Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

PAP-001 Certified Professional - PingAccess

  • Ping Identity
  • 5 free sample questions

About this exam

PAP-001 is the Ping Identity exam Certified Professional - PingAccess. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
PAP-001
Vendor
Ping Identity
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for PAP-001.

Question 1

An administrator needs to configure a signed JWT identity mapping for an application that expects to be able to validate the signature. Which endpoint does the application need to access to validate the signature?

  1. Option A:

    /pa/authtoken/JWKS

  2. Option B:

    /pa-admin-api/v3/identityMappinga/descriptora/jwtidentitymapping

  3. Option C:

    /pa/aidc/cb

  4. Option D:

    /pa-admin-api/v3/authTokenManagement

Show answer and explanation

Correct answer: A

Applications consuming signed JWTs need the JSON Web Key Set (JWKS) endpoint to retrieve the public keys used for validating JWT signatures. PingAccess exposes this at /pa/authtoken/JWKS .

Exact Extract:

“When using JWT identity mapping, applications can obtain the signing keys from the /pa/authtoken/JWKS endpoint to validate the JWT signature.”

    Option A is correct — /pa/authtoken/JWKS provides the key set for signature validation.

    Option B is incorrect — that’s an administrative API for configuring identity mappings, not a runtime validation endpoint.

    Option C is incorrect — /pa/aidc/cb is the OIDC callback endpoint.

    Option D is incorrect — /pa-admin-api/v3/authTokenManagement is for admin token management, not JWT validation.

[Reference:PingAccess Administration Guide –JWT Identity Mapping, ]

Question 2

An administrator needs to configure an application that uses a backend web server that has its own authentication mechanism. Which type of object must be configured for PingAccess to provide access to the target server?

  1. Option A:

    Token Provider

  2. Option B:

    Web Session

  3. Option C:

    Site Authenticator

  4. Option D:

    Access Control Rule

Show answer and explanation

Correct answer: C

When a backend application requires its own authentication (e.g., Basic Auth or mutual TLS), PingAccess uses a Site Authenticator to inject the necessary credentials.

Exact Extract:

“Site Authenticators provide the credentials PingAccess uses when authenticating to target applications that require their own authentication mechanisms.”

    Option A (Token Provider) is incorrect — this is used for OIDC/OAuth tokens, not site-level authentication.

    Option B (Web Session) manages end-user sessions, not backend site authentication.

    Option C (Site Authenticator) is correct — it handles authentication between PingAccess and the backend.

    Option D (Access Control Rule) enforces authorization, not backend authentication.

[Reference:PingAccess Administration Guide –Site Authenticators, ]
See all 5 free sample questions