Get Special Discount Offer of PAP-001 Certification Exam Sample Questions and Answers [Q30-Q46]

4/5 - (1 vote)

Get Special Discount Offer of PAP-001 Certification Exam Sample Questions and Answers

New PAP-001 Dumps For Preparing Ping Identity PingAccess Certified Ping Identity Exam Well

Q30. Which two protocols does PingAccess use for authentication and authorization? (Choose 2 answers.)

SAML

WS-Fed

WS-Trust

OAuth2

OIDC

Q31. An administrator is setting up a new PingAccess cluster with the following:
* Administrative node hostname: pa-admin.company.com
* Replica administrative node hostname: pa-admin2.company.com
Which two options in the certificate would be valid for the administrative node key pair? (Choose 2.)

Issuer = pa-admin.company.com

Subject = *.company.com

Subject = pa-admin.company.com

Subject Alternative Names = pa-admin.company.com, pa-admin2.company.com

Subject = pa-admin2.company.com

Q32. Which element in thelog4j2.xmlfile must be modified to change the log level in PingAccess?

AsyncLogger

RollingFile

Logger

Appenders

Q33. What is the purpose of theengine.ssl.protocolsin therun.propertiesfile?

To configure the supported ciphers

To configure the supported HTTPS port

To configure the supported TLS versions

To configure SSL protocols used for clustering

Q34. Where should an administrator adjustSameSite Cookiesettings?

Rules

Sites

Applications

Web Sessions

Q35. A PingAccess administrator needs to configure PingAccess to validate tokens. Which two options can the administrator use? (Choose 2 answers)

PingFederate

Kerberos

Common SAML provider

Common OIDC provider

PingAuthorize

Q36. An administrator needs to configure a protected web application using theAuthorization Codelogin flow.
Which two configuration parameters must be set? (Choose 2 answers.)

OAuth Token Introspection Endpoint

OAuth Client ID

OpenID Connect Issuer

Virtual Host

OpenID Connect Login Type

Q37. An administrator needs to support SLO (Single Logout) for a protected web application. What must be configured in a PingAccess Web Session in this situation?

SLO scope

Idle timeout

Validate Session

Refresh User Attributes

Q38. An administrator needs to add a set of rules to an application protected by a PingAccess agent. Which rule will be unavailable to add to the application?

Rewrite Cookie Domain

Network Range

Rate Limiting

Cross-Origin Request

Q39. An administrator configures the following:
* HTTP Request Parameter Rule for”can_read=yes”
* Web Session Attribute Rule forOpt-in = yes
* Web Session Attribute Rule forgroup = customerService
* Rule SetA(ALL) # includes (HTTP Request Parameter Rule)
* Rule SetB(ANY) # includes (Opt-in yes, group customerService)
* Rule Set GroupC(ALL) # includes (Rule Set A, Rule Set B)Assigned to the web application.
Which set of conditions must be met to be able to access the application?

The request requires a parameter called can_read with a value of yes. Additionally, the authenticated user must be in customer service and have the opt-in attribute set to yes.

The request requires a parameter called can_read with a value of yes unless the authenticated user is in either customer service or has the opt-in attribute set to yes.

The request requires a parameter called can_read with a value of yes unless the authenticated user is in customer service and the opt-in attribute set to yes.

The request requires a parameter called can_read with a value of yes. The authenticated usermust be either in customer service or have the opt-in attribute set to yes.

Q40. A PingAccess API deployment requires multiple Access Token Managers to maintain compliance with customer requirements. Which feature must be set on the Token Provider configuration?

Subject Attribute Name

Send Audience

Use Token Introspection Endpoint

Client Secret

Q41. Refer to the following applications:
* hr.company.com
* finance.company.com
* customer.order.company.com
Which action should be taken to allow these applications to share the same web session?

Set Audience option

Set Cookie Domain option

Use Rewrite Cookie Domain rule

Use Rewrite Cookie Path rule

Q42. A company uses an internally based legacy PKI solution that does not adhere to theCertification Path Validationsection of RFC-5280. Which configuration option needs to be enabled when creating Trusted Certificate Groups in PingAccess?

Use Java Trust Store

Validate disordered certificate chains

Skip Certificate Date Check

Deny when unable to determine revocation status

Q43. Developers report an issue with an application that is protected by PingAccess. Certain requests are not providing claims that are part of the access token.
What should the administrator add for the access token claims?

An authentication requirement definition

A web session attribute rule

An identity mapping definition

An OAuth attribute rule

Q44. An administrator needs to use attributes that are not currently available in theIdentity Mapping Attribute Namedropdown. Which action should the administrator take?

Request that the additional attributes be added by the token provider administrator

Create a Rewrite Content rule for the additional attributes

Request that the additional attributes be added by the web developer

Create a Web Session Attribute rule for the additional attributes

Q45. An organization wants to take advantage of a new product feature that requires upgrading the PingAccess cluster from 7.3 to the current version. The administrator downloads the required files and places the files on the PingAccess servers. What should the administrator do next?

Disable cluster communication.

Disable Key Rolling.

Upgrade the Admin Console.

Upgrade the Replica Admin.

Q46. Users report the following about access to an application:
* Inconsistent behavior depending on the browser used
* Denied access
* Prompt to accept a security exception
Which configuration option should the administrator adjust?

Enable PKCE

SameSite Cookie

Request Preservation

Validate Session

Ping Identity PAP-001 Exam Syllabus Topics:

Topic	Details
Topic 1	Installation and Initial Configuration: This section of the exam measures skills of System Engineers and reviews installation prerequisites, methods of installing or removing PingAccess, and securing configuration database passwords. It explains the role of run.properties entries and outlines how to set up a basic on-premise PingAccess cluster.
Topic 2	Integrations: This section of the exam measures skills of System Engineers and explains how PingAccess integrates with token providers, OAuth and OpenID Connect configurations, and site authenticators. It also includes the use of agents and securing web, API, and combined applications through appropriate integration settings.
Topic 3	General Maintenance and File System: This section of the exam measures the skills of System Engineers and addresses maintenance tasks such as license management, backups, configuration imports or exports, auditing, and product upgrades. It also includes the purpose of log files and an overview of the PingAccess file system structure with important configuration files.
Topic 4	Product Overview: This section of the exam measures skills of Security Administrators and focuses on understanding PingAccess features, functionality, and its primary use cases. It also covers how PingAccess integrates with other Ping products to support secure access management solutions.
Topic 5	Policies and Rules: This section of the exam measures the skills of Security Administrators and focuses on how PingAccess evaluates paths for applying policies and resources. It covers the role of different rule types, their configuration, and the implementation of rule sets and rule set groups for consistent policy enforcement.
Topic 6	General Configuration: This section of the exam measures skills of Security Administrators and introduces the different object types within PingAccess such as applications, virtual hosts, and web sessions. It explains managing application resource properties, creating web sessions, configuring identity mappings, and navigating the administrative console effectively.