Okta Certified Administrator Free Dumps Available

dumps2021-09-28T07:35:41+08:00

To achieve Okta Certified Administrator certification, you must pass both the Okta Professional Exam and the Okta Administrator Exam. We provide the latest Okta certification Okta Certified Administrator exam dumps, which can guarantee you pass the test easily. There are 60 questions in real Okta Certified Administrator exam, and you have 90 minutes to complete all the questions. Free Okta certification Okta Certified Administrator exam dumps are available below.

Page 1 of 3

1. What does SCIM stand for?

Solution: System of Cross-scripting-domain Identity Management

Yes

2. In order for SAML to work, there is a need of an IDP and an SP and we know that already, but why is it so? Because:

Solution: An SP authorizes the users, while the IDP authenticates them

Yes

3. When using Okta Expression Language, which variable type results out of this Okta Expression? isMemberOfGroup("groupId")

Solution: Graph

Yes

4. Okta has a json representation of objects such as 'users', json schema interchanged on API calls, as an example, but what about the format of information regarding of a user going to a SCIM server for creating the user in an On Premises application?

Solution: Format stays the same: json

Yes

5. When you are trying to federate (via WS-FED) Office 365 with Okta:

Solution: You can choose to skip importing user groups and group memberships into Okta

Yes

6. Okta AD Agents can be successfully and completely configured by:

Solution: Super administrators

Yes

7. What does it mean: "Mapping Direction AD to Okta"?

Solution: Indicates a schema of attribute values flowing AD towards Okta

Yes

8. Speaking of Okta Template App and Okta Pluin Template App, which of the following RegEx can you create for an allow list of URLS so that both endpoints for /login or /change_password are accepted under example.com domain?

Solution: https://example.com/(login|change_password)\*

Yes

9. When using Okta Expression Language, which of the following will have the output: This is a test

Solution: String.append("This is", " a test")

Yes

10. The Okta On-Prem MFA Agent acts as a Radius client and communicates with the RADIUS enabled On-Prem server, including RSA Authentication manager for RSA SecurIDs. This basically allows your organization to leverage Second Factor from a variety of On-Premises multifactor authentication tools.

Solution: The statement is false

Yes

11. When does Okta bring LDAP roles into Okta?

Solution: Only during an LDAP import

Yes

12. Which port and which of the: 'http' or SSL enabled connections does Okta recommend?

Solution: Port 443 and http connections

Yes

13. Can you include / exclude users from specific Network Zones defined in Okta from both Sign On and Password policies?

Solution: Only for Password policies you have such granularity

Yes

14. Regarding policies, Okta recommends:

Solution: To include a policy rule that catches not wanted behaviors as a first priority and then label others for permitted behaviors

Yes

15. As an Okta admin, when you implement IWA, you have to know how to successfully test it to see if it's working. For this you:

Solution: Open up a command prompt and ping the Okta server handling the requests, information about the server found in Okta IP tables for your own org's Cell

Yes

16. What does it mean: "Mapping Direction AD to Okta"?

Solution: Indicates a schema of attribute values flowing Okta towards AD

Yes

17. With Okta you federate the 'Office 365 tenant name' (which is the default Microsoft domain you have) or the 'Office 365 domain'?

Solution: You federate with Okta only the 'Office 365 domain'

Yes

18. With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)?

Solution: 6 months

Yes

19. Does Okta require an Agent to sit in-between Okta to SCIM-enabled app on premises requests?

Solution: Yes, an Okta Provisioning Agent

Yes

20. Which of the following is / are true?

Solution: If an MFA factor is set to 'required' and another MFA factor set to 'optional', then users can enroll into both factors, but then can use only the first one for successful logins

Yes

Page 2 of 3

21. Which of the following is / are Okta required attributes?

Solution: sAMAccountName

Yes

22. How can SAML provision attributes via JIT? Or even create users?

Solution: By including specific information in the yaml structure sent over via a POST call

Yes

23. When using Okta Expression Language, which of the following will have the output: This is a test

Solution: String.replace("That is a test", "is", "at")

Yes

24. Which of the following is / are Okta required attributes?

Solution: None of the above

Yes

25. The SCIM protocol is <response_is_entered_here> for provisioning and managing identity data on the web.

Solution: An application-level SAML protocol

Yes

26. With agentless DSSO (Desktop Single Sign-on), you still have a need of deploying IWA Agents in your Active Directory domains to implement DSSO functionality.

Solution: The statement is false

Yes

27. Which of the following is / are true?

Solution: If an MFA factor is set to 'required' and another MFA factor set to 'optional', then users can enroll into both factors and then can use either of them for successful logins

Yes

28. There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

Solution: Yes, if you map those attributes from AD to Okta and then Okta to App, as an example

Yes

29. Whenever you make an API call, you will then get back:

Solution: Okta events under '/events' endpoint

Yes

30. Regarding policies, Okta recommends:

Solution: To have one policy rule per application, as more will most probably alter the behavior too much and you may miss important behaviors

Yes

31. Does Okta require an Agent to sit in-between Okta to SCIM-enabled app on premises requests?

Solution: Yes, an Okta Application Integration Agent

Yes

32. In order for SAML to work, there is a need of an IDP and an SP and we know that already, but why is it so? Because:

Solution: An IDP authorizes the users, while the SP authenticates them

Yes

33. With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)?

Solution: 3 months

Yes

34. With agentless DSSO (Desktop Single Sign-on), you still have a need of deploying IWA Agents in your Active Directory domains to implement DSSO functionality.

Solution: The statement is true, as agentless DSSO means no AD agents, not no IWA agents

Yes

35. After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

Solution: The statement is partially true, as the networking information is already added within this rule

Yes

36. Whenever you make an API call, you will then get back:

Solution: Response headers

Yes

37. When you are trying to federate (via WS-FED) Office 365 with Okta:

Solution: You can choose between SAML 2.0 or OIDC for the current integration

Yes

38. The Okta On-Prem MFA Agent acts as a Radius client and communicates with the RADIUS enabled On-Prem server, including RSA Authentication manager for RSA SecurIDs. This basically allows your organization to leverage Second Factor from a variety of On-Premises multifactor authentication tools.

Solution: The statement is true

Yes

39. There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

Solution: No, it is not possible as Okta queries the whole AD schema and retrieves everything that it's able to

Yes

40. Speaking of Okta Template App and Okta Pluin Template App, which of the following RegEx can you create for an allow list of URLS so that both endpoints for /login or /change_password are accepted under example.com domain?

Solution: https://example.com/(login|change_password)

Yes

Page 3 of 3

41. When a user signs out of Okta, if they are using IWA, they'll be redirected to the Sign In page and without inputting credentials they'll be signed back in

Solution: Statement is true

Yes

42. With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)?

Solution: This data is never removed, as per GDPR

Yes

43. Okta AD Agents can be successfully and completely configured by:

Solution: Read-only administrators

Yes

44. When a user signs out of Okta, if they are using IWA, they'll be redirected to the Sign In page and without inputting credentials they'll be signed back in

Solution: Statement is false, as this would represent a security concern

Yes

45. On a Windows machine, which is the right behavior if you try to sign into your Okta org and agentless DSSO is properly configured for it?

Solution: You will be automatically redirected to your Load-Balancing Application, if you have one configured, enter credentials for it and then redirected back to Okta org

Yes

46. The Okta On-Prem MFA Agent acts as a Radius client and communicates with the RADIUS enabled On-Prem server, including RSA Authentication manager for RSA SecurIDs. This basically allows your organization to leverage Second Factor from a variety of On-Premises multifactor authentication tools.

Solution: The statement is partically true - as it has nothing to do with RSA

Yes

47. Once brought into Okta, LDAP roles are represented as:

Solution: Email lists

Yes

48. In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.

Solution: The statement is valid, but Okta is not the one doing decryption - the browser is doing that

Yes

49. Regarding Access Request Workflow, when a user requests an app - he can also include a message to the approver. But you can also designate an approver group.

Solution: Only the second statement is true

Yes

50. The SCIM protocol is <response_is_entered_here> for provisioning and managing identity data on the web.

Solution: An application-level REST protocol

Yes

51. After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.

Solution: You have nothing to do and even the rule is by default set to "Active"

Yes

52. In Okta's KB articles the set of functions under the 'Provisioning' concept are referred to as CRUD. This is a concept you also meet when referring to CRUD APIs .

What about its meaning here, in Okta's vision?

Solution: In 'Provisioning', CRUD stands for Create, Read, Upload, Deprovision

Yes

Okta Certified Administrator Free Dumps Available

Okta Certified Administrator Free Dumps Available

Share this post

Leave a Reply Cancel reply

Related Posts

Actual Questions for Okta Certified Professional Exam

Good Dumps for Okta Certified Consultant Exam

Actual Questions for Okta Certified Developer Exam