PAP-001 Exam Practice Questions prepared by Ping Identity Professionals [Q48-Q64]

Rate this post

PAP-001 Exam Practice Questions prepared by Ping Identity Professionals

Use Valid New PAP-001 Questions – Top choice Help You Gain Success

Ping Identity PAP-001 Exam Syllabus Topics:

Topic	Details
Topic 1	Policies and Rules: This section of the exam measures the skills of Security Administrators and focuses on how PingAccess evaluates paths for applying policies and resources. It covers the role of different rule types, their configuration, and the implementation of rule sets and rule set groups for consistent policy enforcement.
Topic 2	General Maintenance and File System: This section of the exam measures the skills of System Engineers and addresses maintenance tasks such as license management, backups, configuration imports or exports, auditing, and product upgrades. It also includes the purpose of log files and an overview of the PingAccess file system structure with important configuration files.
Topic 3	Installation and Initial Configuration: This section of the exam measures skills of System Engineers and reviews installation prerequisites, methods of installing or removing PingAccess, and securing configuration database passwords. It explains the role of run.properties entries and outlines how to set up a basic on-premise PingAccess cluster.
Topic 4	Security: This section of the exam measures skills of Security Administrators and highlights how to manage certificates and certificate groups. It covers the association of certificates with virtual hosts or listeners and the use of administrator roles for authentication management.
Topic 5	General Configuration: This section of the exam measures skills of Security Administrators and introduces the different object types within PingAccess such as applications, virtual hosts, and web sessions. It explains managing application resource properties, creating web sessions, configuring identity mappings, and navigating the administrative console effectively.

Q48. An administrator must protect a configuration by changing the default key. Which script can be used to meet this goal?

db-passwd-rotate.bat

memoryoptions.bat

run.bat

obfuscate.bat

Q49. Which two variables should be set in order for the PingAccess service script to start? (Choose 2 answers.)

J2EE_HOME

JAVA_HOME

PA_PATH

PA_HOME

JAVA_PATH

Q50. An organization has a highly available PingAccess cluster with four runtime nodes. The administrator wants to provide the same availability to administrative users. What should the administrator do?

Configure one active and one replica administrative node with engine cluster pointed to both administrative nodes

Configure four active administrative nodes with engine cluster pointed to all administrative nodes for configuration

Configure two active administrative nodes with engine cluster pointed to both administrative nodes for configuration

Configure one active and three replica administrative nodes with engine cluster pointed to all administrative nodes

Q51. A financial application should be prompted for step-up authentication on a URL that allows money transfers.
A previous administrator configured rules to be applied on the required application URL. Users are not prompted for step-up authentication when accessing the/sranafemmeneyURL endpoint.
Which two actions should the administrator take? (Choose 2 answers.)

Verify that a rejection handler rule exists and is applied to the application to see if a user has met the required authentication context

Verify that an authentication requirement rule is applied to the application to see if a user has met the required authentication context

Make sure that the existing rule’s authentication requirements contain the appropriate minimum authentication requirements

Create a new identity mapping containing authentication context values and add the mapping to the existing rule

Make sure that the existing rule’s token validation contains the appropriate minimum authentication requirements

Q52. PingAccess will terminate SSL for multiple proxied applications that share thecustomer.comURL domain.
The administrator needs different ways to minimize the number of SSL certificates to manage these user- facing applications.
What are two ways this requirement can be met? (Choose 2 answers.)

Assign unique Key Pairs to each Virtual Host

Assign a wildcard certificate to the Engine Listener

Assign a Subject Alternative Name Certificate to the Engine Listener

Assign a Subject Alternative Name Certificate to the Agent Listener

Assign a wildcard certificate to the Agent Listener

Q53. An administrator must protect an application on multiple domains or hosts. What should the administrator configure to complete this action?

Sites

Virtual Hosts

Redirects

Rules

Q54. An administrator is integrating a new PingAccess Proxied Application for which the target site uses a certificate issued by a publicly trusted Certificate Authority.
How should the administrator configure PingAccess to trust the target site?

Import the certificate chain into Key Pairs and add it to a Trusted Certificate Group

Configure the PingAccess Site to use the Java Trust Store Certificate Group

Import the certificate chain into Key Pairs

Drop the certificate chain into a Trusted Certificate Group

Q55. An organization wants to take advantage of a new product feature that requires upgrading the PingAccess cluster from 7.3 to the current version. The administrator downloads the required files and places the files on the PingAccess servers. What should the administrator do next?

Upgrade the Admin Console.

Disable cluster communication.

Disable Key Rolling.

Upgrade the Replica Admin.

Q56. A company uses an internally based legacy PKI solution that does not adhere to theCertification Path Validationsection of RFC-5280. Which configuration option needs to be enabled when creating Trusted Certificate Groups in PingAccess?

Use Java Trust Store

Validate disordered certificate chains

Skip Certificate Date Check

Deny when unable to determine revocation status

Q57. The application team is requesting step-up authentication only for a few specific resources while maintaining previous authentication for other resources. What change would the administrator need to make?

Authentication Challenge Policy

Use context root as reserved resource base path

Change the Context Root

Manual Resource Ordering

Q58. An application requires MFA for URLs that are considered high risk. Which action should the administrator take to meet this requirement?

Create an Authentication Requirement named MFA_Required.

Apply an Authentication Requirements rule to the resource.

Apply a Web Session Attribute rule to the resource.

Apply an HTTP Request Parameter rule to the resource.

Q59. An organization has an application on a web server that needs protection. User traffic must be routed directly to the application for authentication.
Which component must be deployed to meet this requirement?

Site

Site Authenticator

Token Provider

Agent

Q60. What is the purpose of theadmin.authconfiguration setting?

To enable automatic authentication to the PingAccess administrative console.

To configure SSO for the administrative user interface.

To override the SSO configuration for the administrative user interface.

To define the method to use for authenticating to the administrative API.

Q61. What is the purpose of the pa.operational.mode configuration setting?

To determine if a server should participate in cluster replication

To determine the role the server performs in a cluster

To determine whether a server is a development or production server

To determine if a cluster node is enabled or disabled

Q62. A PingAccess administrator needs to configure PingAccess to validate tokens. Which two options can the administrator use? (Choose 2 answers)

PingFederate

Kerberos

Common SAML provider

Common OIDC provider

PingAuthorize

Q63. PingFederate is configured as the Token Provider in PingAccess. PingAccess also protects a large number of APIs for the company. The PingFederate administrator is concerned about the volume of requests coming from PingAccess.
Which OAuth Resource Server setting should be enabled to reduce the volume of requests coming from PingAccess?

Cache Tokens

Use Token Introspection Endpoint

DPoP

Send Audience

Q64. Users report the following about access to an application:
* Inconsistent behavior depending on the browser used
* Denied access
* Prompt to accept a security exception
Which configuration option should the administrator adjust?

Enable PKCE

SameSite Cookie

Request Preservation

Validate Session