Okta Okta Certifications OKTA-CERTIFIED-ADMINISTRATOR Questions & Answers

• Question 91:

  In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active Solution: It might be seamless for the user, but the redirect is happening

  A. Yes

  B. No

  Correct Answer: A

• Question 92:

  Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using: Solution: The OAuth 2.0 standard

  A. Yes

  B. No

  Correct Answer: B

• Question 93:

  As an Okta best-practice / recommendation: Okta encourages you to switch from Integrated Windows Authentication (IWA or DSSO) to agentless Desktop Single Sign-on (ADSSO). Okta is no longer adding new IWA functionality and offers only limited support and bug fixes.

  Solution: Only the first statement is true

  A. Yes

  B. No

  Correct Answer: B

• Question 94:

  In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.

  Solution: The statement is entirely valid

  A. Yes

  B. No

  Correct Answer: A

• Question 95:

  When you are trying to federate (via WS-FED) Office 365 with Okta:

  Solution: You can try to federate multiple Office 365 custom domains into a single Okta Office 365 app instance via SWA SSO protocol

  A. Yes

  B. No

  Correct Answer: B

• Question 96:

  Once brought into Okta, LDAP roles are represented as: Solution: Licences

  A. Yes

  B. No

  Correct Answer: B

• Question 97:

  Once brought into Okta, LDAP roles are represented as: Solution: Groups

  A. Yes

  B. No

  Correct Answer: A

• Question 98:

  If you want to remove an attribute's value in Okta, for example a value coming from AD that is not useful in any way, you have to:

  Solution: Intentionally map a blank value to that specific attribute in the user profile

  A. Yes

  B. No

  Correct Answer: A

• Question 99:

  In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active

  Solution: It will always redirect to Okta and in this case only - will promt the user for re- authentication by manually entering Okta credentials

  A. Yes

  B. No

  Correct Answer: B

• Question 100:

  When does Okta bring LDAP groups into Okta? Solution: During both LDAP import and JIT

  A. Yes

  B. No

  Correct Answer: A