Ping Identity PAP-001 Exam - Topic 3 Question 12 Discussion

Actual exam question for Ping Identity's PAP-001 exam

Question #: 12
Topic #: 3

A company uses an internally based legacy PKI solution that does not adhere to the Certification Path Validation section of RFC-5280. Which configuration option needs to be enabled when creating Trusted Certificate Groups in PingAccess?

AUse Java Trust Store

BValidate disordered certificate chains

CSkip Certificate Date Check

DDeny when unable to determine revocation status

Show Suggested Answer

Suggested Answer: B

Legacy PKIs often provide certificate chains that are out of order or non-compliant with RFC-5280 path validation. PingAccess provides an option in Trusted Certificate Groups called Validate disordered certificate chains to allow chaining even if the order is not RFC-5280 compliant.

Exact Extract:

''Enable Validate disordered certificate chains when the certificate chain is not in RFC-5280 compliant order but should still be accepted.''

Option A is incorrect; using the Java trust store is unrelated to PKI ordering.

Option B is correct --- this setting allows PingAccess to process disordered certificate chains.

Option C is incorrect; date checks are unrelated to RFC-5280 path ordering.

Option D is incorrect; revocation status handling does not address legacy PKI ordering issues.

by Keshia at Apr 04, 2026, 06:52 AM

Limited Time Offer

25%

Off

Get Premium PAP-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dalene

4 days ago

I feel like skipping the certificate date check could lead to security risks, so it probably isn't the right option.

upvoted 0 times

...

Wayne

9 days ago

I'm not entirely sure, but I remember something about the Java Trust Store being important for legacy systems. Maybe that's the answer?

upvoted 0 times

...

Kara

14 days ago

I think the option about validating disordered certificate chains might be the right choice since the legacy PKI could have issues with the order of certificates.

upvoted 0 times

...