Question 1

If a Network Zone is blocked, clients from those blocked list zone cannot access:

Options :

A : Any org URL and are blocked prior to any type of policy evaluation

B : Any org URL but are blocked after they face policy evaluations, for them to not think they got on the block list, hence not possibly knowing this step of a reversed engineering at a Networking level

C : The Org through Inbound SAML SSO or any app through SP-initiated SSO, but can log into their End-User Panel in Okta and that-s about it

Answer: A

Question 2

Which of the following is / are true?

Options :

A : Using the same Okta group for assignments and Group Push - is a Push Group limitation

B :

Pushing groups by rule is a Push Group limitation

C : Pushing groups by name is a Push Group limitation

D : None of the above is a Push Group limitation

Answer: A

Question 3

With 'user types' option enabled and different user types present in your org, you can:

Options :

A : Have up to 10 distinct user types within a single Okta org

B : Have different profile mappings for the same app, for different user types

C : Have more Super Admins in the org than without having multiple user types

D : Apply different constraints on attributes ('email' as a format for 'username', while 'samAccountName' being a format for 'username' on another user type)

Answer: A,B,D

Question 4

'code' is an opaque value that is returned if 'reponse_type' includes:

Options :

A : 'code' and 'code' has a lifetime of 45 seconds

B : 'token' and 'code' has a lifetime of 24 hours

C : 'value' and 'code' has a lifetime of 90 seconds

D : 'code' and 'code' has a lifetime of 60 seconds

Answer: D

Question 5

Which is / are access method(s) for Advanced Server Access?

Options :

A : tls

B : ssh

C : ospx

D : rdp

E : ssl

Answer: B,D