Okta-Certified-Consultant by Okta Actual Free Exam Q&As

Question 1

Beside Okta org. being used as an authorization server, there also can be other types of authorization servers added (other custom ones).

A. True and the issuer looks like: https://okta.com B. True and the issuer looks like: https://<subdomain>.okta.com C. TRUE D. True and the issuer looks like: https://<subdomain>.okta.com/oauth2/${authorizationServerId} E. FALSE

Discussion 0

Correct Answer: C,D Vote an answer

Question 2

''token_type_hint'' indicates the type of ''token'' being passed. Valid value(s) can be:

A. ,refresh_token, B. ,oidc_token, C. ,access_token, D. ,id_token,

Discussion 0

Correct Answer: A,C,D Vote an answer

Question 3

In order to successfully deploy an Advanced Server Access server, you must:

A. Simply enroll the server B. Simply install the server agent C. Install the server Agent and enroll the server

Discussion 0

Correct Answer: C Vote an answer

Question 4

Is it alright, as a best-practice with Okta, to install AD Agent in close proximity to the location of your users?

A. No, Okta randomly selects an AD Agent, location is not a factor in this equation B. Yes, this way there will surely be less hops on a traceroute for the requests C. Yes, Okta is pinging all the AD Agents to find their location and then it will use the one closest to the user initiating log in requests

Discussion 0

Correct Answer: A Vote an answer

Question 5

Which of the following is / are true?

A. Pushing groups by rule is a Push Group limitation B. None of the above is a Push Group limitation. C. Pushing groups by name is a Push Group limitation D. Using the same Okta group for assignments and Group Push - is a Push Group limitation

Discussion 0

Correct Answer: D Vote an answer

Question 6

The "access token" is issued by the authorization server (Okta) in exchange for the grant.

A. Statement is False B. Statement is True C. Statement is True, but for the Access Token part, as the Refresh Token is the one exchanged, which then creates Access Tokens

Discussion 0

Correct Answer: B Vote an answer

Question 7

After I''ve setup a custom domain for my organization, will the default Okta domain for my org still work?

A. You will be redirected from the custom domain towards the default one then B. No C. Yes

Discussion 0

Correct Answer: C Vote an answer

Question 8

In a SAML 2.0 scenario, the Service Provider never directly interacts with the Identity Provider. Instead, a browser acts as the agent to carry out all the redirections.

A. False, as APIs go directly into each other,s domains, thus endpoints B. True, hence why different TLS versions can still be understood between parts and browser will forward the information then to the other side with the right TLS version needed C. True for OIDC, not for SAML 2.0 D. False, as SAML 2.0 implies the trust to be exchanged directly between IDP (Identity provider) and SP (Service Provider)

Discussion 0

Correct Answer: B Vote an answer

Okta Certified Consultant - Okta-Certified-Consultant Exam Practice Test