According to a new business requirement, critical applications require dual-factor authentication when specific resources are accessed in those applications. Which configuration object should the administrator use in the applications?
Answer(s): C
PingAccess enforces step-up or multi-factor authentication using Authentication Requirements, which can be applied to specific resources within an application.Exact Extract:"Authentication requirements allow administrators to configure additional authentication (for example, MFA) when accessing sensitive application resources." Option A (UI Authentication) applies to access to the admin console, not application resources. Option B (Auth Token Management) relates to OAuth token lifetimes and refresh, not MFA enforcement.Option C (Authentication Requirements) is correct -- these rules enforce MFA or step-up auth for specific URLs/resources.Option D (Authentication Challenge Policy) governs how failed auth challenges are presented but does not enforce MFA.
PingAccess Administration Guide Authentication Requirements
During a business review of an application, the administrator needs to change the Resource Authentication to anonymous. What are the two effects of making this change to the resource? (Choose 2 answers.)
Answer(s): B,C
When a resource is configured as anonymous, PingAccess does not challenge the user for authentication. However, certain processing and identity propagation still occur.Exact Extract:"Anonymous resources do not require authentication. Identity mappings and request/response processing rules still apply."Option A is incorrect because rules such as identity mappings and processing still apply. Option B is correct -- Identity Mappings can still forward attributes, even for anonymous access. Option C is correct -- Processing rules (e.g., request/response modifications) still apply. Option D is incorrect -- requests are logged; anonymous does not disable logging. Option E is incorrect -- access control rules (authorization) are not evaluated for anonymous resources.
PingAccess Administration Guide Resource Authentication
An administrator is integrating a new PingAccess Proxied Application. The application will use an SSL certificate issued by a publicly trusted Certificate Authority. PingAccess is terminating SSL and is responsible for loading the SSL certificate for that application. What initial action must the administrator take in PingAccess in this situation?
Answer(s): D
For PingAccess to terminate SSL for a proxied application, it requires access to the private key and certificate chain. These are stored as Key Pairs.Exact Extract:"For SSL termination, you must import the server certificate and its private key as a PKCS#12 file into Key Pairs."Option A is incorrect -- a public key alone cannot terminate SSL. Option B is incorrect -- PKCS#12 files must go into Key Pairs, not Certificates. Option C is incorrect -- public keys alone are insufficient; PingAccess must have the private key.Option D is correct -- the PKCS#12 file with full chain and private key is imported into Key Pairs.
PingAccess Administration Guide Managing Certificates and Key Pairs
An administrator needs to prevent PingAccess from automatically starting on a Windows Server.Which command would accomplish this task?
Answer(s): B
PingAccess installs as a Windows service. To remove or prevent automatic startup, the uninstall- service.bat script is used.Exact Extract:"On Windows, use install-service.bat to install PingAccess as a service and uninstall-service.bat to remove the service."Option A (init.bat) initializes environment variables but does not manage services. Option B (uninstall-service.bat) is correct -- it removes the Windows service, preventing auto-start. Option C (remove-install.bat) is not a valid PingAccess script. Option D (wrapper-service.bat) configures wrapper options, not service removal.
PingAccess Installation Guide Windows Service Scripts
A protected web application requires that additional attributes be provided once the user is authenticated. Which two steps must the administrator perform to meet this requirement? (Choose 2 answers.)
Answer(s): B,E
When applications require additional attributes:The Web Session must be configured to retrieve those attributes from the token provider (OIDC or PingFederate).The Identity Mapping must be updated to forward those attributes to the application (e.g., as headers).Exact Extract:"Web sessions define how user attributes are retrieved from the token provider. Identity mappings determine how those attributes are inserted into requests to applications." Option A is not necessarily required; attributes can be retrieved via userinfo endpoint or access token, not only ID tokens.Option B is correct -- Identity Mappings must be updated to pass attributes to the app. Option C is incorrect -- Site Authenticators define how PingAccess authenticates to apps, not attribute handling.Option D is incorrect unless the architecture specifically requires access token updates; PingAccess often uses the Web Session to fetch attributes.Option E is correct -- Web Session must be updated to retrieve additional attributes.
PingAccess Administration Guide Web Sessions and Identity Mapping
Post your Comments and Discuss Ping Identity PAP-001 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PAP-001 content, but please register or login to continue.