Okta Okta Certifications OKTA-CERTIFIED-ADMINISTRATOR Questions & Answers

• Question 111:

  When does Okta bring LDAP groups into Okta? Solution: Only during an LDAP import

  A. Yes

  B. No

  Correct Answer: B

• Question 112:

  Whenever you make an API call, you will then get back: Solution: A new object (a user, group or app object)

  A. Yes

  B. No

  Correct Answer: B

• Question 113:

  The SCIM protocol is for provisioning and managing identity data on the web.

  Solution: An application-level TLS protocol A. Yes

  B. No

  Correct Answer: B

• Question 114:

  Can you map the Okta user ID as an Office 365 Immutable ID?

  Solution: Not possible, as Office 365 requires an Immutable ID extracted from either On- Prem AD or Azure AD

  A. Yes

  B. No

  Correct Answer: B

• Question 115:

  When does Okta bring LDAP groups into Okta? Solution: Only during LDAP JIT

  A. Yes

  B. No

  Correct Answer: B

• Question 116:

  After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

  Solution: You have nothing to do and even the rule is by default set to "Active"

  A. Yes

  B. No

  Correct Answer: B

• Question 117:

  In Okta's KB articles the set of functions under the 'Provisioning' concept are referred to as CRUD. This is a concept you also meet when referring to CRUD APIs. What about its meaning here, in Okta's vision?

  Solution: In 'Provisioning', CRUD stands for Create, Read, Upload, Deprovision

  A. Yes

  B. No

  Correct Answer: B

• Question 118:

  Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.

  Solution: Both statements are true

  A. Yes

  B. No

  Correct Answer: A

• Question 119:

  In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.

  Solution: The statement is valid, but Okta is not the one doing decryption - the browser is doing that

  A. Yes

  B. No

  Correct Answer: B

• Question 120:

  Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.

  Solution: Only the second statement is true

  A. Yes

  B. No

  Correct Answer: B