Question 1

Use these method(s) when the client has a client secret. Okta supports the following authentication methods:

Options :

A : 'client_secret_basic'

B : 'client_secret_jwt'

C : 'client_secret_post'

Answer: A,B,C

Question 2

When you are using the Okta Authorization Server, the lifetime of the JWT token is hard-coded to the following values:

Options :

A : ID token: 60 minutes. Access token 30 minutes. Refresh token 60 minutes

B : ID token: 60 minutes. Access token 60 minutes. Refresh token 90 days

C : ID token: 30 minutes. Access token 60 minutes. Refresh token 60 minutes

D : ID token: 60 minutes. Access token 90 minutes. Refresh token 60 days

Answer: B

Question 3

Can you create in Okta some apps which do not actually use any SSO method?

Options :

A : No, Okta is used only for SSO when speaking about apps

B : Yes, all apps supporting SWA / SCIM

C : Yes, for example an app based on the 'Bookmark App' template in the OIN

Answer: C

Question 4

The Okta Sign-In widget doesn't make Cross-Origin requests as it uses stateless API requests

Options :

A : Statement is True

B :

Statement is False

C : Okta has no editable options for Cross Origin Access, hence statement is False

Answer: A

Question 5

Which of the following is / are valid API paths or parts of an API call, but not necessary a complete API call?

Options :

A : /api/v1/authorizationServers/${authServerId}/policies/${policyId}

B : /api/v1/authorizationServers/${authServerId}/policies

C : /api/v1/authorizationServers/${authServerId}/scopes/${scopeId}

D : /api/v1/authorizationServers/credentials/lifecycle/keyRotate

E : /api/v1/authorizationServers/policies/${authServerId}

Answer: A,B,C