OKTA ADMINISTRATOR EXAM PART 1
QUESTIONS WITH CORRECT
ANSWERS
With delegated authentication, users use? - CORRECT ANSWERS ✅✅ -AD
credentials to sign in to Okta. Enabled by default when integrating with AD instance
Enabling DSSO allows for? - CORRECT ANSWERS ✅✅ -Users to be automatically
authenticated by Okta, and any apps connected to Okta whenever signing into windows
network.
How does Okta make DSSO work? - CORRECT ANSWERS ✅✅ -Okta IWA Web
App uses Microsoft IWA and ASP.NET to authenticate users from specified gateways
Purpose of View Del Auth system log? - CORRECT ANSWERS ✅✅ -To help identify
auth bottlenecks , system includes information about duration of each delegated
authentication request
- Located under Directory Integration under specified directory
When new attribute is added to AD domain? - CORRECT ANSWERS ✅✅ -Each
Okta Agent needs to be restarted.
- If not agents will base-64 the attributes
Member server is? - CORRECT ANSWERS ✅✅ -Server in AD domain or a Domain
Controller
- Recommended for Okta to perform
3 Accounts required for AD Agent installtion? - CORRECT ANSWERS ✅✅ -- Local
AD user account to run agent installer
- Okta Super Admin, used to install AD agent
- OktaService account to run AD agent
OktaService account requisites? - CORRECT ANSWERS ✅✅ -- Member of domain
admins group
, - Have local admin privileges
AD Agent performs? - CORRECT ANSWERS ✅✅ -- Read users, OUs, and groups
- Authenticates users
- Change passwords
- CRUD, requires RW access
Minimum Okta Service Account Permissions - CORRECT ANSWERS ✅✅ --
Provision users
- Update user attrs
- Group Push
- Reset password
- Activate/Deactivate users
By default Okta uses the Okta...? - CORRECT ANSWERS ✅✅ -user profile
username during delegated authentication
User OUs connected to Okta - - CORRECT ANSWERS ✅✅ -Agent can only access
OUs you select to import end users
Group OUs connected to Okta - CORRECT ANSWERS ✅✅ -Agent can only access
OUs you select to import groups
Changing default filter query in your directory environment can? - CORRECT
ANSWERS ✅✅ -Deprovision users
JIT Provisioning - CORRECT ANSWERS ✅✅ -Enables automatic user account
creation in Okta the first time a user authenticates with AD Delegated Authentication, as
well as updates to existing user profiles.
- Imports security group which the user belongs to
To Enable Sync Password? - CORRECT ANSWERS ✅✅ -Delegated Authentication
must be disabled
SSL Pinning Prevents? - CORRECT ANSWERS ✅✅ -Communication with Okta
Server
Use group rules to add users to AD - CORRECT ANSWERS ✅✅ -Create Group that
when added to the group they are added to AD
Configuring Import and Account Settings - CORRECT ANSWERS ✅✅ -- Import
settings to add users and groups from designated AD domain into Okta.
- Includes which users and group OUs to import from
- Whether to use JIT provisioning
QUESTIONS WITH CORRECT
ANSWERS
With delegated authentication, users use? - CORRECT ANSWERS ✅✅ -AD
credentials to sign in to Okta. Enabled by default when integrating with AD instance
Enabling DSSO allows for? - CORRECT ANSWERS ✅✅ -Users to be automatically
authenticated by Okta, and any apps connected to Okta whenever signing into windows
network.
How does Okta make DSSO work? - CORRECT ANSWERS ✅✅ -Okta IWA Web
App uses Microsoft IWA and ASP.NET to authenticate users from specified gateways
Purpose of View Del Auth system log? - CORRECT ANSWERS ✅✅ -To help identify
auth bottlenecks , system includes information about duration of each delegated
authentication request
- Located under Directory Integration under specified directory
When new attribute is added to AD domain? - CORRECT ANSWERS ✅✅ -Each
Okta Agent needs to be restarted.
- If not agents will base-64 the attributes
Member server is? - CORRECT ANSWERS ✅✅ -Server in AD domain or a Domain
Controller
- Recommended for Okta to perform
3 Accounts required for AD Agent installtion? - CORRECT ANSWERS ✅✅ -- Local
AD user account to run agent installer
- Okta Super Admin, used to install AD agent
- OktaService account to run AD agent
OktaService account requisites? - CORRECT ANSWERS ✅✅ -- Member of domain
admins group
, - Have local admin privileges
AD Agent performs? - CORRECT ANSWERS ✅✅ -- Read users, OUs, and groups
- Authenticates users
- Change passwords
- CRUD, requires RW access
Minimum Okta Service Account Permissions - CORRECT ANSWERS ✅✅ --
Provision users
- Update user attrs
- Group Push
- Reset password
- Activate/Deactivate users
By default Okta uses the Okta...? - CORRECT ANSWERS ✅✅ -user profile
username during delegated authentication
User OUs connected to Okta - - CORRECT ANSWERS ✅✅ -Agent can only access
OUs you select to import end users
Group OUs connected to Okta - CORRECT ANSWERS ✅✅ -Agent can only access
OUs you select to import groups
Changing default filter query in your directory environment can? - CORRECT
ANSWERS ✅✅ -Deprovision users
JIT Provisioning - CORRECT ANSWERS ✅✅ -Enables automatic user account
creation in Okta the first time a user authenticates with AD Delegated Authentication, as
well as updates to existing user profiles.
- Imports security group which the user belongs to
To Enable Sync Password? - CORRECT ANSWERS ✅✅ -Delegated Authentication
must be disabled
SSL Pinning Prevents? - CORRECT ANSWERS ✅✅ -Communication with Okta
Server
Use group rules to add users to AD - CORRECT ANSWERS ✅✅ -Create Group that
when added to the group they are added to AD
Configuring Import and Account Settings - CORRECT ANSWERS ✅✅ -- Import
settings to add users and groups from designated AD domain into Okta.
- Includes which users and group OUs to import from
- Whether to use JIT provisioning
