Ping Identity PAP-001 問題集

質問 1：
According to a new business requirement, critical applications require dual-factor authentication when specific resources are accessed in those applications. Which configuration object should the administrator use in the applications?
A. Authentication Requirements
B. Authentication Challenge Policy
C. Auth Token Management
D. UI Authentication
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An organization has a highly available PingAccess cluster with four runtime nodes. The administrator wants to provide the same availability to administrative users. What should the administrator do?
A. Configure four active administrative nodes with engine cluster pointed to all administrative nodes for configuration
B. Configure two active administrative nodes with engine cluster pointed to both administrative nodes for configuration
C. Configure one active and three replica administrative nodes with engine cluster pointed to all administrative nodes
D. Configure one active and one replica administrative node with engine cluster pointed to both administrative nodes
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An administrator is integrating a new PingAccess Proxied Application. The target site uses a certificate issued by an internal Certificate Authority hosted by the customer. Prior to assigning the certificate group in the Site configuration, which action should the administrator take to configure PingAccess to trust the certificate?
A. Import the certificate chain into Key Pairs and assign it to a new engine listener.
B. Configure the PingAccess Site to use the Java Trust Store Certificate Group.
C. Import the certificate chain into Key Pairs and add it to the Trusted Certificate Group.
D. Import the certificate chain and add it to the Trusted Certificate Group.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
An organization wants to take advantage of a new product feature that requires upgrading the PingAccess cluster from 7.3 to the current version. The administrator downloads the required files and places the files on the PingAccess servers. What should the administrator do next?
A. Disable Key Rolling.
B. Upgrade the Admin Console.
C. Disable cluster communication.
D. Upgrade the Replica Admin.
正解：B

質問 5：
An auto parts company wants to protect the path/parts/suspension/struts/manufacturer. Resources appear under an applicationContext Root of/partswith default ordering.
Which resource will the policy engine select?
A. /suspension/struts/manufacturer
B. //manufacturer
C. ///manufacturer
D. //struts/manufacturer
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An application requires MFA for URLs that are considered high risk. Which action should the administrator take to meet this requirement?
A. Apply an Authentication Requirements rule to the resource.
B. Apply an HTTP Request Parameter rule to the resource.
C. Create an Authentication Requirement named MFA_Required.
D. Apply a Web Session Attribute rule to the resource.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
An API is hosted onsite and is using only header-based Identity Mapping. It is exposed to all clients running on the corporate network. How should the administrator prevent a malicious actor from bypassing PingAccess and spoofing the headers to gain unauthorized access to the API?
A. Require HTTPS
B. Add Site Authenticator
C. Use ID Tokens
D. Use Target Host Header
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A business application must be accessible via two FQDNs. Which PingAccess functionality should an administrator use to meet this requirement?
A. Applications
B. Sites
C. Virtual Hosts
D. Web Sessions
正解：C
解説: (Topexam メンバーにのみ表示されます)