Okta Okta Certifications OKTA-CERTIFIED-ADMINISTRATOR Questions & Answers

• Question 31:

  In order for SAML to work, there is a need of an IDP and an SP and we know that already, but why is it so? Because:

  Solution: An SP authorizes the users, while the IDP authenticates them

  A. Yes

  B. No

  Correct Answer: A

• Question 32:

  When using Okta Expression Language, which variable type results out of this Okta Expression? isMemberOfGroup("groupId")

  Solution: Graph

  A. Yes

  B. No

  Correct Answer: B

• Question 33:

  Okta has a json representation of objects such as 'users', json schema interchanged on API calls, as an example, but what about the format of information regarding of a user going to a SCIM server for creating the user in an On Premises application?

  Solution: Format stays the same: json

  A. Yes

  B. No

  Correct Answer: A

• Question 34:

  When you are trying to federate (via WS-FED) Office 365 with Okta:

  Solution: You can choose to skip importing user groups and group memberships into Okta

  A. Yes

  B. No

  Correct Answer: A

• Question 35:

  Okta AD Agents can be successfully and completely configured by: Solution: Super administrators

  A. Yes

  B. No

  Correct Answer: A

• Question 36:

  Any ... 's credentials verified under "Test API credentials" in an Office365 app integration can allow Okta API integration with Office 365 - permissions which once successfully granted will be used by Okta used for Provisioning related tasks

  Solution: Okta Super Administrator

  A. Yes

  B. No

  Correct Answer: B

• Question 37:

  You just re-enabled IWA DSSO and notice it's not behaving as it should. What is an aspect you should keep in mind?

  Solution: That when re-enabling IWA DDSO the Identity Provider (IDP) routing rules must be manually reactivated

  A. Yes

  B. No

  Correct Answer: A

• Question 38:

  What does SCIM stand for?

  Solution: System of Cross-scripting-domain Identity Management

  A. Yes

  B. No

  Correct Answer: B

• Question 39:

  Which is a / are best-practice(s) in a SAML 2.0 situation?

  Solution: To not link your admin user from the SP via SAML with a user from Okta, if the app (SP) does not provide a SAML bypass URL

  A. Yes

  B. No

  Correct Answer: A

• Question 40:

  In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.

  Solution: The statement is valid, but Okta is not the one doing authentication - IWA Agent and AD Agent are doing that as AD agent verifies the AD user's identity

  A. Yes

  B. No

  Correct Answer: B