Ping Identity PAP-001 Exam Dumps

When using HTTP Basic Authentication (admin.auth=native), PingAccess only supports a single administrative account (the default admin user). For multiple administrators, SSO integration (e.g., OIDC) is required.

Exact Extract:

''When admin authentication is set to native (HTTP Basic), only one administrative user is supported. For multiple admins, configure UI authentication with an OIDC provider.''

Option A (1000) is incorrect.

Option B (1) is correct --- only one basic auth admin account.

Option C (10) and Option D (100) are incorrect.

All onboarding in PingAccess begins with defining an Application. Once the application exists, the administrator can define Resources within it and assign different rules to those resources.

Exact Extract:

''Before you can configure resources and rules, you must first create an application in PingAccess.''

Option A (Identity Mapping) may be required later but not the first step.

Option B (Web Session) can be shared but is not the first onboarding step.

Option C (Application) is correct --- the starting point for onboarding.

Option D (Resource) comes after creating the application.

PingAccess retains backup archives of its configuration in the data/archive directory. The number of retained backups is controlled in the run.properties file.

Exact Extract:

''The number of configuration backups retained in the data/archive directory is controlled by the archive.maxCount property in run.properties.''

Option A (log4j2.db.properties) is incorrect; this file controls database logging, not archive retention.

Option B (jvm-memory.options) is incorrect; this file sets JVM heap and memory arguments.

Option C (run.properties) is correct --- it contains system-level settings including archive.maxCount.

Option D (log4j2.xml) is incorrect; this file configures log appenders and levels, not archive backups.

For PingAccess to terminate SSL for a proxied application, it requires access to the private key and certificate chain. These are stored as Key Pairs.

Exact Extract:

''For SSL termination, you must import the server certificate and its private key as a PKCS#12 file into Key Pairs.''

Option A is incorrect --- a public key alone cannot terminate SSL.

Option B is incorrect --- PKCS#12 files must go into Key Pairs, not Certificates.

Option C is incorrect --- public keys alone are insufficient; PingAccess must have the private key.

Option D is correct --- the PKCS#12 file with full chain and private key is imported into Key Pairs.

To enforce step-up authentication for selected resources, PingAccess uses Authentication Challenge Policies. These policies allow different challenge methods to be applied depending on the resource.

Exact Extract:

''Authentication challenge policies define how PingAccess challenges users for authentication and are often applied when step-up authentication is required for specific resources.''

Option A (Authentication Challenge Policy) is correct --- it ensures only certain resources trigger step-up MFA.

Option B is incorrect; the reserved resource base path is unrelated to authentication.

Option C is incorrect; changing the context root just changes the URL path prefix.

Option D is incorrect; manual ordering of resources is unrelated to enforcing MFA.