Okta-Certified-Developer by Okta Actual Free Exam Q&As

Question 1

Scoped Access tokens have a number of advantages, including:

A. Shorter token lifespans B. Can be generated and retrieved using an API C. Posibility to pass on ,secrets, D. More access granularity

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 2

When you are using the Okta Authorization Server, the lifetime of the JWT token is hard-coded to the following values:

A. ID token: 60 minutes. Access token 60 minutes. Refresh token 90 days B. ID token: 60 minutes. Access token 90 minutes. Refresh token 60 days C. ID token: 60 minutes. Access token 30 minutes. Refresh token 60 minutes D. ID token. 30 minutes. Access token 60 minutes. Refresh token 60 minutes

Discussion 0

Correct Answer: A Vote an answer

Question 3

In regards to HTTP codes, which of the following are True?

A. 5 XX are for redirection B. 3XX indicate stdout in terms of INFO and DEBUG only C. 2XX indicate success D. 4XX represent client-side errors E. 1 XX are containing stderr output only F. IXX have informational purposes

Discussion 0

Correct Answer: C,D,F Vote an answer

Question 4

Which of the following statement is correct?

A. The Authorization Code flow with PKCE doesn,t support Refresh tokens for browser-based apps B. The PKCE-enhanced Authorization Code flow will require your application to generate a cryptographically random key called a verifier C. All of these D. The Authorization Code flow with PKCE doesn,t support Refresh Tokens for SPAs

Discussion 0

Correct Answer: C Vote an answer

Question 5

In KB articles, 'JWKS' stands for:

A. JSON Web Key Store B. JSON Web Key Structure C. JSON Web Key Set D. James Watt Key Structure E. JSON Wide Ke Set

Discussion 0

Correct Answer: C Vote an answer

Question 6

Can you create in Okta some apps which do not actually use any SSO method?

A. Yes, all apps supporting SWA / SCIM B. No, Okta is used only for SSO when speaking about apps C. Yes, for example an app based on the ,Bookmark App, template in the OIN

Discussion 0

Correct Answer: C Vote an answer

Question 7

In either cases: where Okta is the Authorization Server or where you are using a Custom Authorization Server - the ID tokens' lifetime is:

A. Configurable between 5 minutes and 1 year B. Set to 60 minutes C. Set to 1 minute

Discussion 0

Correct Answer: B Vote an answer

Question 8

'openid' is required for any OpenID request connect flow.

A. If the ,openid, scope value is not present, the request is not a valid OAuth 2.0 request either B. If the ,openid, scope value is not present, the request may still be a valid OAuth 20 request and also a valid OpenID Connect request C. If the ,openid, scope value is not present, the request may still be a valid OAuth 2.0 request, but not a valid OpenID Connect request

Discussion 0

Correct Answer: C Vote an answer

Question 9

The HTTP verb is a part of the:

A. Okta User Schema B. An SSL certificate C. API call D. Okta User Profile E. curl request

Discussion 0

Correct Answer: C,E Vote an answer

Question 10

Which of the following Oauth 2.0 flow(s) supports Access Tokens?

A. Authorization Code with PKCE B. Resource Owner Password C. Implicit D. Client Credentials E. Authorization Code

Discussion 0

Correct Answer: E Vote an answer

Okta Certified Developer - Okta-Certified-Developer Exam Practice Test