Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Certified Professional - PingAM Exam Practice Questions

Question # 1

Which OAuth2 flow is most appropriate to support the use case of a client application implemented in a browser using a scripted language such as JavaScript?

Options:

A.  

Authorization code grant flow with PKCE

B.  

Implicit grant flow

C.  

Resource owner grant flow

D.  

Client credentials grant flow

Discussion 0
Question # 2

In order to secure a PingAM deployment with an external configuration data store and user data store using server-side sessions, which of the following should be considered?

Options:

A.  

Changing the default iPlanetDirectoryPro cookie name, Using your own key for signing, Using a specific bind account for LDAP connections, Renaming and reducing the assigned privileges of the amAdmin account

B.  

Encrypting the iPlanetDirectoryPro cookie contents, Changing the default iPlanetDirectoryPro cookie name, Using your own key for signing, Using a specific bind account for LDAP connections

C.  

Changing the default iPlanetDirectoryPro cookie name, Using your own key for signing, Using a specific bind account for LDAP connections, Creation of a top-level administrator other than amAdmin

D.  

Changing the default iPlanetDirectoryPro cookie name, Using your own key for signing, Using a specific bind account for LDAP connections, Reducing the privileges of the amAdmin user in production

Discussion 0
Question # 3

What is the purpose of the SAML2 account mapper on the service provider (SP) side?

Options:

A.  

Maps multiple identity provider assertions together

B.  

Maps multiple SP user accounts together

C.  

Maps local user attributes to remote users' attributes

D.  

Maps remote users to local user profiles

Discussion 0
Question # 4

Which of the following components is used to return data to PingGateway or the agent to be included with the policy decision?

Options:

A.  

Subjects

B.  

Resources

C.  

Response attributes

D.  

Actions

Discussion 0
Question # 5

In a multi-server deployment, what is the impact of not ensuring stickiness in the load balancer configuration?

Options:

A.  

Session failover will not work

B.  

The browser will not be able to validate the user session with the correct PingAM server

C.  

The user will see more redirects in their browser

D.  

Performance may decrease as load on the system will be higher

Discussion 0
Question # 6

A multi-server PingAM deployment is scheduled for upgrade. What measure can be implemented to prevent external user access during this process?

Options:

A.  

Shut down the PingAM instances

B.  

Shut down the PingDS instances

C.  

Disable access from the firewall

D.  

Disable access from the load balancer

Discussion 0
Question # 7

Samantha decides to implement SAML2 auto-federation to link accounts on the service provider (SP) with the corresponding account in the identity provider (IdP). Which of the following statements describe characteristics of auto-federation?

A) Linking is based on a common NameId format value.

B) Linking is achieved by using a common attribute value.11

C) The user must log in to the IdP only to link accounts.

D) The user must log in to both the SP and the IdP to link accounts.

Answer Selection:

Options:

A.  

A and D

B.  

B and C

C.  

B and D

D.  

A and C

Discussion 0
Question # 8

What are the possible outcomes of the Push Result Verifier node?

Options:

A.  

Success, Failure, Waiting, Retry

B.  

Success, Failure, Expired, Retry

C.  

Success, Failure, Expired, Waiting

D.  

Success, Failure, Expired, Waiting, Retry

Discussion 0
Question # 9

The OAuth2 authorize endpoint supports the CSRF parameter. What is CSRF?

Options:

A.  

Cross Script Response Feature

B.  

Cross Site Request Forgery

C.  

Cross Site Request Forgery

D.  

Cross System Rest Federation

Discussion 0
Question # 10

Which of the following needs to be configured in order to use social authentication in PingAM?

Options:

A.  

A data store

B.  

A realm service

C.  

An OAuth2 client

D.  

A realm policy

Discussion 0

PT-AM-CPE PDF

PT-AM-CPE PDF (Printable)
$46.5
$154.99

PT-AM-CPE Testing Engine

PT-AM-CPE PDF (Printable)
$51
$169.99

PT-AM-CPE PDF + Testing Engine

PT-AM-CPE PDF (Printable)
$63.9
$212.99
Exams4sure Dumps

Exam style questions across every PT-AM-CPE domain

Last Update 1 day ago
Total Questions : 100

Start with our free PT-AM-CPE practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real PingAM exam. Each PT-AM-CPE exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Ping Identity weak domains, see where you're losing marks, and build a focused study plan in minutes.

Free Exams Sample Questions