessing https://app1.example.com receive a certificate warning, but users accessing https://app2.example.com do not. Both certificates are issued by the same CA and are not expired. What is the most likely cause?

The certificate for app2.example.com has been revoked.

The NGINX server is using the same certificate for both virtual hosts.

The certificate for app1.example.com does not include app1.example.com in its SAN.

The ssl_certificate_key for app1 is incorrect.

An NGINX server suddenly starts returning TLS handshake failures for all clients. The certificate was working yesterday. An administrator runs `openssl x509 -in /etc/nginx/ssl/server.crt -noout -dates` and sees `notAfter=Apr 1 12:00:00 2024 GMT`. The current date is April 2, 2024. What should the administrator do to resolve the issue?

Change the system date back to March 31 to make the certificate valid again.

Replace the certificate with a new one that has a validity period extending beyond the current date.

Restart the NGINX service to reload the certificate from disk.

Verify that the private key matches the certificate by comparing modulus values.

An administrator is troubleshooting an NGINX server that returns a certificate error. The certificate file is located at /etc/nginx/ssl/server.crt, and the key is at /etc/nginx/ssl/server.key. The administrator runs `nginx -t` and receives an error about the certificate. Which command should be used to verify that the certificate and key match?

openssl verify -CAfile ca.pem server.crt

openssl x509 -in server.crt -noout -modulus | openssl md5; openssl rsa -in server.key -noout -modulus | openssl md5

openssl req -in server.csr -noout -text

openssl s_client -connect localhost:443 -servername localhost

F5Certified Administrator NGINX - Troubleshooting

Domain 3Objective 2

Describe How to Troubleshoot Invalid Certificates F5N4 Practice Questions (Page 1)

Part of the Troubleshoot TLS security settings domain, which makes up ~18% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

Questions 1–5

1foundation · easy
A certificate is issued for the hostname 'www.example.com'. A user accesses 'example.com' and receives a hostname mismatch warning. What is the most likely cause?
Select an answer first
2foundation · easy
What does an Online Certificate Status Protocol (OCSP) response indicate?
Select an answer first
3application · medium
An NGINX server hosts multiple virtual hosts. Users accessing https://app1.example.com receive a certificate warning, but users accessing https://app2.example.com do not. Both certificates are issued by the same CA and are not expired. What is the most likely cause?
Select an answer first
4application · easy
An NGINX server suddenly starts returning TLS handshake failures for all clients. The certificate was working yesterday. An administrator runs `openssl x509 -in /etc/nginx/ssl/server.crt -noout -dates` and sees `notAfter=Apr 1 12:00:00 2024 GMT`. The current date is April 2, 2024. What should the administrator do to resolve the issue?
Select an answer first
5application · medium
An administrator is troubleshooting an NGINX server that returns a certificate error. The certificate file is located at /etc/nginx/ssl/server.crt, and the key is at /etc/nginx/ssl/server.key. The administrator runs `nginx -t` and receives an error about the certificate. Which command should be used to verify that the certificate and key match?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N4

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N4” is a trademark of its owner, used for identification only.

Describe How to Troubleshoot Invalid Certificates F5N4 Practice Questions (Page 1)

Questions 1–5

A certificate is issued for the hostname 'www.example.com'. A user accesses 'example.com' and receives a hostname mismatch warning. What is the most likely cause?

What does an Online Certificate Status Protocol (OCSP) response indicate?

An NGINX server hosts multiple virtual hosts. Users accessing https://app1.example.com receive a certificate warning, but users accessing https://app2.example.com do not. Both certificates are issued by the same CA and are not expired. What is the most likely cause?

Keep studying — Troubleshoot TLS security settings