Okta Level 1: Professional OKTA-CERTIFIED-PROFESSIONAL Questions & Answers

• Question 21:

  Is this a true statement about deleting Okta user accounts?

  Solution: After an account is deleted, an administrator CANNOT reuse the deleted user name.

  A. Yes

  B. No

  Correct Answer: B

• Question 22:

  Is this the expected outcome when both Identity Provider (IdP) initiated flow and Service Provider (SP) initiated flow are configured and required for an application?

  Solution: The end user can choose to authenticate through Okta or through the application with user name and password.

  A. Yes

  B. No

  Correct Answer: A

  Explanation: Once the user is redirected to Okta they'll need to enter their Okta credentials, unless they had already authenticated into Okta in a previous session within the same browser. In either case, a successful authentication request will redirect the user back to the SP's Assertion Consumer Service (ACS) URL with an embedded SAML response from Okta. At a minimum, the response will: Indicate that it is indeed from Okta and hasn't been altered, and contain a digital signature proving such. This signature will be verified by the SP using a public key from Okta that was previously uploaded to the SP as a certificate. Indicate that the user has authenticated successfully into Okta Indicate who the user is via the NameID, a standard attribute used in SAML assertions. https://support.okta.com/help/s/article/Beginner-s-Guide-to-SAML?language=en_US

• Question 23:

  Is this the authentication method or flow that is used when an end user launches a SAML application from the Okta end user home dashboard?

  Solution: Side/back door login

  A. Yes

  B. No

  Correct Answer: B

• Question 24:

  Is this a valid user account status for an end user who needs to authenticate to Okta?

  Solution: Pending Activation

  A. Yes

  B. No

  Correct Answer: A

• Question 25:

  Is this a function of Okta Verify?

  Solution: Pushes notification to an end user's mobile'sevice.

  A. Yes

  B. No

  Correct Answer: A

  Explanation: https://help.okta.com/en/prod/Content/Topics/Mobile/okta-verify- admins.htm#:~:text=Okta%

  20Verify%20is%20an%20MFA,entering%20a%20one%2Dtime %20code.

  Okta Verify is an MFA factor and authenticator app developed by Okta. The app is used to confirm a user's

  identity when they sign in to their Okta account. After an end user installs the app on their primary device,

  they can verify their identity by approving a push notification or by entering a one-time code. When a user

  signs in to their organization, the Okta Verify app prompts them to verify their identity.

• Question 26:

  Is this one of the default base attributes in the Okta user profile that can be marked as required or optional for Okta mastered users?

  Solution: firstName

  A. Yes

  B. No

  Correct Answer: B

  Explanation: Okta has defined 31 default base attributes for all users in an org. These base attributes are generally fixed and cannot be modified or removed. There are two exceptions: First Name and Last Name. These two attributes can be marked as required or optional for Okta and Active Directory (AD)-mastered users. The default setting for new AD instances is that first and last name are required. https:// help.okta.com/en/prod/Content/Topics/Directory/ad-name-optional.htm

• Question 27:

  Is this an option available to end users for sell-service password reset if enabled by an Okta Administrator?

  Solution: YubiKey

  A. Yes

  B. No

  Correct Answer: B

• Question 28:

  Is this statement true regarding the lifespan of an unused API token in Okta?

  Solution: An unused API token expires after 30 days.

  A. Yes

  B. No

  Correct Answer: A

  Explanation: Token expiration and deactivationTokens expire automatically after a certain period and can

  also be deactivated at any time.

  Token expirationTokens are valid for 30 days from creation or last use, so that the 30 day expiration

  automatically refreshes with each API call.

  Tokens that aren't used for 30 days expire.

  The 30-day period is currently fixed and can't be changed for your organization.

  https://developer.okta.com/docs/guides/create-an-api-token/token-expiration-deactivation/

• Question 29:

  Is this something an Okta Administrator can do to manage a dashboard setting for an end user?

  Solution: Prevent an end user from changing the order of labs in the end user dashboard

  A. Yes

  B. No

  Correct Answer: B

• Question 30:

  Is this an example of an individual who can submit a case directly to Okta Support?

  Solution: Okta Administrator

  A. Yes

  B. No

  Correct Answer: B