Okta OKTA-CERTIFIED-ADMINISTRATOR Online Practice Questions and Exam Preparation

Okta OKTA-CERTIFIED-ADMINISTRATOR Online Questions & Answers

• Question 111:

  What does SCIM stand for?

  Solution: System for CRSF-domain Identity Management

  A. Yes
  B. No
  B. No

• Question 112:

  When a user's Okta password is changed:

  Solution: All apps that are Provisioning-enabled and have Update Attributes option active under Provisioning settings - will begin to sync the password in respective apps, as password is an attribute of their profile - but only if JIT Provisioning is enabled as well as it has to be a just-in-time action, the moment the user resets the password

  A. Yes
  B. No
  B. No

• Question 113:

  The SCIM protocol is for provisioning and managing identity data on the web. Solution: An application-level REST protocol

  A. Yes
  B. No
  A. Yes

• Question 114:

  As an Okta admin, when you implement IWA, you have to know how to successfully test it to see if it's working. For this you:

  Solution: Paste into a browser configured for DSSO the IWA redirect URL along with '/authenticated.aspx' after it, hit 'Enter' and check the message returned

  A. Yes
  B. No
  A. Yes

• Question 115:

  Does Okta require an Agent to sit in-between Okta to SCIM-enabled app on premises requests? Solution: Yes, and AD Agent

  A. Yes
  B. No
  B. No

• Question 116:

  Once brought into Okta, LDAP roles are represented as: Solution: Email lists

  A. Yes
  B. No
  B. No

• Question 117:

  When a user signs out of Okta, if they are using IWA, they'll be redirected to the Sign In page and without inputting credentials they'll be signed back in Solution: Statement is true

  A. Yes
  B. No
  A. Yes

• Question 118:

  Which of the following is / are true?

  Solution: If an MFA factor is set to 'required' and another MFA factor set to 'disabled', then users can choose between the two factors when enrolling, but then can use only the first one for successful logins

  A. Yes
  B. No
  B. No

• Question 119:

  In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active Solution: It might be seamless for the user, but the redirect is happening

  A. Yes
  B. No
  A. Yes

• Question 120:

  As an Okta best-practice / recommendation: Okta encourages you to switch from Integrated Windows Authentication (IWA or DSSO) to agentless Desktop Single Sign-on (ADSSO). Okta is no longer adding new IWA functionality and offers only limited support and bug fixes.

  Solution: Only the second statement is true

  A. Yes
  B. No
  B. No