Free Ping Identity PT-AM-CPE Practice Test & Real Exam Questions

Exam Code/Number: PT-AM-CPE
Exam Name/Title: Certified Professional - PingAM Exam
Certification Provider: Ping Identity
Corresponding Certification: Ping Identity Certifications

Exam Questions: 102
Updated On: Sep 12, 2026

Question #1

Which is the correct simplified TLS handshake sequence needed to authenticate clients using a mutual TLS exchange?

A. 1. Client sends a request to a server to establish a secure connection
2. The server requests the client certificate
3. The client sends its certificate and the session key to the server
4. The server sends its certificate to the client if the client certificate and key are valid
5. The mutually secure connection is established and the client is authenticated

B. 1. Client sends a certificate in the request to a server to establish a secure connection
2. The client sends its session key to the server
3. The server presents its certificate in a response to the client
4. The mutually secure connection is established and the client is authenticated

C. 1. Client sends a request to a server to establish a secure connection
2. The server presents its certificate in a response to the client
3. The client sends its certificate to the server
4. The mutually secure connection is established and the client is authenticated

D. 1. Client sends a request to a server to establish a secure connection
2. The client sends its certificate to the server
3. The server presents its certificate in a response to the client
4. The client sends its session key to the server
5. The mutually secure connection is established and the client is authenticated

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #2

What is the purpose of the SAML2 account mapper on the service provider (SP) side?

A. Maps multiple identity provider assertions together

B. Maps local user attributes to remote users' attributes

C. Maps remote users to local user profiles

D. Maps multiple SP user accounts together

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #3

Which OAuth2 flow is most appropriate to support the use case of a client application implemented in a browser using a scripted language such as JavaScript?

A. Authorization code grant flow with PKCE

B. Client credentials grant flow

C. Implicit grant flow

D. Resource owner grant flow

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #4

When a user undergoes a session upgrade, what is the outcome?

A. The session properties are copied to a new session, and a new session token is handed to the client

B. A new session is created, and the original session is deleted

C. The session is updated with new properties, but the session token remains the same

D. A new session is created, and the original session properties are not copied

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #5

Consider the following LDAP connection string:
DS1.example.com:389|01, DS2.example.com:389|01, DS2.example.com:389|02, DS1.example.com:389|02 This connection string can be used in:
A . Identity Store
B . Core Token Service
C . Configuration Data Store
Which of the above options are correct?

A. A, B, and C are correct

B. Only B is correct

C. Only A is correct

D. Only C is correct

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #6

Which of the following needs to be configured in order to use social authentication in PingAM?

A. An OAuth2 client

B. A realm policy

C. A data store

D. A realm service

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #7

What happens when an end user accesses the following login page: .../XUI/?ForceAuth=true#login?

A. Even if the end user is already authenticated, they will be redirected to the login page

B. Nothing. ForceAuth is not a parameter that PingAM knows how to process

C. A screen is presented to the end user suggesting they enable second factor authentication

D. The end user will be presented with second factor authentication

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #8

What is the Default Failure Login URL?

A. It is the default URL of the page that displays authentication error messages

B. It is the URL value that is populated automatically when adding a Failure URL node to a tree

C. It is the default value of the gotoOnFail parameter

D. It is the URL where users are redirected by default in case of failed authentication

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #9

Which set of Directory Server stores can be enabled for affinity in a PingAM cluster configuration?

A. Core Token Service Store, Identity Stores, Configuration Store, Policy Data Store

B. Core Token Service Store, Identity Stores, Configuration Store, Application Data Store

C. Identity Store, Configuration Store, Policy Data Store, Application Data Store

D. Core Token Service Store, Identity Store, Policy Data Store, Application Data Store

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #10

What is the purpose of HTTP-only cookies?

A. Cookies can only be transmitted over HTTPS

B. Cookies can not be read by client-side scripts

C. Cookies can only be transmitted over HTTP

D. Cookies can not be read by the server

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free Ping Identity PT-AM-CPE Demo

Simply submit your e-mail address below to get started with our free demo of your Ping Identity PT-AM-CPE exam.