Okta Okta-Certified-Administrator Questions and Answers Guarantee you Oass the Test Easily [Q23-Q47]

QUESTION 23
The SCIM protocol is <response_is_entered_here> for provisioning and managing identity data on the web.
Solution: An application-level REST protocol

QUESTION 24
In Okta’s KB articles the set of functions under the ‘Provisioning’ concept are referred to as CRUD. This is a concept you also meet when referring to CRUD APIs. What about its meaning here, in Okta’s vision?
Solution: In ‘Provisioning’, CRUD stands for Create, Read, Upload, Deprovision

QUESTION 25
With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)?
Solution: 6 months

QUESTION 26
After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.
Solution: The statement is true

QUESTION 27
What does it mean: “Mapping Direction AD to Okta”?
Solution: Indicates a schema of attribute values flowing AD towards Okta’s Apps directly, Okta just facilitating this end-to-end direct flow

QUESTION 28
Which is a / are best-practice(s) in a SAML 2.0 situation?
Solution: To never enable SAML for all your end-users

QUESTION 29
What does SCIM stand for?
Solution: System for Cross-domain Identity Management

QUESTION 30
When using Okta Expression Language, which of the following will have the output: okta.com Solution: String.substringBefore(“[email protected]”, “@okta.com”)

QUESTION 31
Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using:
Solution: The SCIM standard

QUESTION 32
In Okta’s KB articles the set of functions under the ‘Provisioning’ concept are referred to as CRUD. This is a concept you also meet when referring to CRUD APIs. What about its meaning here, in Okta’s vision?
Solution: In ‘Provisioning’, CRUD stands for Create, Read, Update, Deprovision

QUESTION 33
When you call a GET API call for users / groups / and other such objects, the response is usually Paginated, in case these are a lot of objects returned. What do you do in order to retrieve all objects?
Solution: You have to call a different API request for the next page, which will then provide another API call in the response headers of it – for the following page (in case there are still objects to be returned), till there are no more objects to be returned

QUESTION 34
Any … <answer_goes_here>’s credentials verified under “Test API credentials” in an Office365 app integration can allow Okta API integration with Office 365 – permissions which once successfully granted will be used by Okta used for Provisioning related tasks Solution: Office 365 Global Administrator

QUESTION 35
When does Okta bring LDAP roles into Okta?
Solution: Only during LDAP JIT

QUESTION 36
Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using:
Solution: The OIDC standard

QUESTION 37
With Okta you federate the ‘Office 365 tenant name’ (which is the default Microsoft domain you have) or the ‘Office 365 domain’?
Solution: You federate with Okta only the ‘Office 365 domain’

QUESTION 38
When a user signs out of Okta, if they are using IWA, they’ll be redirected to the Sign In page and without inputting credentials they’ll be signed back in Solution: Statement is true

QUESTION 39
When a user signs out of Okta, if they are using IWA, they’ll be redirected to the Sign In page and without inputting credentials they’ll be signed back in Solution: Statement is false, as this would represent a security concern

QUESTION 40
The Okta On-Prem MFA Agent acts as a Radius client and communicates with the RADIUS enabled On-Prem server, including RSA Authentication manager for RSA SecurIDs. This basically allows your organization to leverage Second Factor from a variety of On-Premises multifactor authentication tools.
Solution: The statement is partically true – as it has nothing to do with RSA

QUESTION 41
When does Okta bring LDAP groups into Okta?
Solution: Only during an LDAP import

QUESTION 42
Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using:
Solution: The OAuth 2.0 standard

QUESTION 43
How can SAML provision attributes via JIT? Or even create users?
Solution: By including specific information in the yaml structure sent over via a POST call

QUESTION 44
Whenever you make an API call, you will then get back:
Solution: A new object (a user, group or app object)

QUESTION 45
Can you include / exclude users from specific Network Zones defined in Okta from both Sign On and Password policies?
Solution: Only for Password policies you have such granularity

QUESTION 46
You just re-enabled IWA DSSO and notice it’s not behaving as it should. What is an aspect you should keep in mind?
Solution: That when re-enabling IWA DDSO you have to issue another API token for the AD / IWA Agents

QUESTION 47
With Okta you federate the ‘Office 365 tenant name’ (which is the default Microsoft domain you have) or the ‘Office 365 domain’?
Solution: You federate with Okta only the ‘Office 365 tenant name’