Okta Level 2: Administrator OKTA-CERTIFIED-ADMINISTRATOR Questions & Answers

• Question 1:

  With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)?

  Solution: 3 months

  A. Yes

  B. No

  Correct Answer: A

• Question 2:

  With agentless DSSO (Desktop Single Sign-on), you still have a need of deploying IWA Agents in your Active Directory domains to implement DSSO functionality.

  Solution: The statement is true, as agentless DSSO means no AD agents, not no IWA agents

  A. Yes

  B. No

  Correct Answer: B

• Question 3:

  After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

  Solution: The statement is partially true, as the networking information is already added within this rule

  A. Yes

  B. No

  Correct Answer: B

• Question 4:

  Whenever you make an API call, you will then get back: Solution: Response headers

  A. Yes

  B. No

  Correct Answer: A

• Question 5:

  Regarding policies, Okta recommends:

  Solution: To have one policy rule per application, as more will most probably alter the behavior too much and you may miss important behaviors

  A. Yes

  B. No

  Correct Answer: B

• Question 6:

  Does Okta require an Agent to sit in-between Okta to SCIM-enabled app on premises requests? Solution: Yes, an Okta Application Integration Agent

  A. Yes

  B. No

  Correct Answer: B

• Question 7:

  In order for SAML to work, there is a need of an IDP and an SP and we know that already, but why is it so? Because:

  Solution: An IDP authorizes the users, while the SP authenticates them

  A. Yes

  B. No

  Correct Answer: B

• Question 8:

  Which of the following is / are true?

  Solution: If an MFA factor is set to 'required' and another MFA factor set to 'optional', then users can enroll into both factors and then can use either of them for successful logins

  A. Yes

  B. No

  Correct Answer: A

• Question 9:

  There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

  Solution: Yes, if you map those attributes from AD to Okta and then Okta to App, as an example

  A. Yes

  B. No

  Correct Answer: A

• Question 10:

  Whenever you make an API call, you will then get back: Solution: Okta events under '/events' endpoint

  A. Yes

  B. No

  Correct Answer: B