Okta Okta Certifications OKTA-CERTIFIED-ADMINISTRATOR Questions & Answers

• Question 51:

  If you want to remove an attribute's value in Okta, for example a value coming from AD that is not useful in any way, you have to:

  Solution: Delete the mapping by the help of which the value came into Okta User Profile

  A. Yes

  B. No

  Correct Answer: B

• Question 52:

  How can SAML provision attributes via JIT? Or even create users? Solution: By including specific information in the GET API call

  A. Yes

  B. No

  Correct Answer: B

• Question 53:

  Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using: Solution: The SCIM standard

  A. Yes

  B. No

  Correct Answer: A

• Question 54:

  As an Okta best-practice / recommendation: Okta encourages you to switch from Integrated Windows Authentication (IWA or DSSO) to agentless Desktop Single Sign-on (ADSSO). Okta is no longer adding new IWA functionality and offers only limited support and bug fixes.

  Solution: Both statements are true

  A. Yes

  B. No

  Correct Answer: A

• Question 55:

  When you call a GET API call for users / groups / and other such objects, the response is usually Paginated, in case these are a lot of objects returned. What do you do in order to retrieve all objects?

  Solution: You call the very same API multiple times, till the response will be empty

  A. Yes

  B. No

  Correct Answer: B

• Question 56:

  Can you include / exclude users from specific Network Zones defined in Okta from both Sign On and Password policies?

  Solution: You can do this with both policy types mentioned

  A. Yes

  B. No

  Correct Answer: A

• Question 57:

  Okta has a json representation of objects such as 'users', json schema interchanged on API calls, as an example, but what about the format of information regarding of a user going to a SCIM server for creating the user in an On Premises application?

  Solution: Format is different: yml

  A. Yes

  B. No

  Correct Answer: B

• Question 58:

  On a Windows machine, which is the right behavior if you try to sign into your Okta org and agentless DSSO is properly configured for it?

  Solution: You will be automatically redirected to your end user's apps dashboard without entering any credentials

  A. Yes

  B. No

  Correct Answer: A

• Question 59:

  Which is a / are best-practice(s) in a SAML 2.0 situation? Solution: To never enable SAML for all your end-users

  A. Yes

  B. No

  Correct Answer: B

• Question 60:

  Speaking of Okta Template App and Okta Pluin Template App, which of the following RegEx can you create for an allow list of URLS so that both endpoints for /login or /change_password are accepted under example.com domain?

  Solution: https://example*.com/(login|change_password)

  A. Yes

  B. No

  Correct Answer: B