Discuss Ping Identity PAP-001 Exam Topic 5 Question 17

An application is hosted on a server that requires clients to authenticate using a username:password pair. This application is behind PingAccess, which is acting as a gateway. What action should the administrator take to allow PingAccess to access the application?

AApply an Identity Mapping that includes the username and password

BApply a valid Web Session that contains the username and password

CConfigure a Basic Authentication Site Authenticator to the Site

DConfigure a Mutual TLS Site Authenticator to the Site

Suggested Answer: C

When a back-end site requires HTTP Basic Authentication, PingAccess supports this via a Basic Authentication Site Authenticator. The authenticator is configured with credentials so that PingAccess can successfully authenticate to the target site.

Exact Extract:

''PingAccess can authenticate to target sites using a Site Authenticator. Use the Basic Authentication Site Authenticator when the site requires a username and password.''

Option A is incorrect --- identity mappings are used to forward user attributes, not for site-to-site authentication.

Option B is incorrect --- web sessions represent end-user sessions, not back-end credentials.

Option C is correct --- the Basic Authentication Site Authenticator should be configured on the Site.

Option D is incorrect --- mTLS authenticates with certificates, not username/password.

Get Premium PAP-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Susana 17 days ago

I see your point. C does sound safer.

Pamella 23 days ago

Exactly, C ensures the app gets accessed properly.

Jill 28 days ago

Flexibility is good, but we need reliability first.

Susana 1 month ago

I just feel A might add more flexibility.

Pamella 1 month ago

Yeah, C is the standard for basic setups.

Jill 1 month ago

True, but C is more common for this scenario.

Susana 2 months ago

But what about A? Identity Mapping could work too.

Pamella 2 months ago

I agree, C seems right. Simple to set up.

Jill 2 months ago

I think it's C. Basic Auth is straightforward.

Adaline 2 months ago

Wait, can PingAccess even handle Basic Auth? That’s surprising!

Marva 2 months ago

I’ve used Identity Mapping before, but not sure if it fits here.

Winfred 2 months ago

Isn't it risky to expose username and password like that?

Derick 3 months ago

I disagree, Mutual TLS sounds more secure.

Jesse 3 months ago

I think option C is the way to go. Basic Auth is pretty standard.

Ivan 3 months ago

I don't think Mutual TLS is necessary for this situation since we're dealing with username and password authentication, but I could be wrong.

Vanna 3 months ago

I'm a bit confused about whether we should use a Web Session or an Identity Mapping. They both seem relevant, but I can't recall the specifics.

Theron 3 months ago

I remember practicing a similar question where we had to configure authentication, and I think a Basic Authentication Site Authenticator could be the right choice here.

Jesusita 4 months ago

I think we might need to apply an Identity Mapping, but I'm not entirely sure if that's the right approach for this scenario.

Ping Identity PAP-001 Exam - Topic 5 Question 17 Discussion