Download Free 2021 Okta Certified Administrator Exam Questions & Answers

test2021-11-29T07:11:26+00:00

Okta Certified Administrators examinations are fitting for candidates proficient at sustaining the Okta service. They must have knowledge about how Okta enables User Lifecycle Management situations incorporating the mobile devices, security policy frameworks, SSO options, and directory integration for cloud and on-premise access.

To aid all candidates, FreeTestShare provides 100 percent authentic Okta Certified Administrator Exam Questions & Answers that will not only help you pass the Okta Certified Administrator exam. FreeTestShare is offering a free Okta Certified Administrator demo to help you get a better understanding of the exam themes and layout. It will ensure you prepare the Okta Certified Administrator exam easily.

Page 1 of 4

1. Any ... <answer_goes_here>'s credentials verified under "Test API credentials" in an Office365 app integration can allow Okta API integration with Office 365 - permissions which once successfully granted will be used by Okta used for Provisioning related tasks

Solution: Office 365 Global Administrator

Yes

2. In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active

Solution: It will always redirect to Okta and in this case only - will promt the user for re-authentication by manually entering Okta credentials

Yes

3. When a user's Okta password is changed:

Solution: All apps that are Provisioning-enabled and have Sync Password option active under Provisioning settings - will begin to sync the password in respective apps

Yes

4. Can you include / exclude users from specific Network Zones defined in Okta from both Sign On and Password policies?

Solution: Only for Sign On policies you have such granularity

Yes

5. Whenever you make an API call, you will then get back:

Solution: Response headers

Yes

6. As an Okta admin, when you implement IWA, you have to know how to successfully test it to see if it's working. For this you:

Solution: Restart AD Domain Controller and go into IIS and see if you have IWA references in there

Yes

7. Does Okta require an Agent to sit in-between Okta to SCIM-enabled app on premises requests?

Solution: Yes, an Okta Application Integration Agent

Yes

8. What does it mean: "Mapping Direction AD to Okta"?

Solution: Indicates a schema of attribute values flowing AD towards Okta's Apps directly, Okta just facilitating this end-to-end direct flow

Yes

9. When using Okta Expression Language, which variable type results out of this Okta Expression? isMemberOfGroup("groupId")

Solution: Array

Yes

10. Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.

Solution: Both statements are false

Yes

Page 2 of 4

11. Once brought into Okta, LDAP roles are represented as:

Solution: Groups

Yes

12. Okta has a json representation of objects such as 'users', json schema interchanged on API calls, as an example, but what about the format of information regarding of a user going to a SCIM server for creating the user in an On Premises application?

Solution: Format stays the same: json

Yes

13. Which port and which of the: 'http' or SSL enabled connections does Okta recommend?

Solution: Port 80 and SSL enabled connections

Yes

14. 1.When you are trying to federate (via WS-FED) Office 365 with Okta:

Solution: You can choose between SAML 2.0 or OIDC for the current integration

Yes

15. Can you map the Okta user ID as an Office 365 Immutable ID?

Solution: Done via mappings, by pushing from Okta to Office 365: user.getInternalProperty("id")

Yes

16. In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.

Solution: The statement is entirely valid

Yes

17. Can you map the Okta user ID as an Office 365 Immutable ID?

Solution: Not possible, as Office 365 requires an Immutable ID extracted from either On-Prem AD or Azure AD

Yes

18. What does SCIM stand for?

Solution: System for CRSF-domain Identity Management

Yes

19. If you want to remove an attribute's value in Okta, for example a value coming from AD that is not useful in any way, you have to:

Solution: Intentionally map a blank value to that specific attribute in the user profile

Yes

20. Can you map the Okta user ID as an Office 365 Immutable ID?

Solution: Not possible and not intended to be possible as it cannot work like this

Yes

Page 3 of 4

21. On a Windows machine, which is the right behavior if you try to sign into your Okta org and agentless DSSO is properly configured for it?

Solution: You will be automatically redirected to your Load-Balancing Application, if you have one configured, enter credentials for it and then redirected back to Okta org

Yes

22. In Okta's KB articles the set of functions under the 'Provisioning' concept are referred to as CRUD. This is a concept you also meet when referring to CRUD APIs .

What about its meaning here, in Okta's vision?

Solution: In 'Provisioning', CRUD stands for Create, Read, Update, Delete

Yes

23. Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.

Solution: Both statements are true

Yes

24. Once brought into Okta, LDAP roles are represented as:

Solution: Email lists

Yes

25. There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

Solution: Yes, if you map those attributes from AD to Okta and then Okta to App, as an example

Yes

26. Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.

Solution: Only the second statement is true

Yes

27. Okta has a json representation of objects such as 'users', json schema interchanged on API calls, as an example, but what about the format of information regarding of a user going to a SCIM server for creating the user in an On Premises application?

Solution: Format is different: yml

Yes

28. What does it mean: "Mapping Direction AD to Okta"?

Solution: Indicates a schema of attribute values flowing Okta towards AD

Yes

29. When using Okta Expression Language, which of the following will have the output:

okta.com

Solution: String.substringBefore("[email protected]", "@okta.com")

Yes

30. You just re-enabled IWA DSSO and notice it's not behaving as it should .

What is an aspect you should keep in mind?

Solution: That when re-enabling IWA DDSO you have to issue another API token for the AD / IWA Agents

Yes

Page 4 of 4

31. When does Okta bring LDAP groups into Okta?

Solution: Only during LDAP JIT

Yes

32. When using Okta Expression Language, which of the following will have the output: This is a test

Solution: String.append("This is", " a test")

Yes

33. After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

Solution: The statement is partially true, as the networking information is already added within this rule

Yes