Question 1

Can you create in Okta some apps which do not actually use any SSO method?

Options :

A : No, Okta is used only for SSO when speaking about apps

B : Yes, all apps supporting SWA / SCIM

C : Yes, for example an app based on the 'Bookmark App' template in the OIN

Answer: C

Question 2

Use these method(s) when the client has a client secret. Okta supports the following authentication methods:

Options :

A : 'client_secret_basic'

B : 'client_secret_jwt'

C : 'client_secret_post'

Answer: A,B,C

Question 3

Which of the following is / are valid API paths or parts of an API call, but not necessary a complete API call?

Options :

A : /api/v1/authorizationServers/${authServerId}/policies/${policyId}

B : /api/v1/authorizationServers/${authServerId}/policies

C : /api/v1/authorizationServers/${authServerId}/scopes/${scopeId}

D : /api/v1/authorizationServers/credentials/lifecycle/keyRotate

E : /api/v1/authorizationServers/policies/${authServerId}

Answer: A,B,C

Question 4

What is this API endpoint doing when being properly called? POST /api/v1/groups

Options :

A : Adds a new Group with APP_GROUP type to your organization

B : Adds a new Group with OKTA_GROUP type to your organization

C : Fetches all the OKTA_GROUP types from your organization

D : Adds a new Group List with OKTA_GROUP type to your organization

E : Fetches all the APP_GROUP types from your organization

F : Fetches all the Groups from your organization

Answer: B

Question 5

The Okta Sign-In widget doesn't make Cross-Origin requests as it uses stateless API requests

Options :

A : Statement is True

B :

Statement is False

C : Okta has no editable options for Cross Origin Access, hence statement is False

Answer: A