Question 1

The following configurations can be set in the Provisioning Settings from OKTA to AD

Options :

A : Deactivate User account

B : Update user attributes in AD whenever OKTA user profile is changed (for an OKTA mastered user)

C : Enable Password Sync

D : Provide an email address for activation emails

E : Create User account

F : Configure AD username format

Answer: A,B,C,D

Question 2

Select all that is true for Password Age configuration:

Options :

A : Maximum value that can be set for password expiry and also for prompt users to change their password is 999 days

B : Password expires after setting does not appear for AD mastered users

C : Maximum number of passwords that the user can use before he can reuse the password is 30

D : Users will not receive expiry warning if the password expiry after setting is set to less than 6 days

E : Password expiry cannot be accurately calculated for users created before March 10, 2014

F : minimum time required between password changes can set to a maximum value of 9999 mts

Answer: A,B,C,D

Question 3

SAML can either be used in IdP initiated flows or SP initiated flows

Options :

A : FALSE

B : TRUE

Answer: B

Question 4

End users will be able to add apps using OKTA Browser plugin, Provided the app is allowed to be added in the Application Self Service settings

Options :

A : FALSE

B : TRUE

Answer: A

Question 5

OKTA Policy Framework principle is based on XACML principle which means

Options :

A : Default policies should be on top ladder

B : Follows top down approach

C : Default policies should have highest priority

D : More restrictive policies should be of highest priority

E : More restrictive policies are of lowest priority

Answer: A,B,C