Question 1

The scope name must:

Options :

A : Start with 'okta'

B : Not start with 'okta'

C : Start with 'okta:'

D : Not start with 'okta:'

E : Not be only 'okta' or '*'

F : Only be 'okta' or '*'

Answer: A,B,D

Question 2

The Hashed Password object allows an existing password to be imported into Okta directly from some other store. Okta supports only this / these hashing functions for password import:

Options :

A : BCRYPT

B : SHA-512

C : SHA-256

D : SHA-1

E : MD5

F : All of the above

Answer: A

Question 3

The Okta Sign-In widget doesn't make Cross-Origin requests as it uses stateless API requests

Options :

A : Statement is True

B :

Statement is False

C : Okta has no editable options for Cross Origin Access, hence statement is False

Answer: A

Question 4

Use these method(s) when the client has a client secret. Okta supports the following authentication methods:

Options :

A : 'client_secret_basic'

B : 'client_secret_jwt'

C : 'client_secret_post'

Answer: A,B,C

Question 5

In regards to OpenID Connect & OAuth 2.0 API, '/.well-known/openid-configuration' is the endpoint which has the following use:

Options :

A : Return OpenID Connect metadata related to the specified authorization server

B : Return OAuth 2.0 metadata related to the specified authentication server

C : Interact with the resource owner and obtain an authorization grant

D : Return information about a token

Answer: A