Question 1

Which of the following is / are valid API paths or parts of an API call, but not necessary a complete API call?

Options :

A : /api/v1/authorizationServers/${authServerId}/policies/${policyId}

B : /api/v1/authorizationServers/${authServerId}/policies

C : /api/v1/authorizationServers/${authServerId}/scopes/${scopeId}

D : /api/v1/authorizationServers/credentials/lifecycle/keyRotate

E : /api/v1/authorizationServers/policies/${authServerId}

Answer: A,B,C

Question 2

When you are using the Okta Authorization Server, the lifetime of the JWT token is hard-coded to the following values:

Options :

A : ID token: 60 minutes. Access token 30 minutes. Refresh token 60 minutes

B : ID token: 60 minutes. Access token 60 minutes. Refresh token 90 days

C : ID token: 30 minutes. Access token 60 minutes. Refresh token 60 minutes

D : ID token: 60 minutes. Access token 90 minutes. Refresh token 60 days

Answer: B

Question 3

Can you create in Okta some apps which do not actually use any SSO method?

Options :

A : No, Okta is used only for SSO when speaking about apps

B : Yes, all apps supporting SWA / SCIM

C : Yes, for example an app based on the 'Bookmark App' template in the OIN

Answer: C

Question 4

In regards to OpenID Connect & OAuth 2.0 API, '/.well-known/openid-configuration' is the endpoint which has the following use:

Options :

A : Return OpenID Connect metadata related to the specified authorization server

B : Return OAuth 2.0 metadata related to the specified authentication server

C : Interact with the resource owner and obtain an authorization grant

D : Return information about a token

Answer: A

Question 5

The Okta Sign-In widget doesn't make Cross-Origin requests as it uses stateless API requests

Options :

A : Statement is True

B :

Statement is False

C : Okta has no editable options for Cross Origin Access, hence statement is False

Answer: A