Which two options can be changed in the run.properties file? (Choose 2 answers.)
Answer(s): C,E
The run.properties file in PingAccess is the primary configuration file that defines system-level runtime behavior. According to PingAccess documentation:Exact Extract:"The run.properties file contains configuration properties for PingAccess, including operational mode, logging levels, admin authentication fallback, cluster settings, and system defaults." (PingAccess Administrator's Guide run.properties Reference) From this, we can determine:C . Operational mode for PingAccess CorrectThe property pa.operational.mode in run.properties defines whether the node operates as STANDALONE, CLUSTERED_CONSOLE, CLUSTERED_CONSOLE_REPLICA, or CLUSTERED_ENGINE. This is one of the core configurable options.E . Logging levels CorrectProperties such as log.level and other logging configurations are explicitly defined in run.properties, allowing administrators to adjust the verbosity of logs (DEBUG, INFO, WARN, ERROR).Why the others are incorrect:A . Default logs location IncorrectThe log file path is not controlled via run.properties. It is defined in log4j2.xml, not in run.properties.B . URL for heartbeat endpoint IncorrectThe heartbeat endpoint (/pa/heartbeat.ping) is a fixed system endpoint and is not configurable in run.properties.D . X-Frame-Options header IncorrectSecurity headers like X-Frame-Options are managed under application security policies or global response headers, not in run.properties.
PingAccess Administrator's Guide run.properties Reference (section describing pa.operational.mode and logging configuration properties).
An administrator needs to support SLO (Single Logout) for a protected web application. What must be configured in a PingAccess Web Session in this situation?
Answer(s): A
To enable Single Logout (SLO), the SLO scope must be defined in the PingAccess Web Session configuration. This determines which sessions are ended when a logout request occurs.Exact Extract:"The SLO scope option in a web session specifies which applications are included in a logout event when Single Logout is triggered."Option A (SLO scope) is correct; it explicitly enables SLO support by linking session termination across apps.Option B (Idle timeout) is unrelated; this controls session expiration, not SLO. Option C (Validate Session) ensures session state is synchronized but does not configure SLO. Option D (Refresh User Attributes) is unrelated; it only controls whether attributes are reloaded.
PingAccess Administration Guide Configuring Web Sessions
According to a new business requirement, critical applications require dual-factor authentication when specific resources are accessed in those applications. Which configuration object should the administrator use in the applications?
Answer(s): C
PingAccess enforces step-up or multi-factor authentication using Authentication Requirements, which can be applied to specific resources within an application.Exact Extract:"Authentication requirements allow administrators to configure additional authentication (for example, MFA) when accessing sensitive application resources." Option A (UI Authentication) applies to access to the admin console, not application resources. Option B (Auth Token Management) relates to OAuth token lifetimes and refresh, not MFA enforcement.Option C (Authentication Requirements) is correct -- these rules enforce MFA or step-up auth for specific URLs/resources.Option D (Authentication Challenge Policy) governs how failed auth challenges are presented but does not enforce MFA.
PingAccess Administration Guide Authentication Requirements
During a business review of an application, the administrator needs to change the Resource Authentication to anonymous. What are the two effects of making this change to the resource? (Choose 2 answers.)
Answer(s): B,C
When a resource is configured as anonymous, PingAccess does not challenge the user for authentication. However, certain processing and identity propagation still occur.Exact Extract:"Anonymous resources do not require authentication. Identity mappings and request/response processing rules still apply."Option A is incorrect because rules such as identity mappings and processing still apply. Option B is correct -- Identity Mappings can still forward attributes, even for anonymous access. Option C is correct -- Processing rules (e.g., request/response modifications) still apply. Option D is incorrect -- requests are logged; anonymous does not disable logging. Option E is incorrect -- access control rules (authorization) are not evaluated for anonymous resources.
PingAccess Administration Guide Resource Authentication
An administrator is integrating a new PingAccess Proxied Application. The application will use an SSL certificate issued by a publicly trusted Certificate Authority. PingAccess is terminating SSL and is responsible for loading the SSL certificate for that application. What initial action must the administrator take in PingAccess in this situation?
Answer(s): D
For PingAccess to terminate SSL for a proxied application, it requires access to the private key and certificate chain. These are stored as Key Pairs.Exact Extract:"For SSL termination, you must import the server certificate and its private key as a PKCS#12 file into Key Pairs."Option A is incorrect -- a public key alone cannot terminate SSL. Option B is incorrect -- PKCS#12 files must go into Key Pairs, not Certificates. Option C is incorrect -- public keys alone are insufficient; PingAccess must have the private key.Option D is correct -- the PKCS#12 file with full chain and private key is imported into Key Pairs.
PingAccess Administration Guide Managing Certificates and Key Pairs
An administrator needs to prevent PingAccess from automatically starting on a Windows Server.Which command would accomplish this task?
Answer(s): B
PingAccess installs as a Windows service. To remove or prevent automatic startup, the uninstall- service.bat script is used.Exact Extract:"On Windows, use install-service.bat to install PingAccess as a service and uninstall-service.bat to remove the service."Option A (init.bat) initializes environment variables but does not manage services. Option B (uninstall-service.bat) is correct -- it removes the Windows service, preventing auto-start. Option C (remove-install.bat) is not a valid PingAccess script. Option D (wrapper-service.bat) configures wrapper options, not service removal.
PingAccess Installation Guide Windows Service Scripts
A protected web application requires that additional attributes be provided once the user is authenticated. Which two steps must the administrator perform to meet this requirement? (Choose 2 answers.)
Answer(s): B,E
When applications require additional attributes:The Web Session must be configured to retrieve those attributes from the token provider (OIDC or PingFederate).The Identity Mapping must be updated to forward those attributes to the application (e.g., as headers).Exact Extract:"Web sessions define how user attributes are retrieved from the token provider. Identity mappings determine how those attributes are inserted into requests to applications." Option A is not necessarily required; attributes can be retrieved via userinfo endpoint or access token, not only ID tokens.Option B is correct -- Identity Mappings must be updated to pass attributes to the app. Option C is incorrect -- Site Authenticators define how PingAccess authenticates to apps, not attribute handling.Option D is incorrect unless the architecture specifically requires access token updates; PingAccess often uses the Web Session to fetch attributes.Option E is correct -- Web Session must be updated to retrieve additional attributes.
PingAccess Administration Guide Web Sessions and Identity Mapping
A modified application now requires additional attributes to be passed in the headers. What needs to be modified in order to pass the additional attributes?
To pass user attributes into HTTP headers for applications, PingAccess uses Identity Mappings. When attributes need to be passed specifically as headers, the administrator must update the Header Identity Mapping.Exact Extract:"Header identity mappings map attributes from a user's web session to HTTP headers that are then sent to the back-end application."Option A (HTTP Request Header Rule) is incorrect -- this adds or modifies static request headers, not user attributes.Option B (Header Identity Mapping) is correct -- this maps identity attributes into headers dynamically.Option C (JWT Identity Mapping) is incorrect -- that's used for passing attributes as claims in JWTs. Option D (Web Session Attribute Rule) is incorrect -- that is for access control evaluation, not propagation of attributes.
PingAccess Administration Guide Identity Mapping (Header Identity Mapping)
Share your comments for Ping Identity PAP-001 exam with other users:
just started preparing for my exam , and this site is so much help
question 35 is incorrect, the correct answer is c, it even states so: explanation: when a vm is infected with ransomware, you should not restore the vm to the infected vm. this is because the ransomware will still be present on the vm, and it will encrypt the files again. you should also not restore the vm to any vm within the companys subscription. this is because the ransomware could spread to other vms in the subscription. the best way to restore a vm that is infected with ransomware is to restore it to a new azure vm. this will ensure that the ransomware is not present on the new vm.
i would like to take psm1 exam.
cbd and pdb are key to the database
the purchase and download process is very much streamlined. the xengine application is very nice and user-friendly but there is always room for improvement.
please upload p_sapea_2023
anyone use this? the question dont seem to follow other formats and terminology i have been studying im getting worried
good questions
hello are these questions valid for ms-102
some questions are wrongly answered but its good nonetheless
how to get system serial number using intune
is it really helpful to pass the exam
#229 in incorrect - all the customers require an annual review
kindy upload
fantastic assessment on psm 1
56 question correct answer a,b
thank you for providing the q bank
true quesstions
i can´t believe ms asks things like this, seems to be only marketing material.
hi, could you please add the last update of ns0-527
question #3 refers to vnet4 and vnet5. however, there is no vnet5 listed in the case study (testlet 2).
sometimes it may be good some times it may be
qs 4 answer seems wrong- please check
very detailed explanation !
the interactive nature of the test engine application makes the preparation process less boring.
very useful.
complete question dump should be made available for practice.
i just passed my first exam. i got 2 exam dumps as part of the 50% sale. my second exam is under work. once i write that exam i report my result. but so far i am confident.
nice create dewey stefen
i just wrote this exam and it is still valid. the questions are exactly the same but there are about 4 or 5 questions that are answered incorrectly. so watch out for those. best of luck with your exam.
passed my exam today. this is a good start to 2023.
great sharing
very helpful
thanks.. very helpful