Okta Certified Consultant Exam (Okta-Certified-Consultant) Free Practice Test

Question 1

You can create Users via API calls. More than that, you can use Okta APIs in a ''customized'' way, so that it is possible to create already activated and random password assigned Users into Okta Universal Directory.

A. True, but for the Random Password assignment / provisioning option via API call. Those users will always be passwordless

B. FALSE

C. TRUE

Correct Answer: C

Question 2

In a SAML 2.0 scenario, the Service Provider never directly interacts with the Identity Provider. Instead, a browser acts as the agent to carry out all the redirections.

A. True for OIDC, not for SAML 2.0

B. True, hence why different TLS versions can still be understood between parts and browser will forward the information then to the other side with the right TLS version needed

C. False, as APIs go directly into each other,s domains, thus endpoints

D. False, as SAML 2.0 implies the trust to be exchanged directly between IDP (Identity provider) and SP (Service Provider)

Correct Answer: B

Question 3

Can I add more than one domain?

A. No, you can only have one custom domain set up for your organization

B. You are limited to three custom domains per org

C. Yes, you can have multiple custom domains set up for your organization

Correct Answer: B

Question 4

Considering a SAML 2.0 scenario, which of the following is / are true?

A. The Service Provider needs to know which Identity Provider to redirect to before it has any idea who the user is

B. The Service Provider needs to know which Identity Provider,s routing rule configured in Okta to use before it has any idea who the IDP is

C. The Identity Provider should not provide any information to the SP side for a SAML authentication / authorization process to successfully work, only the SP has to provide the SSO URL and the Entity ID to the IDP

Correct Answer: A

Question 5

Which of the following is / are true?

A. Okta Device Trust allows only managed devices with your specified security posture to access Okta-integrated apps

B. Okta recommends that you do not apply a ,Not Trusted - Deny, app sign policy to your Okta-federated MDM application, as doing so will prevent new users from enrolling their device in your MDM application and accessing other device trust-secured apps

C. Okta Device Trust protects enterprise data in scenarios where there,s no defined network boundary

Correct Answer: A,B,C

Question 6

What is / are best-practice(s) with Okta?

A. Having in Okta multiple connected AD Agents for the same AD domain

B. Having the Super Admin account Okta sourced or a duplicate Super Admin account not connected to any other source of truth

C. Having an administrator of each type: Org Admin, App Admin, etc. and especially having three different Super Admins

D. Having at least one AD and one LDAP integration in Okta

E. Having both a Production environment, as well as a Preview (Sandbox) environment where you can firstly test the future Production implementations

Correct Answer: A,B,E

Welcome to TestSimulate

Okta Certified Consultant (Okta-Certified-Consultant) Free Practice Test