[2021] Okta-Certified-Administrator All-in-One Exam Guide Practice To your Okta-Certified-Administrator Exam!
Preparations of Okta-Certified-Administrator Exam 2021 Level 2: Administrator Unlimited 130 Questions
NEW QUESTION 75
As an Okta best-practice / recommendation: Okta encourages you to switch from Integrated Windows Authentication (IWA or DSSO) to agentless Desktop Single Sign-on (ADSSO). Okta is no longer adding new IWA functionality and offers only limited support and bug fixes.
Solution: Only the second statement is true
- A. No
- B. Yes
Answer: A
NEW QUESTION 76
Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.
Solution: Both statements are true
- A. No
- B. Yes
Answer: B
NEW QUESTION 77
If you want to remove an attribute's value in Okta, for example a value coming from AD that is not useful in any way, you have to:
Solution: Delete the mapping by the help of which the value came into Okta User Profile
- A. No
- B. Yes
Answer: A
NEW QUESTION 78
As an Okta admin, when you implement IWA, you have to know how to successfully test it to see if it's working. For this you:
Solution: Paste into a browser configured for DSSO the IWA redirect URL along with '/authenticated.aspx' after it, hit 'Enter' and check the message returned
- A. No
- B. Yes
Answer: B
NEW QUESTION 79
How can SAML provision attributes via JIT? Or even create users?
Solution: By including specific information in the yaml structure sent over via a POST call
- A. No
- B. Yes
Answer: A
NEW QUESTION 80
Can you map the Okta user ID as an Office 365 Immutable ID?
Solution: Done via mappings, by pushing from Okta to Office 365: user.getInternalProperty("id")
- A. No
- B. Yes
Answer: B
NEW QUESTION 81
After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.
Solution: The statement is partially true, as the networking information is already added within this rule
- A. No
- B. Yes
Answer: A
NEW QUESTION 82
When a user's Okta password is changed:
Solution: All apps that are Provisioning-enabled and have Update Attributes option active under Provisioning settings - will begin to sync the password in respective apps, as password is an attribute of their profile - but only if JIT Provisioning is enabled as well as it has to be a just-in-time action, the moment the user resets the password
- A. No
- B. Yes
Answer: A
NEW QUESTION 83
With agentless DSSO (Desktop Single Sign-on), you still have a need of deploying IWA Agents in your Active Directory domains to implement DSSO functionality.
Solution: The statement is true, but not for the part about: the deployment of IWA Agents into Active Directory domains. The IWA Agents can now be deployed on whichever machine, it's a unique functionality that only agentless DSSO has and not on-prem DSSO.
- A. No
- B. Yes
Answer: A
NEW QUESTION 84
Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using:
Solution: The OIDC standard
- A. No
- B. Yes
Answer: A
NEW QUESTION 85
With Okta you federate the 'Office 365 tenant name' (which is the default Microsoft domain you have) or the 'Office 365 domain'?
Solution: You federate with Okta only the 'Office 365 tenant name'
- A. No
- B. Yes
Answer: A
NEW QUESTION 86
Once brought into Okta, LDAP roles are represented as:
Solution: Groups
- A. No
- B. Yes
Answer: B
NEW QUESTION 87
When a user's Okta password is changed:
Solution: All apps that are Provisioning-enabled and have Sync Password option active under Provisioning settings - will begin to sync the password in respective apps, but only if JIT Provisioning is enabled as well as it has to be a just-in-time action, the moment the user resets the password
- A. No
- B. Yes
Answer: A
NEW QUESTION 88
When you are trying to federate (via WS-FED) Office 365 with Okta:
Solution: You can try to federate multiple Office 365 custom domains into a single Okta Office 365 app instance via SWA SSO protocol
- A. No
- B. Yes
Answer: A
NEW QUESTION 89
When you call a GET API call for users / groups / and other such objects, the response is usually Paginated, in case these are a lot of objects returned. What do you do in order to retrieve all objects?
Solution: You have to call a different API request for the next page, which will then provide another API call in the response headers of it - for the following page (in case there are still objects to be returned), till there are no more objects to be returned
- A. No
- B. Yes
Answer: B
NEW QUESTION 90
Regarding policies, Okta recommends:
Solution: To include a policy rule that catches not wanted behaviors as a first priority and then label others for permitted behaviors
- A. No
- B. Yes
Answer: A
NEW QUESTION 91
Whenever you make an API call, you will then get back:
Solution: Response headers
- A. No
- B. Yes
Answer: B
NEW QUESTION 92
The SCIM protocol is <response_is_entered_here> for provisioning and managing identity data on the web.
Solution: An application-level REST protocol
- A. No
- B. Yes
Answer: B
NEW QUESTION 93
Can you map the Okta user ID as an Office 365 Immutable ID?
Solution: Not possible, as Office 365 requires an Immutable ID extracted from either On-Prem AD or Azure AD
- A. No
- B. Yes
Answer: A
NEW QUESTION 94
What does it mean: "Mapping Direction AD to Okta"?
Solution: Indicates a schema of attribute values flowing AD towards Okta
- A. No
- B. Yes
Answer: B
NEW QUESTION 95
With Okta you federate the 'Office 365 tenant name' (which is the default Microsoft domain you have) or the 'Office 365 domain'?
Solution: You federate with Okta both the 'Office 365 tenant name' and the 'Office 365 domain'
- A. No
- B. Yes
Answer: A
NEW QUESTION 96
Which of the following is / are Okta required attributes?
Solution: sAMAccountName
- A. No
- B. Yes
Answer: A
NEW QUESTION 97
Whenever you make an API call, you will then get back:
Solution: Okta events under '/events' endpoint
- A. No
- B. Yes
Answer: A
NEW QUESTION 98
Regarding policies, Okta recommends:
Solution: Include a final catch-all rule that denies access to anything that does not match any of the preceding rules
- A. No
- B. Yes
Answer: B
NEW QUESTION 99
If you want to remove an attribute's value in Okta, for example a value coming from AD that is not useful in any way, you have to:
Solution: Intentionally map a blank value to that specific attribute in the user profile
- A. No
- B. Yes
Answer: B
NEW QUESTION 100
......
Focus on Okta-Certified-Administrator All-in-One Exam Guide For Quick Preparation: https://www.vcedumps.com/Okta-Certified-Administrator-examcollection.html
