Pass the Okta Certified Consultant Exam with Confidence – New Okta Certified Consultant Practice Test Available

1. When Okta calls your external service, it enforces a default timeout of <response_goes_here> seconds.

2. In an Inline Hook scenario, when Okta calls your external service, Okta may attempt to retry.

How many retries will Okta perform?

3. In an Inline Hook scenario, if the external service responds with a redirect, Okta follows it.

4. After you've created your external service, you have to register its endpoint in Okta.

5. Optional user account fields include a 'secondary email address' and a 'security image'.

6. In the context of ASA (Advanced Server Access), the Windows and Unix server usernames are defined in Okta as:

7. You can further integrate Advanced Server Access with Okta by configuring SCIM, which allows your:

8. In order to successfully deploy an Advanced Server Access server, you must:

9. Advanced Server Access Enrollment is the process where the Advanced Server Access Agent configures a server to be managed by a specific:

10. Is Advanced Server Access Server Agent supported on Microsoft Active Directory DC?

11. You are faced with the error: "Failed to connect to the specified LDAP server displays.".

What is worth to consider checking first?

12. What is a Relative Distinguished Name (RDN)? (for example in an LDAP context)

13. The LDAP Incremental import relies on the 'modifyTimestamp' attribute to determine whether an LDAP entry has been imported. But, there are times when some on-prem LDAP servers's system clock could go backward / be delayed - hence Okta missing some updates on an LDAP import. Okta has an option to deal with these issues, called:

14. Okta serves pages on your custom domain over HTTPS. To set up this feature, you need to provide:

15. After I've setup a custom domain for my organization, will the default Okta domain for my org still work?

16. Can I add more than one domain?

17. In a SAML Trace, you can see that on an [Okta (IDP) App SAML request towards an App (SP side)] where you've already configured some regex-matching custom SAML attributes (not set in Mappings, but directly in the SAML App's config) to be passed over, these (which are named in the App's config as 'User attributes' or 'Group attributes') are send:

18. The Okta RADIUS Server agent:

19. You should use Okta RADIUS Server agent for authentication, when authentication is being performed by:

20. You don't have the same possibility you have for an On-Prem MFA Agent or AD Agent, to increase the logging level, in the case of an Okta Radius server.

21. Okta can be used to authenticate a user into a:

22. Open ID Connect and OAuth 2.0 are used as follows:

23. You can use Okta org. as an authorization server.

24. Beside Okta org. being used as an authorization server, there also can be other types of authorization servers added (other custom ones).

25. Okta org, when being used as an authorization server (issuer: https://<subdomain>.okta.com), can only be used for OIDC (Open ID Connect, hence Authentication) and not for OAuth (Authorization).

26. You cannot:

27. The authorization server also acts as an:

28. Access tokens are returned if 'response_type' included:

29. 'code' is an opaque value that is returned if 'reponse_type' includes:

30. 'scope' is returned only if the response includes:

31. 'grant_type' can take value(s) out of the following:

32. 'unsupported_grant_type' error is thrown when the 'grant_type' isn't:

33. 'invalid_client' error is thrown when:

34. 'token_type_hint' indicates the type of 'token' being passed. Valid value(s) can be:

35. There is a property named 'uid', which is the user ID. This parameter is returned:

36. In regards to OpenID Connect & OAuth 2.0 API, '/authorize' is the endpoint which has the following use:

37. In regards to OpenID Connect & OAuth 2.0 API, '/introspect' is the endpoint which has the following use:

38. In regards to OpenID COnnect & OAuth 2.0 API, '/token' is the endpoint which has the following use:

39. Which of the following is / are true?

40. Which Okta feature / solution offers you the possibility to maintain alternate authentication for off-network users, while keeping Okta for on-network users' authentication requests?