最高でOkta-Certified-Administrator最新の2022問題集は100%試験合格率保証付きます [Q47-Q72]

最高でOkta-Certified-Administrator最新の2022問題集は100%試験合格率保証付きます

ベストな方法はOkta Okta-Certified-Administrator練習試験問題集

Okta Okta-Certified-Administrator 認定試験の出題範囲：

トピック	出題範囲
トピック 1	OktaがユーザーとグループをOINアプリにプロビジョニングする方法に関する知識を示しますアプリケーション統合ウィザードの使用方法に関する知識を示します
トピック 2	各Oktaエージェントプラグインのトラブルシューティングオプションに関する知識を示します。デスクトップSSO IWAを使用するゾーンでのユーザーエクスペリエンスに関する知識を示します
トピック 3	ADからユーザーのクラウド管理への移行に関する知識を示します高度なエージェントの高可用性についての認識を示します
トピック 4	OktaAPIを使用する際のサービスアカウントの重要性についての理解を示します正しい権限でAPIトークンを作成する方法についての知識を示します
トピック 5	Oktaをサービスプロバイダーとして構成する方法についての知識を示します Okta ADパスワードポリシーがADポリシーと一致または超える必要がある理由についての知識を示します
トピック 6	Oktaからディレクトリやアプリにデータを書き戻すことの価値についての知識を示しますプロファイルマッピングを作成するプロセスについての深い理解を示します
トピック 7	Okta Management API、API-AM、およびAPI製品のユースケースに関する知識を示しますアプリケーションリクエストワークフローと資格オプションに関する知識を示します

質問 47
In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.
Solution: The statement is valid, but Okta is not the one doing authentication - IWA Agent and AD Agent are doing that as AD agent verifies the AD user's identity

A. No
B. Yes

正解: A

質問 48
The SCIM protocol is <response_is_entered_here> for provisioning and managing identity data on the web.
Solution: An application-level TLS protocol

A. No
B. Yes

正解: A

質問 49
In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active Solution: It might be seamless for the user, but the redirect is happening

A. Yes
B. No

正解: A

質問 50
Which of the following is / are true?
Solution: If an MFA factor is set to 'required' and another MFA factor set to 'optional', then users can enroll into both factors, but then can use only the first one for successful logins

A. No
B. Yes

正解: A

質問 51
When a user signs out of Okta, if they are using IWA, they'll be redirected to the Sign In page and without inputting credentials they'll be signed back in Solution: Statement is false, as this would represent a security concern

A. No
B. Yes

正解: A

質問 52
After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.
Solution: The statement is true

A. Yes
B. No

正解: A

質問 53
In an SP-initiated SAML 2.0 flow, the SP will never redirect to Okta if the session is already active Solution: It will always redirect to Okta and in this case only - will promt the user for re-authentication by manually entering SP credentials

A. No
B. Yes

正解: A

質問 54
On a Windows machine, which is the right behavior if you try to sign into your Okta org and agentless DSSO is properly configured for it?
Solution: You will be automatically redirected to The Okta Sign In page for your organization, where you need to fill in with your AD credentials

A. No
B. Yes

正解: A

質問 55
What does SCIM stand for?
Solution: System for CRSF-domain Identity Management

A. No
B. Yes

正解: A

質問 56
Which of the following is / are Okta required attributes?
Solution: None of the above

A. Yes
B. No

正解: A

質問 57
Which of the following is / are true?
Solution: If an MFA factor is set to 'required' and another MFA factor set to 'disabled', then users can choose between the two factors when enrolling, but then can use only the first one for successful logins

A. No
B. Yes

正解: A

質問 58
With Okta you federate the 'Office 365 tenant name' (which is the default Microsoft domain you have) or the 'Office 365 domain'?
Solution: You federate with Okta both the 'Office 365 tenant name' and the 'Office 365 domain'

A. No
B. Yes

正解: A

質問 59
Does Okta require an Agent to sit in-between Okta to SCIM-enabled app on premises requests?
Solution: Yes, an Okta Application Integration Agent

A. No
B. Yes

正解: A

質問 60
Can you include / exclude users from specific Network Zones defined in Okta from both Sign On and Password policies?
Solution: Only for Sign On policies you have such granularity

A. No
B. Yes

正解: A

質問 61
When you are trying to federate (via WS-FED) Office 365 with Okta:
Solution: You can choose to skip importing user groups and group memberships into Okta

A. Yes
B. No

正解: A

質問 62
As an Okta best-practice / recommendation: Okta encourages you to switch from Integrated Windows Authentication (IWA or DSSO) to agentless Desktop Single Sign-on (ADSSO). Okta is no longer adding new IWA functionality and offers only limited support and bug fixes.
Solution: Only the first statement is true

A. No
B. Yes

正解: A

質問 63
Once brought into Okta, LDAP roles are represented as:
Solution: Groups

A. Yes
B. No

正解: A

質問 64
Which is a / are best-practice(s) in a SAML 2.0 situation?
Solution: To not link your admin user from the SP via SAML with a user from Okta, if the app (SP) does not provide a SAML bypass URL

A. Yes
B. No

正解: A

質問 65
When you are trying to federate (via WS-FED) Office 365 with Okta:
Solution: You can choose between SAML 2.0 or OIDC for the current integration

A. No
B. Yes

正解: A

質問 66
After you turn on Desktop SSO, a default DSSO related routing rule is created. You must configure the network information for this rule.
Solution: You have nothing to do and even the rule is by default set to "Active"

A. No
B. Yes

正解: A

質問 67
When does Okta bring LDAP groups into Okta?
Solution: During both LDAP import and JIT

A. Yes
B. No

正解: A

質問 68
Provisioning actions between cloud-based apps / on-premises apps and Okta are completed by using:
Solution: The OIDC standard

A. No
B. Yes

正解: A

質問 69
When using Okta Expression Language, which of the following will have the output: This is a test Solution: String.append("This is", " a test")

A. Yes
B. No

正解: A

質問 70
When does Okta bring LDAP roles into Okta?
Solution: Only during LDAP JIT

A. No
B. Yes

正解: A

質問 71
In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.
Solution: The statement is valid, but Okta is not the one doing decryption - the browser is doing that