Harden the payments TLS boundary
A hands-on SY0-701 lab. You produce the real artefact and 8 automated checks verify it behaves the way the exam expects.
Try this labAll SY0-701 practice
- Certification
- SY0-701
- Format
- Artifact workspace
- Difficulty
- medium
- Estimated time
- 15 min
- Automated checks
- 8
The brief
Update nginx.conf so port 80 permanently redirects with 301 to https://$host$request_uri. On the HTTPS server, allow only TLSv1.2 and TLSv1.3, keep HIGH ciphers while excluding aNULL, MD5, and 3DES, and add Strict-Transport-Security with max-age=31536000; includeSubDomains and always. Set server_tokens off in the http block. Preserve payments.example.com, the payments_backend route, and the supplied certificate paths.
Part of SY0-701 preparation
Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.