OKTA-CERTIFIED-ADMINISTRATOR Online Practice Questions and Answers

With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)? Solution: This data is never removed, as per GDPR

A. Yes

B. No

In Okta's KB articles the set of functions under the 'Provisioning' concept are referred to as CRUD. This is a concept you also meet when referring to CRUD APIs. What about its meaning here, in Okta's vision?

Solution: In 'Provisioning', CRUD stands for Create, Read, Upload, Deprovision

A. Yes

B. No

Whenever you make an API call, you will then get back: Solution: A new object (a user, group or app object)

A. Yes

B. No

The SCIM protocol is for provisioning and managing identity data on the web.

Solution: An application-level TLS protocol A. Yes

B. No

Can you map the Okta user ID as an Office 365 Immutable ID?

Solution: Not possible and not intended to be possible as it cannot work like this

A. Yes

B. No

In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active Solution: It might be seamless for the user, but the redirect is happening

A. Yes

B. No

With Okta you federate the 'Office 365 tenant name' (which is the default Microsoft domain you have) or the 'Office 365 domain'?

Solution: You federate with Okta only the 'Office 365 tenant name'

A. Yes

B. No

Which port and which of the: 'http' or SSL enabled connections does Okta recommend? Solution: Port 443 and SSL enabled connections

A. Yes

B. No

Which is a / are best-practice(s) in a SAML 2.0 situation?

Solution: To not use SAML 2.0 and Provisioning via the same App instance in Okta, but integrate the same SP custom domain via two different app instances in Okta, one for SSO, via SAML 2.0 in this case, and one for provisioning on users

A. Yes

B. No

If you want to remove an attribute's value in Okta, for example a value coming from AD that is not useful in any way, you have to:

Solution: Delete the mapping by the help of which the value came into Okta User Profile

A. Yes

B. No

Which port and which of the: 'http' or SSL enabled connections does Okta recommend? Solution: Port 80 and SSL enabled connections

A. Yes

B. No

The Okta On-Prem MFA Agent acts as a Radius client and communicates with the RADIUS enabled On-Prem server, including RSA Authentication manager for RSA SecurIDs. This basically allows your organization to leverage Second Factor from a variety of On-Premises multifactor authentication tools.

Solution: The statement is false

A. Yes

B. No

Which of the following is / are Okta required attributes? Solution: sAMAccountName

A. Yes

B. No

When using Okta Expression Language, which of the following will have the output: This is a test Solution: String.replace("That is a test", "is", "at")

A. Yes

B. No

There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

Solution: Yes, if you map those attributes from AD to Okta and then Okta to App, as an example

A. Yes

B. No