OKTA-CERTIFIED-ADMINISTRATOR Online Practice Questions and Answers

When you are trying to federate (via WS-FED) Office 365 with Okta:

Solution: You can choose between SAML 2.0 or OIDC for the current integration

A. Yes

B. No

The SCIM protocol is for provisioning and managing identity data on the web.

Solution: An application-level REST protocol

A. Yes

B. No

After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

Solution: You have nothing to do and even the rule is by default set to "Active"

A. Yes

B. No

When does Okta bring LDAP groups into Okta? Solution: Only during LDAP JIT

A. Yes

B. No

Once brought into Okta, LDAP roles are represented as: Solution: Groups

A. Yes

B. No

Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using: Solution: The OAuth 2.0 standard

A. Yes

B. No

When you call a GET API call for users / groups / and other such objects, the response is usually Paginated, in case these are a lot of objects returned. What do you do in order to retrieve all objects?

Solution: You call the very same API with the help of a different token, hence will return the next page of objects

A. Yes

B. No

Which is a / are best-practice(s) in a SAML 2.0 situation?

Solution: To not use SAML 2.0 and Provisioning via the same App instance in Okta, but integrate the same SP custom domain via two different app instances in Okta, one for SSO, via SAML 2.0 in this case, and one for provisioning on users

A. Yes

B. No

Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using: Solution: The OIDC standard

A. Yes

B. No

Okta AD Agents can be successfully and completely configured by: Solution: Organization administrators

A. Yes

B. No

When you are trying to federate (via WS-FED) Office 365 with Okta:

Solution: You can choose to skip importing user groups and group memberships into Okta

A. Yes

B. No

Can you include / exclude users from specific Network Zones defined in Okta from both Sign On and Password policies?

Solution: Only for Password policies you have such granularity

A. Yes

B. No

When using Okta Expression Language, which of the following will have the output: This is a test Solution: String.replace("That is a test", "is", "at")

A. Yes

B. No

The SCIM protocol is for provisioning and managing identity data on the web.

Solution: An application-level SAML protocol

A. Yes

B. No

With agentless DSSO (Desktop Single Sign-on), you still have a need of deploying IWA Agents in your Active Directory domains to implement DSSO functionality.

Solution: The statement is false

A. Yes

B. No