Activate a narrow nginx admin listener

$ sudo nginx -t syntax is ok test is successful $ sudo systemctl reload nginx $ sudo ss -lntp | grep ':8186' <no output> $ getenforce Enforcing $ sudo tail -n 1 /var/log/nginx/error.log bind() to 127.0.0.1:8186 failed (13: Permission denied) $ sudo semanage port -l | grep http_port_t http_port_t tcp 80, 443, 8080 $ sudo semanage port -l | grep -w 8186 <no output>

Request	Required result
/	302 to https://admin.northwind.test/admin
/login and /login/totp	Proxy to the admin application
/admin and /admin/...	Proxy to the admin application
/games/	nginx 404

Request

Required result

302 to https://admin.northwind.test/admin

/login and /login/totp

Proxy to the admin application

/admin and /admin/...

Proxy to the admin application

/games/

nginx 404

single choice

Which diagnosis best fits all listener evidence?

3 pts

SELinux does not currently permit the nginx domain to bind TCP 8186 An nginx syntax error prevented the configuration from loading A missing firewalld rule prevents nginx from creating a local socket Public DNS cannot resolve the admin hostname

Need a hint?

Restate the exact outcome or failure the prompt asks about before comparing choices.

Show another hint

Eliminate choices that solve a nearby problem, change more than requested, or do not fit the evidence.

command

Enter the command that adds TCP 8186 to the SELinux HTTP port type. Do not disable enforcing mode.

4 pts

$ sudo

Whitespace and capitalization are ignored when grading.

Need a hint?

Break the request into three parts: the action, the target, and the required constraint or verification.

Show another hint

Check the tool and subcommand first, then add only the flags, values, and paths the prompt requires.

matching

Match each request to the required nginx action.

5 pts

GET / → GET /login → POST /login/totp → GET /admin/education → GET /games/ →

Need a hint?

Start with the row and choice that have the most distinctive purpose, then use that pair to narrow the rest.

Show another hint

For each remaining pair, explain the relationship in one sentence before selecting it.

multi select

Select the FOUR checks or choices that complete this listener safely.

4 pts

Confirm nginx listens only on 127.0.0.1:8186 Test an allowed path locally with the expected Host header Test an unrelated path and require nginx 404 Verify the root redirect uses the public HTTPS hostname without `:8186` Open 8186 to the LAN in firewalld Leave SELinux permissive after the socket appears

Need a hint?

Evaluate each option independently against the scenario evidence instead of treating the list as one decision.

Show another hint

Choose only options that directly satisfy the prompt; being generally true is not enough.

Activate a narrow nginx admin listener

Preview · not independently reviewed

Inspect the evidence

Listener checks

Required path behavior

Complete the response

Which diagnosis best fits all listener evidence?

Enter the command that adds TCP 8186 to the SELinux HTTP port type. Do not disable enforcing mode.

Match each request to the required nginx action.

Select the FOUR checks or choices that complete this listener safely.

Review your result

Attempt history

Question or answer look wrong?