To determine if a certificate is expired, what should you compare?

The certificate's public key with the current date.

The certificate's validity period with the current date.

The certificate's serial number with the current date.

The certificate's signature algorithm with the current date.

A company uses an internal certificate authority (CA) to issue certificates for its intranet applications. Users accessing https://intranet.corp.local receive a warning that the certificate is not trusted. The certificate is not expired and the hostname matches. What is the most likely cause?

The root CA certificate is not installed in the clients' trusted root store.

The certificate has been revoked by the internal CA.

The NGINX server is not configured to send the intermediate certificate.

The certificate's SAN does not include the IP address of the server.

An NGINX server was working with a valid certificate, but after a recent configuration change, clients now receive a 'certificate expired' error. The certificate file has not been replaced. Which NGINX configuration directive is most likely misconfigured?

ssl_protocols is set to an outdated version like TLSv1.

ssl_certificate points to an old certificate file that has expired.

A user receives a hostname mismatch error when accessing https://www.example.com. Which part of the certificate should be checked to diagnose this issue?

The certificate's Signature Algorithm

The certificate's Serial Number

The certificate's Subject Alternative Name (SAN) or Common Name (CN)

F5Certified Administrator NGINX - Troubleshooting

Domain 3Objective 2

Describe How to Troubleshoot Invalid Certificates F5N4 Practice Questions (Page 3)

Part of the Troubleshoot TLS security settings domain, which makes up ~18% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

Questions 11–15

11foundation · easy
To determine if a certificate is expired, what should you compare?
Select an answer first
12application · medium
A company uses an internal certificate authority (CA) to issue certificates for its intranet applications. Users accessing https://intranet.corp.local receive a warning that the certificate is not trusted. The certificate is not expired and the hostname matches. What is the most likely cause?
Select an answer first
13application · medium
An NGINX server was working with a valid certificate, but after a recent configuration change, clients now receive a 'certificate expired' error. The certificate file has not been replaced. Which NGINX configuration directive is most likely misconfigured?
Select an answer first
14foundation · easy
When reviewing NGINX TLS configuration, which directive is used to specify the private key file?
Select an answer first
15foundation · easy
A user receives a hostname mismatch error when accessing https://www.example.com. Which part of the certificate should be checked to diagnose this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5N4

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5N4” is a trademark of its owner, used for identification only.