OKTA-CERTIFIED-ADMINISTRATOR Online Practice Questions and Answers

Once brought into Okta, LDAP roles are represented as: Solution: Email lists

A. Yes B. No

After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

Solution: You have nothing to do and even the rule is by default set to "Active"

A. Yes

B. No

What does SCIM stand for?

Solution: System for CRSF-domain Identity Management

A. Yes

B. No

When does Okta bring LDAP groups into Okta? Solution: During both LDAP import and JIT

A. Yes

B. No

Which is a / are best-practice(s) in a SAML 2.0 situation?

Solution: To not use SAML 2.0 and Provisioning via the same App instance in Okta, but integrate the same SP custom domain via two different app instances in Okta, one for SSO, via SAML 2.0 in this case, and one for provisioning on users

A. Yes

B. No

In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active

Solution: It will always redirect to Okta and in this case only - will promt the user for re- authentication by manually entering SP credentials

A. Yes

B. No

When using Okta Expression Language, which variable type results out of this Okta Expression? isMemberOfGroup("groupId")

Solution: Boolean

A. Yes

B. No

What does it mean: "Mapping Direction AD to Okta"?

Solution: Indicates a schema of attribute values flowing Okta towards AD

A. Yes

B. No

Which of the following is / are true?

Solution: If an MFA factor is set to 'required' and another MFA factor set to 'optional', then users can enroll into both factors, but then can use only the first one for successful logins

A. Yes

B. No

After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

Solution: The statement is partially true, as the networking information is already added within this rule

A. Yes

B. No