Okta Certified Consultant Exam - Okta-Certified-Consultant Exam Practice Test

Question 1

Optional user account fields include a ''secondary email address'' and a ''security image''.

A. Statement is False, as the ,security image, is mandatory to have a value assigned

B. Statement is True

C. Statement is False, as the ,secondary email address, is mandatory to have a value assigned

D. Statement is False, as both aforementioned attributes would need to have a value assigned

Correct Answer: B

Question 2

''unsupported_grant_type'' error is thrown when the ''grant_type'' isn''t:

A. ,authorization_code,

B. ,password,

C. ,client_credentials,

D. ,refresh_token,

Correct Answer: A,B,D

Question 3

Per Okta Retention Policy, API calls of type GET cannot retrieve data older than:

A. 10 days

B. 30 days

C. 90 days

D. It has no limit and can retrieve data since the creation of the specific org from which the token authorizing the API call got issued

E. 180 days

Correct Answer: C

Question 4

The On-Prem MFA Agent has an ''sslPinningEnabled'' flag within its files, just as an AD Agent has one as well.

A. True, but it,s not available for the AD Agent beside the On-Prem MFA one, but only for the On-Prem MFA Agent and the IWA Agent

B. TRUE

C. False, as it,s only available for the AD Agent, not for others

D. FALSE

E. True, but it,s not editable

Correct Answer: B

Question 5

Does Advanced Server Access Server Agent provide option(s) for extra logging?

A. No

B. Yes, only ,--debug, flag

C. Yes, multiple options (WARN, INFO, DEBUG)

Correct Answer: C

Question 6

Can you create users in Okta even without enabling Provisioning via an API token and using only SAML 2.0 and JIT?

A. Yes, via an Inbound SAML app, for example

B. No

C. Yes, but only if Okta is an IdP in the scenario

Correct Answer: A

Question 7

Okta org, when being used as an authorization server (issuer: https://<subdomain>.okta.com), can only be used for OIDC (Open ID Connect, hence Authentication) and not for OAuth (Authorization).

A. True, but for the issuer part, where the URL is wrong

B. Statement is True in its entirety

C. False, but for the correlation between OIDC and Authentication, which is indeed True

D. Statement is False in its entirety

Correct Answer: B

Question 8

You can further integrate Advanced Server Access with Okta by configuring SCIM, which allows your:

A. Advanced Server Access users (only) to be managed by Okta

B. Advanced Server Access groups (only) to be managed by Okta

C. Advanced Server Access local Admin to manage the Okta users, attributes from On-Prem

D. Advanced Server Access groups and users to be managed by Okta

Correct Answer: D

Question 9

There is a property named ''uid'', which is the user ID. This parameter is returned:

A. Only if the token is an access token and the subject is an admin

B. Only if the token is an refresh token and the subject is a resource server

C. Only if the token is an access token and the subject is a authorization server

D. Only if the token is an access token and the subject is an end user

E. Only if the token is a refresh token and the subject is an end user

Correct Answer: D

Okta Certified Consultant - Okta-Certified-Consultant Exam Practice Test

Latest Update

Useful Links

Contact Us