NO.16 In which OAuth2 grant would you find a user code?

NO.17 In PingAM, which OpenID Connect endpoint can be used to validate an unencrypted ID token?

NO.18 A PingAM administrator wants to deny access to an area of a protected application if the end user has been logged in for more than 10 minutes. How can this be achieved?

NO.19 A SAML2 identity provider (IdP) is configured in a subrealm. Which of the following URLs can be used to export the IdP metadata?

NO.20 Which PingAM feature only uses the PingAM keystore?

NO.21 Which authentication node checks and validates a recovery code used during a multi-factor authentication challenge sequence?

NO.22 Which multi-factor authentication methods require a separate device and an application?

NO.23 Which audit event handler is used by PingAM by default, when audit logging is enabled?

NO.24 In an authentication tree process, considering best practice, where can the collected context data for mobile devices be persisted for subsequent risk analysis?

NO.25 When the OATH Registration node’s OATH Algorithm property is set to TOTP in an authentication tree, which node needs to have the same value set?

NO.26 Which organization sets, maintains, and governs the SAML2 standard?

NO.27 Which area of PingAM does affinity mode relate to?

NO.28 Which organization sets, maintains, and governs the SAML2 standard?

NO.29 When a user undergoes a session upgrade, what is the outcome?

NO.30 When developing a PingAM may act script for OAuth2 token exchange patterns, which variables are made available for use in the script?

NO.31 Why should module-based authentication be disabled in production?

NO.32 In a PingAM cluster, how is the debug level set?

NO.33 Which of the following needs to be configured in order to use social authentication in PingAM?

NO.34 Which OpenID Connect grant flow is best to use when the relying party knows the user’s identifier and wishes to gain consent for an operation from the user by means of a separate authentication device?

NO.35 A non-authenticated user requests a resource protected by PingGateway or a Web Agent. Put the following events of the authentication lifecycle in chronological order:
User answers the “questions asked” (callbacks) by PingAM.
User tries to access a resource protected by PingGateway or a Web Agent.
Session reaches a timeout value or user logs out.
PingGateway or the Web Agent validates the session.
User is redirected to the authentication user interface of PingAM.
User is redirected to the resource.

NO.36 In a default PingAM configuration, what type of keystore stores the secret ID named storepass, which contains the encrypted password of the default-keystore secret store?