Okta OKTA-CERTIFIED-ADMINISTRATOR Online Practice Questions and Exam Preparation

Okta OKTA-CERTIFIED-ADMINISTRATOR Online Questions & Answers

• Question 51:

  Speaking of Okta Template App and Okta Pluin Template App, which of the following RegEx can you create for an allow list of URLS so that both endpoints for /login or /change_password are accepted under example.com domain? Solution: https://example.com/(login|change_password)\\*

  A. Yes
  B. No
  B. No

• Question 52:

  Which is a / are best-practice(s) in a SAML 2.0 situation? Solution: To never enable SAML for all your end-users

  A. Yes
  B. No
  B. No

• Question 53:

  In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser. Solution: The statement is valid, but Okta is not the one doing decryption - the browser is doing that

  A. Yes
  B. No
  B. No

• Question 54:

  Which of the following is / are Okta required attributes? Solution: None of the above

  A. Yes
  B. No
  A. Yes

• Question 55:

  Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group. Solution: Only the second statement is true

  A. Yes
  B. No
  B. No

• Question 56:

  When a user signs out of Okta, if they are using IWA, they'll be redirected to the Sign In page and without inputting credentials they'll be signed back in Solution: Statement is true, but then they'll be displayed a 403 HTTP code (Forbidden)

  A. Yes
  B. No
  B. No

• Question 57:

  With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)? Solution: This data is never removed, as per GDPR

  A. Yes
  B. No
  B. No

• Question 58:

  Okta AD Agents can be successfully and completely configured by: Solution: Read-only administrators

  A. Yes
  B. No
  B. No

• Question 59:

  With agentless DSSO (Desktop Single Sign-on), you still have a need of deploying IWA Agents in your Active Directory domains to implement DSSO functionality. Solution: The statement is true, as agentless DSSO means no AD agents, not no IWA agents

  A. Yes
  B. No
  B. No

• Question 60:

  When using Okta Expression Language, which of the following will have the output: okta.com

  Solution: String.substringAfter("[email protected]", "@")

  A. Yes
  B. No
  A. Yes