PAP-001問題集、Ping Identity実際の試験問題

質問 1

An administrator is integrating a new PingAccess Proxied Application. The application will temporarily need a self-signed certificate during the POC/demo phase. PingAccess is terminating SSL and is responsible for loading the SSL certificate for the application.
What initial action must the administrator take in PingAccess in this situation?

A. Go to the Certificates section and create a new certificate

B. Go to the Key Pairs section and import the PKCS#12 file provided by the publicly trusted Certificate Authority

C. Go to the Key Pairs section and create a new certificate

D. Go to the Key Pairs section and import the PKCS#12 file provided by the customer's internal Certificate Authority

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

An administrator needs to support SLO (Single Logout) for a protected web application. What must be configured in a PingAccess Web Session in this situation?

A. SLO scope

B. Idle timeout

C. Validate Session

D. Refresh User Attributes

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

An administrator is integrating a new PingAccess Proxied Application. The target site uses a certificate issued by an internal Certificate Authority hosted by the customer. Prior to assigning the certificate group in the Site configuration, which action should the administrator take to configure PingAccess to trust the certificate?

A. Import the certificate chain into Key Pairs and assign it to a new engine listener.

B. Configure the PingAccess Site to use the Java Trust Store Certificate Group.

C. Import the certificate chain and add it to the Trusted Certificate Group.

D. Import the certificate chain into Key Pairs and add it to the Trusted Certificate Group.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which elements can be updated in run.properties to prevent PingAccess from blocking large headers or large requests?

A. pa.default.maxConnectionsPerSite, pa.default.maxRequestBodySize

B. pa.default.limitRequestLine, pa.default.maxRequestBodySize

C. pa.default.maxHttpHeaderSize, pa.default.limitRequestLine, pa.default.maxRequestBodySize

D. pa.default.maxHttpHeaderSize, pa.default.maxHeaderCount, pa.default.limitRequestLine

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

An administrator must protect an application on multiple domains or hosts. What should the administrator configure to complete this action?

A. Redirects

B. Sites

C. Virtual Hosts

D. Rules

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

An API is hosted onsite and is using only header-based Identity Mapping. It is exposed to all clients running on the corporate network. How should the administrator prevent a malicious actor from bypassing PingAccess and spoofing the headers to gain unauthorized access to the API?

A. Use Target Host Header

B. Use ID Tokens

C. Add Site Authenticator

D. Require HTTPS

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

How many administrators are supported using HTTP Basic Authentication in the Administrative Console?

A. 100

B. 1000

C. 1

D. 10

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

All style sheets should be accessible to all users without authentication across all applications. Which configuration option should the administrator use?

A. Define a Protocol Source for the resource.

B. Define Global Unprotected Resources for the resource.

C. Define Authentication Challenge Policy of none for the resource.

D. Define a Default Availability Profile of on-demand for the resource.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 9

A company uses an internally based legacy PKI solution that does not adhere to the Certification Path Validation section of RFC-5280. Which configuration option needs to be enabled when creating Trusted Certificate Groups in PingAccess?

A. Use Java Trust Store

B. Deny when unable to determine revocation status

C. Validate disordered certificate chains

D. Skip Certificate Date Check

正解: C

解説: (PassTest メンバーにのみ表示されます)

Ping Identity Certified Professional - PingAccess - PAP-001 模擬練習