Okta Okta Certifications OKTA-CERTIFIED-ADMINISTRATOR Questions & Answers

• Question 41:

  As an Okta best-practice / recommendation: Okta encourages you to switch from Integrated Windows Authentication (IWA or DSSO) to agentless Desktop Single Sign-on (ADSSO). Okta is no longer adding new IWA functionality and offers only limited support and bug fixes.

  Solution: Only the second statement is true

  A. Yes

  B. No

  Correct Answer: B

• Question 42:

  As an Okta admin, when you implement IWA, you have to know how to successfully test it to see if it's working. For this you:

  Solution: Restart AD Domain Controller and go into IIS and see if you have IWA references in there

  A. Yes

  B. No

  Correct Answer: B

• Question 43:

  When using Okta Expression Language, which variable type results out of this Okta Expression? isMemberOfGroup("groupId")

  Solution: Boolean

  A. Yes

  B. No

  Correct Answer: A

• Question 44:

  In Okta's KB articles the set of functions under the 'Provisioning' concept are referred to as CRUD. This is a concept you also meet when referring to CRUD APIs. What about its meaning here, in Okta's vision?

  Solution: In 'Provisioning', CRUD stands for Create, Read, Update, Deprovision

  A. Yes

  B. No

  Correct Answer: A

• Question 45:

  When using Okta Expression Language, which of the following will have the output: okta.com

  Solution: String.substringBefore("[email protected]", "@okta.com")

  A. Yes

  B. No

  Correct Answer: B

• Question 46:

  Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.

  Solution: Both statements are false

  A. Yes

  B. No

  Correct Answer: B

• Question 47:

  Which port and which of the: 'http' or SSL enabled connections does Okta recommend? Solution: Port 80 and SSL enabled connections

  A. Yes

  B. No

  Correct Answer: B

• Question 48:

  There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

  Solution: Yes, but you need to have a SAML 2.0 integrated app or such flow

  A. Yes

  B. No

  Correct Answer: B

• Question 49:

  What does it mean: "Mapping Direction AD to Okta"?

  Solution: Indicates a schema of attribute values flowing AD towards Okta's Apps directly, Okta just facilitating this end-to-end direct flow

  A. Yes

  B. No

  Correct Answer: B

• Question 50:

  In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active

  Solution: It will always redirect to Okta and in this case only - will promt the user for re- authentication by manually entering SP credentials

  A. Yes

  B. No

  Correct Answer: B