Okta Okta Certifications OKTA-CERTIFIED-ADMINISTRATOR Questions & Answers

• Question 101:

  In order for SAML to work, there is a need of an IDP and an SP and we know that already, but why is it so? Because:

  Solution: An SP sends SAML assertions, while the IDP receives and validates them

  A. Yes

  B. No

  Correct Answer: B

• Question 102:

  When using Okta Expression Language, which of the following will have the output: okta.com

  Solution: String.substringAfter("[email protected]", "@")

  A. Yes

  B. No

  Correct Answer: A

• Question 103:

  Regarding policies, Okta recommends:

  Solution: Include a final catch-all rule that denies access to anything that does not match any of the preceding rules

  A. Yes

  B. No

  Correct Answer: A

• Question 104:

  After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

  Solution: The statement is true

  A. Yes

  B. No

  Correct Answer: A

• Question 105:

  Okta has a json representation of objects such as 'users', json schema interchanged on API calls, as an example, but what about the format of information regarding of a user going to a SCIM server for creating the user in an On Premises application?

  Solution: Format is different: xml

  A. Yes

  B. No

  Correct Answer: B

• Question 106:

  What does SCIM stand for?

  Solution: System for CRSF-domain Identity Management

  A. Yes

  B. No

  Correct Answer: B

• Question 107:

  Can you map the Okta user ID as an Office 365 Immutable ID?

  Solution: Not possible and not intended to be possible as it cannot work like this

  A. Yes

  B. No

  Correct Answer: B

• Question 108:

  Does Okta require an Agent to sit in-between Okta to SCIM-enabled app on premises requests?

  Solution: Yes, and AD Agent

  A. Yes

  B. No

  Correct Answer: B

• Question 109:

  When a user's Okta password is changed:

  Solution: All apps that are Provisioning-enabled and have Update Attributes option active under Provisioning settings - will begin to sync the password in respective apps, as password is an attribute of their profile - but only if JIT Provisioning is enabled as well as it has to be a just-in-time action, the moment the user resets the password

  A. Yes

  B. No

  Correct Answer: B

• Question 110:

  When a user signs out of Okta, if they are using IWA, they'll be redirected to the Sign In page and without inputting credentials they'll be signed back in

  Solution: Statement is true, but then they'll be displayed a 403 HTTP code (Forbidden)

  A. Yes

  B. No

  Correct Answer: B