Ping Identity PT-AM-CPE Certification Exam Dumps with 102 Practice Test Questions [Q15-Q38]

Rate this post

Ping Identity PT-AM-CPE Certification Exam Dumps with 102 Practice Test Questions

New PT-AM-CPE Exam Dumps with High Passing Rate

Ping Identity PT-AM-CPE Exam Syllabus Topics:

Topic	Details
Topic 1	Enhancing Intelligent Access: This domain covers implementing authentication mechanisms, using PingGateway to protect websites, and establishing access control policies for resources.
Topic 2	Federating Across Entities Using SAML2: This domain covers implementing single sign-on using SAML v2.0 and delegating authentication responsibilities between SAML2 entities.
Topic 3	Improving Access Management Security: This domain focuses on strengthening authentication security, implementing context-aware authentication experiences, and establishing continuous risk monitoring throughout user sessions.
Topic 4	Extending Services Using OAuth2-Based Protocols: This domain addresses integrating applications with OAuth 2.0 and OpenID Connect, securing OAuth2 clients with mutual TLS and proof-of-possession, transforming OAuth2 tokens, and implementing social authentication.
Topic 5	Installing and Deploying AM: This domain encompasses installing and upgrading PingAM, hardening security configurations, setting up clustered environments, and deploying PingOne Advanced Identity Platform to the cloud.

NEW QUESTION 15
In order to support rollback in case of a failed PingAM upgrade in a two server PingDS environment, what PingDS safety measure can be configured?

Keep both PingDS instances active, upgrade against both PingDS instances, and use the PingDS ./uninstall.sh backout script if required

A PingAM upgrade in a two server PingDS environment does not support rollback

Stop replication between the two PingDS servers, stop a PingDS instance, upgrade against the active PingDS instance, and simply start up the shutdown PingDS instance

Stop replication between the two PingDS servers, stop a PingDS instance, upgrade against the active PingDS instance, and use the shutdown instance in case of rollback

NEW QUESTION 16
What should be configured in PingAM if you are using an LDAP directory service that does not support persistent search?

Enable user data caching, which will have a negative impact on performance

Enable user data caching, which will have a positive impact on performance

Disable user data caching, which will have a positive impact on performance

Disable user data caching, which will have a negative impact on performance

NEW QUESTION 17
The Core Token Service (CTS) can be used for storing which of the following?

Configuration

Users

Kerberos tokens

OAuth2 tokens

NEW QUESTION 18
To ensure the user’s full name is displayed on the consent screen for an OpenID Connect application, which string should be added into the Support Claims property on the OpenID Connect tab page of the OAuth2 Provider service in PingAM?

name|en|Full name

Full name|en|name

full_name|Full name

name|en|given_name+’ ‘+family_name

NEW QUESTION 19
Which of the following approaches can be used to configure a basic installation of PingAM?

Either the graphical user interface in a browser, or a command-line program

The graphical user interface in a browser

There is no basic configuration needed

A command-line program

NEW QUESTION 20
What is a SAML2 artifact?

The SAML2 assertion

The SAML2 binding name

The name of a specific attribute in the assertion

A value sent by the service provider to retrieve the assertion

NEW QUESTION 21
Which of the following would be a possible combination of fields in the JSON body when making a policy evaluation via REST?

resources, subject, advices

resources, subject, application

resources, application, advices

subject, application, advices

NEW QUESTION 22
Which OAuth2 flow is most appropriate to support the use case of a client application implemented in a browser using a scripted language such as JavaScript?

Authorization code grant flow with PKCE

Implicit grant flow

Resource owner grant flow

Client credentials grant flow

NEW QUESTION 23
In PingAM, which OpenID Connect endpoint can be used to validate an unencrypted ID token?

/oauth2/idtokeninfo

/oauth2/userinfo

/oauth2/introspect

/oauth2/tokeninfo

NEW QUESTION 24
Which of the following are existing script types in PingAM?
A) Decision node script for authentication trees
B) End User user interface theme script
C) OpenID Connect claims script
D) Policy condition script

A, B and C

A, B and D

B, C and D

A, C and D

NEW QUESTION 25
Which of the following multi-factor authentication protocols are supported by PingAM?
A) Open authentication
B) Security questions
C) Web authentication
D) Universal 2nd factor authentication
E) Push authentication

B, C, and D

A, B, and E

A, C, and E

A, B, and C

NEW QUESTION 26
Which area of PingAM does affinity mode relate to?

Authentication

Load balancing

Self-service

Authorization

NEW QUESTION 27
Sam wants to start a service provider-initiated single sign-on and redirect to their own application, myapp.com. Which of the following URLs is the correct one to perform this action?

http://sso.domain.com/openam/saml2/jsp/idpSSOInit.jsp&RelayState=http%3A%2F%2Fmyapp.com

http://sso.domain.com/openam/saml2/jsp/idpSSOInit.jsp&goto=http%3A%2F%2Fmyapp.com

http://sso.domain.com/openam/saml2/jsp/spSSOInit.jsp&goto=http%3A%2F%2Fmyapp.com

http://sso.domain.com/openam/saml2/jsp/spSSOInit.jsp&RelayState=http%3A%2F%2Fmyapp.com

NEW QUESTION 28
When a user undergoes a session upgrade, what is the outcome?

A new session is created, and the original session is deleted

The session properties are copied to a new session, and a new session token is handed to the client

The session is updated with new properties, but the session token remains the same

A new session is created, and the original session properties are not copied

NEW QUESTION 29
Which of the following code examples inserts a may_act claim to the resulting token in a PingAM implementation?

var mayAct = /* is a JSON object with may act property data */ token.addMayAct(mayAct)

var mayAct = /* is a JSON object with may act property data */ requestedToken.addMayAct(mayAct)

var mayAct = /* is a JSON object with may act property data */ requestedToken.setMayAct(mayAct)

var mayAct = /* is a JSON object with may act property data */ token.setMayAct(mayAct)

NEW QUESTION 30
Which of the following best represents the information that is typically contained in the debug output?

The component that created the debug entry, A header with the time and date, The running thread ID, The debug level, A general message, Optional stack trace

The component that created the debug entry, A header with the time and date, The debug level, A general message, Optional stack trace

The component that created the debug entry, A header with the time and date, The running thread ID, A general message, Optional stack trace

A header with the time and date, The running thread ID, The debug level, A general message, Optional stack trace

NEW QUESTION 31
Charlotte wants to query all the authentication tree configuration details in the alpha realm using an Amster command.7 After connecting to the PingAM instance in Amster, which command should Charlotte enter?

query AuthenticationTree –realm /alpha –query all

query AuthenticationTree –realm /alpha –filter true

query AuthTree –realm /alpha –filter true

query AuthTree –realm /alpha –query all

NEW QUESTION 32
What are the possible outcomes of the Push Result Verifier node?

Success, Failure, Waiting, Retry

Success, Failure, Expired, Retry

Success, Failure, Expired, Waiting

Success, Failure, Expired, Waiting, Retry

NEW QUESTION 33
The OAuth2 authorize endpoint supports the CSRF parameter. What is CSRF?

Cross Script Response Feature

Cross Site Request Forgery

Cross System Rest Federation

NEW QUESTION 34
In a default PingAM configuration, what type of keystore stores the secret ID named storepass, which contains the encrypted password of the default-keystore secret store?

Keystore secret store

Environment and system property secret store

Filesystem secret store

Hardware Security Module secret store

NEW QUESTION 35
Which of the following actions can be specified in a policy by default?

HEAD

INSERT

CREATE

UPDATE

NEW QUESTION 36
If the session cookie is configured as a domain based cookie for the am.example.com domain, in which of the following domains is the cookie visible?
A . example.com
B . am.example.com
C . sub.am.example.com
D . login.am.example.com

B only

A and B

B and C

B and D

NEW QUESTION 37
Which PingAM feature only uses the PingAM keystore?

Client-side sessions

Persistent Cookie node

Authentication trees

OAuth2 providers

NEW QUESTION 38
What is the purpose of HTTP-only cookies?

Cookies can not be read by client-side scripts

Cookies can only be transmitted over HTTPS

Cookies can not be read by the server

Cookies can only be transmitted over HTTP

Get PT-AM-CPE Braindumps & PT-AM-CPE Real Exam Questions: https://www.testbraindump.com/PT-AM-CPE-exam-prep.html

Ping Identity PT-AM-CPE Exam Syllabus Topics:

Leave a Reply Cancel reply