Ping Identity PAP-001 Exam - Topic 5 Question 10 Discussion

PingAccess allows fine-grained authentication enforcement by applying Authentication Requirement rules at the resource level. These rules can invoke MFA flows based on request context or policy.

Exact Extract:

''Authentication requirement rules determine whether PingAccess challenges a user to authenticate again (for example, with MFA) before allowing access to a protected resource.''

Option A is incomplete. Creating a requirement does nothing unless it is applied.

Option B is correct because applying the Authentication Requirement rule to the specific resource (URL) enforces MFA only for that resource.

Option C is incorrect; Web Session Attribute rules are about evaluating existing session attributes, not triggering MFA.

Option D is incorrect; HTTP Request Parameter rules are used to evaluate request data, not enforce MFA policies.