NO.20 An API is hosted onsite and is using only header-based Identity Mapping. It is exposed to all clients running on the corporate network. How should the administrator prevent a malicious actor from bypassing PingAccess and spoofing the headers to gain unauthorized access to the API?

NO.21 All access requests to the existing/adminresource must be captured in the audit log. How should this be accomplished?

NO.22 What is the purpose of thepa.operational.modeconfiguration setting?

NO.23 Developers report an issue with an application that is protected by PingAccess. Certain requests are not providing claims that are part of the access token.
What should the administrator add for the access token claims?

NO.24 An administrator is integrating a new PingAccess Proxied Application. The target site uses a certificate issued by an internal Certificate Authority hosted by the customer. Prior to assigning the certificate group in the Site configuration, which action should the administrator take to configure PingAccess to trust the certificate?

NO.25 An administrator needs to use attributes that are not currently available in theIdentity Mapping Attribute Namedropdown. Which action should the administrator take?

NO.26 A modified application now requires additional attributes to be passed in the headers. What needs to be modified in order to pass the additional attributes?

NO.27 A company has removed the requirement to record back-channel requests from PingAccess to PingFederate in the audit log.
Where should the administrator update this behavior without affecting existing applications?

NO.28 An administrator is integrating a new PingAccess Proxied Application. The application will use an SSL certificate issued by a publicly trusted Certificate Authority. PingAccess is terminating SSL and is responsible for loading the SSL certificate for that application. What initial action must the administrator take in PingAccess in this situation?

NO.29 An administrator needs to reduce the number of archive backups that are maintained in thedata/archivefolder.
Which file does the administrator need to modify to make this change?

NO.30 An administrator needs to add a set of rules to an application protected by a PingAccess agent. Which rule will be unavailable to add to the application?

NO.31 An organization wants to take advantage of a new product feature that requires upgrading the PingAccess cluster from 7.3 to the current version. The administrator downloads the required files and places the files on the PingAccess servers. What should the administrator do next?

NO.32 An administrator needs to configure an application that uses a backend web server that has its own authentication mechanism. Which type of object must be configured for PingAccess to provide access to the target server?

NO.33 All style sheets should be accessible to all users without authentication across all applications. Which configuration option should the administrator use?

NO.34 Where in the administrative console should an administrator make user attributes available as HTTP request headers?

NO.35 A department has a requirement to protect anything in its application that resides in a folder named
“escalated,” no matter where that folder is in the path. Which path prefix should be used in this situation?

NO.36 How many administrators are supported using HTTP Basic Authentication in the Administrative Console?

NO.37 Which of the following is a processing rule?

NO.38 A financial application should be prompted for step-up authentication on a URL that allows money transfers.
A previous administrator configured rules to be applied on the required application URL. Users are not prompted for step-up authentication when accessing the/sranafemmeneyURL endpoint.
Which two actions should the administrator take? (Choose 2 answers.)