A business requires logs to be written to a centralized Oracle database. Which two actions must the PingAccess administrator take to enable this? (Choose 2 answers.)
Answer(s): A,D
PingAccess supports logging directly to a relational database using Log4j database appenders. To enable this:Configure log4j2.xml to use a JDBC Appender.Configure log4j2.db.properties with the database connection information. Provide the appropriate database driver in the PA_HOME/lib directory.Exact Extract:"To log to a database, configure log4j2.xml and log4j2.db.properties, and place the JDBC driver JAR file in PA_HOME/lib."Option A is correct -- both files must be configured.Option B is incorrect -- existing logs do not need removal. Option C is incorrect -- enabling audit is unrelated to database logging. Option D is correct -- the Oracle JDBC driver must be installed in PA_HOME/lib.Option E is incorrect unless TLS is used to connect to the DB, but it is not required for standard DB logging setup.
PingAccess Administration Guide Log Configuration
An administrator is integrating a new PingAccess Proxied Application. The target site uses a certificate issued by an internal Certificate Authority hosted by the customer. Prior to assigning the certificate group in the Site configuration, which action should the administrator take to configure PingAccess to trust the certificate?
Answer(s): D
PingAccess must trust the back-end site's certificate to establish TLS. For internally issued certificates, the administrator imports the certificate chain into a Trusted Certificate Group.Exact Extract:"When a target site uses an internal CA, import the certificate or chain into a Trusted Certificate Group and assign that group to the site."Option A is incorrect -- the Java trust store does not contain the internal CA by default. Option B is incorrect -- Key Pairs store private keys for SSL termination, not trusted CA certs. Option C is incorrect -- engine listeners use key pairs for inbound SSL, not site trust. Option D is correct -- the certificate must be imported into Trusted Certificate Groups.
PingAccess Administration Guide Trusted Certificate Groups
A business application must be accessible via two FQDNs. Which PingAccess functionality should an administrator use to meet this requirement?
Answer(s): A
Virtual Hosts in PingAccess define the external FQDNs (and ports) through which applications are accessed. An application can be bound to multiple virtual hosts to allow access via multiple FQDNs.Exact Extract:"A virtual host specifies the fully qualified domain name and port number through which an application is accessed."Option A (Virtual Hosts) is correct -- multiple FQDNs can be supported by assigning multiple virtual hosts.Option B (Applications) define resource protection but do not manage FQDN binding. Option C (Sites) define back-end targets, not the public-facing FQDN. Option D (Web Sessions) handle authentication state, unrelated to hostnames.
PingAccess Administration Guide Virtual Hosts
An application owner would like customized errors for rule violations within an application. Where is this configured?
Answer(s): B
PingAccess allows administrators to configure custom error pages or messages at the Root Resource level of an application. This ensures that when rule violations (e.g., authorization failures) occur, the application can display tailored error responses.Exact Extract:"Custom error handling for rule violations is configured within the Root Resource of an application." Option A is incorrect -- assigning a rule to a resource does not allow defining custom errors. Option B is correct -- the Root Resource is where administrators define custom error handling for the entire application.Option C is incorrect -- Rule Sets only combine rules; they do not handle error responses.Option D is incorrect -- individual rule definitions do not contain custom error configurations.
PingAccess Administration Guide Configuring Application Resources and Error Handling
An administrator must protect an application on multiple domains or hosts. What should the administrator configure to complete this action?
Applications in PingAccess can be associated with multiple Virtual Hosts. Each virtual host defines an FQDN and port combination through which the application is exposed, allowing protection across multiple domains or hostnames.Exact Extract:"Virtual hosts specify the fully qualified domain names (FQDNs) and ports that PingAccess uses to expose applications."Option A (Sites) represent the target back-end servers, not the external FQDN. Option B (Virtual Hosts) is correct -- use multiple virtual hosts for multiple domains. Option C (Redirects) are unrelated to multi-domain application protection. Option D (Rules) define access policies, not hostnames.
Post your Comments and Discuss Ping Identity PAP-001 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PAP-001 content, but please register or login to continue.