Okta Certified Professional Exam — Questions and Answers

Question 1: An administrator needs to connect on-premises Active Directory to Okta. Which network requirement applies to the Okta AD Agent?

A site-to-site VPN to Okta's data center
Inbound port 389 open from the internet
Outbound HTTPS (port 443) to the Okta org only (Correct answer)
Inbound port 443 to the domain controller

Correct answer: Outbound HTTPS (port 443) to the Okta org only

The AD Agent initiates outbound HTTPS connections to Okta, so no inbound firewall ports are required.

Question 2: What is the foundational principle of professional standards and ethics in the OKTA Certified Professional field?

Avoiding all challenging situations
Maintaining competence, integrity, and service to stakeholders (Correct answer)
Following the easiest path available
Maximizing personal advancement

Correct answer: Maintaining competence, integrity, and service to stakeholders

The foundational principles of professional standards and ethics in OKTA Certified Professional center on maintaining competence, integrity, and quality service.

Question 3: How should challenges in continuing education requirements be addressed?

Avoid challenges and stick to familiar tasks
Delegate all challenges to supervisors
Ignore challenges until they resolve themselves
Apply systematic problem-solving, seek expert guidance when needed, and document decisions (Correct answer)

Correct answer: Apply systematic problem-solving, seek expert guidance when needed, and document decisions

Systematic problem-solving combined with appropriate consultation and documentation ensures challenges are addressed effectively.

Question 4: How does Okta handle password policies?

With third-party plugins only
In billing settings
Using firewall rules
Via security policy configuration (Correct answer)

Correct answer: Via security policy configuration

Okta handles password policies through its robust security policy configuration, allowing administrators to define strict rules for user passwords. These policies can enforce requirements such as minimum length, complexity (e.g., uppercase, lowercase, numbers, special characters), password history, and expiration periods. This ensures strong password hygiene and enhances overall security across the organization.

Question 5: What is credential stuffing?

Guessing one common password across many accounts
Intercepting traffic on public Wi-Fi
Embedding credentials in source code
Using username/password pairs leaked from other breaches to try logins (Correct answer)

Correct answer: Using username/password pairs leaked from other breaches to try logins

Credential stuffing exploits password reuse by replaying breached credential pairs at scale.

Question 6: An organization wants to ensure that Okta admin actions are recorded and can be reviewed during a compliance audit. Which built-in Okta capability satisfies this requirement?

Okta ThreatInsight threat reports
Okta Workflows audit tables
The Application Usage Report
System Log, which records all admin and user events with actor details (Correct answer)

Correct answer: System Log, which records all admin and user events with actor details

The System Log records every admin and user action within Okta including the actor's identity, timestamp, and event details, providing a complete audit trail for compliance reviews.

Question 7: Which user group can be assigned a specific security policy?

Any defined user group (Correct answer)
Unverified users only
All guests
Only administrators

Correct answer: Any defined user group

Okta's security policies are highly flexible and can be assigned to any defined user group within the Okta environment. This granular control allows administrators to implement specific authentication requirements and access rules tailored to different departments, roles, or risk profiles. For example, a group of privileged users might be assigned a stricter MFA policy than general employees.

Question 8: What is the recommended way to provide a read-only view of the Okta Admin Console to an auditor without granting full admin rights?

Export all reports as CSVs and email them to the auditor
Share the super admin credentials under a monitored session
Create a custom app with a dashboard iframe of the Admin Console
Assign the auditor the 'Read-Only Administrator' role in Okta (Correct answer)

Correct answer: Assign the auditor the 'Read-Only Administrator' role in Okta

Okta's built-in 'Read-Only Administrator' role grants access to view all configuration and reports without the ability to make changes, ideal for auditors.

Question 9: Which directory services can be integrated with Okta?

None
AD & LDAP (Correct answer)
Only Azure
Only LDAP

Correct answer: AD & LDAP

Okta is designed to integrate seamlessly with various enterprise directory services to leverage existing identity infrastructure. The most common and widely supported directory services for integration with Okta are Microsoft Active Directory (AD) and LDAP (Lightweight Directory Access Protocol). These integrations allow organizations to synchronize users and groups from their on-premises directories to Okta.

Question 10: How should professionals apply core concepts and principles in daily practice?

Only when being evaluated
Apply principles selectively based on convenience
Consistently integrate best practices into every aspect of professional work (Correct answer)
Follow standards only for complex tasks

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 11: What is the recommended way to store API tokens used for integrations with an identity platform?

In plaintext environment files committed to Git
Hard-coded in application source code
In a shared spreadsheet
In a secrets manager with restricted access and periodic rotation (Correct answer)

Correct answer: In a secrets manager with restricted access and periodic rotation

Secrets managers protect tokens with access controls, auditing, and rotation, avoiding exposure in code repositories.

Question 12: Which approach best reduces MFA fatigue (push bombing) attacks?

Send more push notifications so users get used to them
Allow unlimited push retries
Use number matching or phishing-resistant authenticators and rate-limit push requests (Correct answer)
Replace MFA with security questions

Correct answer: Use number matching or phishing-resistant authenticators and rate-limit push requests

Number matching and rate limiting stop users from blindly approving attacker-initiated prompts.

Question 13: What is the purpose of periodic access certification (access reviews) campaigns?

To increase license counts
To migrate users between directories
To reset all user passwords
To verify that users' current access is still appropriate and remove what is not (Correct answer)

Correct answer: To verify that users' current access is still appropriate and remove what is not

Access reviews let managers or app owners confirm or revoke entitlements, preventing privilege creep.

Question 14: What is the default retention period for events in the Okta System Log?

1 year
30 days
90 days (Correct answer)
7 days

Correct answer: 90 days

Okta retains System Log events for 90 days by default; organizations needing longer retention should export logs to a SIEM or log management system.

Question 15: What does Okta's Lifecycle Management automate?

User provisioning (Correct answer)
Manual approvals
Time tracking
Expense reporting

Correct answer: User provisioning

Okta's Lifecycle Management is a powerful feature designed to automate the entire user lifecycle within an organization. Its primary function is user provisioning, which includes automatically creating, updating, and deactivating user accounts across various applications and directories. This automation significantly reduces manual administrative tasks and improves operational efficiency.

Question 16: What is the function of Okta's 'Delegated Authentication' feature?

Lets Okta validate user credentials against an on-premises Active Directory or LDAP server (Correct answer)
Enables service accounts to authenticate without MFA
Delegates MFA enforcement to a third-party identity provider
Allows end users to authenticate on behalf of other users

Correct answer: Lets Okta validate user credentials against an on-premises Active Directory or LDAP server

Delegated Authentication allows Okta to pass username/password credentials to an on-premises AD or LDAP directory for validation, useful during phased migrations.

Question 17: What does the Okta Admin Console 'Dashboard' tab display?

A list of all pending provisioning tasks across connected apps
A summary of recent sign-in activity, failed logins, and MFA usage metrics (Correct answer)
A live map of all user geo-locations authenticating in real time
Configuration health scores for each integrated application

Correct answer: A summary of recent sign-in activity, failed logins, and MFA usage metrics

The Okta Admin Console Dashboard provides an at-a-glance summary of sign-in activity, authentication failures, MFA adoption, and other key operational metrics.

Question 18: What does the Okta Universal Directory provide?

Multi-factor token storage
VPN management
System logs only
Identity synchronization across systems (Correct answer)

Correct answer: Identity synchronization across systems

The Okta Universal Directory serves as a highly scalable and flexible cloud-based repository for all user identities within an organization. Its primary function is to consolidate user profiles from various sources, such as Active Directory or HR systems, and then synchronize this identity data across all connected applications. This ensures consistent user information and streamlined identity management throughout the enterprise.

Question 19: When troubleshooting a SAML SSO failure, which Okta tool can help decode and inspect the SAML assertion being sent to the service provider?

Browser developer tools with a SAML tracer extension (Correct answer)
Okta Identity Engine debugger
Okta Verify diagnostic mode
Okta System Log SAML assertion viewer

Correct answer: Browser developer tools with a SAML tracer extension

A browser-based SAML tracer extension (e.g., SAML-tracer for Firefox/Chrome) captures and decodes SAML requests and responses, making it the standard tool for diagnosing SSO failures.

Question 20: How should challenges in core concepts and principles be addressed?

Apply systematic problem-solving, seek expert guidance when needed, and document decisions (Correct answer)
Ignore challenges until they resolve themselves
Avoid challenges and stick to familiar tasks
Delegate all challenges to supervisors

Correct answer: Apply systematic problem-solving, seek expert guidance when needed, and document decisions

Systematic problem-solving combined with appropriate consultation and documentation ensures challenges are addressed effectively.

Question 21: What type of service architecture does Okta use to deliver its identity platform to customers?

Hybrid appliance requiring local database
Multi-tenant cloud SaaS (Correct answer)
Single-tenant on-premises appliance
Customer-hosted virtual machine

Correct answer: Multi-tenant cloud SaaS

Okta is a multi-tenant SaaS platform where each customer receives an isolated org in Okta's cloud.

Question 22: Which protocol is commonly used by Okta for single sign-on (SSO)?

SAML (Correct answer)
FTP
SMTP
SNMP

Correct answer: SAML

SAML (Security Assertion Markup Language) is an XML-based open standard widely used by Okta for enabling single sign-on (SSO). SAML allows an identity provider, like Okta, to securely exchange authentication and authorization data with a service provider (an application). This means users can log in once to Okta and gain seamless access to multiple integrated applications without needing to re-enter their credentials.

Question 23: How should challenges in professional standards and ethics be addressed?

Avoid challenges and stick to familiar tasks
Delegate all challenges to supervisors
Ignore challenges until they resolve themselves
Apply systematic problem-solving, seek expert guidance when needed, and document decisions (Correct answer)

Correct answer: Apply systematic problem-solving, seek expert guidance when needed, and document decisions

Systematic problem-solving combined with appropriate consultation and documentation ensures challenges are addressed effectively.

Question 24: What quality assurance measure supports safety and compliance?

Regular self-assessment, peer review, and adherence to established standards (Correct answer)
Quality only matters for new practitioners
Quality checks are unnecessary for experienced professionals
Annual review is sufficient

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 25: Why is it a best practice to maintain at least two break-glass super administrator accounts in an identity platform?

To bypass audit logging during routine changes
To allow shared credentials across the help desk
To double the number of licenses available
To preserve emergency access if the primary admin or federation path fails (Correct answer)

Correct answer: To preserve emergency access if the primary admin or federation path fails

Break-glass accounts provide recovery access during outages or lockouts and should be tightly secured and monitored.

Question 26: Which protocol helps automate user updates in Okta?

SMTP
FTP
SCIM (Correct answer)
TLS

Correct answer: SCIM

SCIM (System for Cross-domain Identity Management) is an open standard protocol specifically designed to automate the exchange of user identity information between identity providers like Okta and various service providers (applications). It enables automated user provisioning, deprovisioning, and attribute updates, streamlining identity lifecycle management across different systems. This protocol ensures efficient and consistent user data synchronization.

Question 27: Where in the Okta Admin Console can administrators find a searchable log of all events that occur in the Okta tenant?

Reports > System Log (Correct answer)
Security > Identity Engine
Dashboard > Overview
Applications > Audit Trail

Correct answer: Reports > System Log

The System Log under Reports records every event in the Okta tenant — authentications, policy changes, provisioning events — and is searchable by event type, actor, and time.

Question 28: What is Okta primarily used for?

Cloud storage
Email hosting
Virtual machine deployment
Identity & access management (Correct answer)

Correct answer: Identity & access management

Okta is primarily used for Identity and Access Management (IAM), a critical security discipline that ensures the right individuals have access to the right resources at the right times. Okta provides cloud-based services like single sign-on (SSO), multi-factor authentication (MFA), and user provisioning, centralizing identity control and enhancing security across an organization's applications and devices. It simplifies how users securely connect to technology.

Question 29: What is the role of the 'Okta' connector in Okta Workflows?

It configures RADIUS authentication for VPN access
It connects Workflows to external identity providers via SAML
It provides pre-built action and event cards for the Okta platform (Correct answer)
It enables Workflows to read raw SQL from the Okta database

Correct answer: It provides pre-built action and event cards for the Okta platform

The Okta connector in Workflows includes a library of pre-built action cards (e.g., Create User, Assign App) and event trigger cards specific to the Okta platform.

Question 30: Which syntax does Okta use to transform attributes in profile mappings and group rules, such as String.toLowerCase(user.email)?

XPath
SAML Assertion Query
Okta Expression Language (Correct answer)
SCIM filter syntax

Correct answer: Okta Expression Language

Okta Expression Language is used in mappings, group rules, and claims to reference and transform attributes.

Question 31: Which protocol is commonly used in Okta for authentication?

POP3
ARP
HTTP
OAuth 2.0 (Correct answer)

Correct answer: OAuth 2.0

OAuth 2.0 is an authorization framework commonly used in Okta for delegated authorization. It allows applications to obtain limited access to user accounts on an HTTP service without sharing the user's credentials directly. While SAML and OpenID Connect are also crucial for authentication and SSO, OAuth 2.0 specifically enables secure, token-based authorization for API access and resource sharing.

Question 32: How are authentication factors managed in Okta?

Through email only
In application logs
Using device firmware
Via admin security policies (Correct answer)

Correct answer: Via admin security policies

In Okta, authentication factors, including which MFA factors are available and when they are required, are managed and enforced via admin security policies. These policies allow administrators to define granular rules based on user groups, network zones, device types, and application sensitivity. This provides comprehensive control over the organization's authentication security posture.

Question 33: What Okta Workflows feature allows administrators to pass data from a parent Flow to a Helper Flow?

Delegated Flow Tokens
Global Variables stored in Okta UD
Shared Tables
Input/Output parameters on Helper Flows (Correct answer)

Correct answer: Input/Output parameters on Helper Flows

Helper Flows define named Input parameters that receive values from the parent Flow, and Output parameters that return results back to the caller.

Question 34: What role does OAuth 2.0 play in Okta integration?

Enable secure delegated access (Correct answer)
Block access
Restart sessions
Create backup copies

Correct answer: Enable secure delegated access

OAuth 2.0 plays a crucial role in Okta integration by enabling secure delegated access for applications. It is an authorization framework that allows a user to grant a third-party application limited access to their resources on another service (like Okta) without sharing their actual credentials. This mechanism enhances security and privacy by issuing access tokens with specific permissions.

Question 35: How should core concepts and principles knowledge be maintained and updated?

Initial training provides lifelong competence
Through continuous professional development, current literature review, and professional networking (Correct answer)
Learning stops after certification
Knowledge updates are only needed every five years

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 36: Which Okta feature automatically assigns users to groups based on conditions evaluated against their profile attributes?

Group Rules (Correct answer)
Group Push
Group Sync
Group Federation

Correct answer: Group Rules

Group Rules in Okta evaluate user profile attributes against defined conditions and automatically add or remove users from groups when those conditions are met.

Question 37: What is the purpose of Multi-Factor Authentication (MFA)?

Delete browser cookies
Verify identity using multiple factors (Correct answer)
Improve bandwidth
Sync data to cloud

Correct answer: Verify identity using multiple factors

Multi-Factor Authentication (MFA) is a security enhancement that requires users to provide two or more distinct types of verification factors to prove their identity. Instead of relying solely on a password, MFA combines 'something you know' (like a password), 'something you have' (like a phone or token), or 'something you are' (like a fingerprint). This layered approach significantly strengthens security by making it much harder for unauthorized users to gain access.

Question 38: An Okta admin needs to receive an email alert when a specific event type (e.g., admin privilege granted) occurs. Which feature should they configure?

Event Hooks (Correct answer)
Okta ThreatInsight
System Log Export
Inline Hooks

Correct answer: Event Hooks

Event Hooks allow Okta to send real-time HTTP POST notifications to an external endpoint when specified event types occur, enabling alerting integrations.

Question 39: What does the 'Assign' card do in an Okta Workflow?

Sends an email notification to an end user
Sets a variable value for use later in the Flow (Correct answer)
Creates a new group in Okta's Universal Directory
Assigns an app to a user in the Admin Console

Correct answer: Sets a variable value for use later in the Flow

The Assign card stores a computed or static value in a named variable that can be referenced by subsequent cards in the Flow.

Question 40: What does the Okta Universal Directory enable?

Spam filtering
Central identity management (Correct answer)
Data export
Virus scanning

Correct answer: Central identity management

The Okta Universal Directory serves as a centralized, cloud-based repository for all user identities, profiles, and group information within an organization. It aggregates identity data from various sources into a single, unified directory. This enables central identity management, providing a single source of truth for all user attributes and simplifying access control across all applications.

Question 41: What happens when a user is deactivated in Okta?

They receive a warning
They get promoted
Access is removed (Correct answer)
Settings reset

Correct answer: Access is removed

When a user is deactivated in Okta, a critical security action occurs: their access to all applications managed by Okta is immediately removed. This ensures that the user can no longer log in or access any sensitive company resources. Deactivation is a fundamental step in offboarding processes, preventing unauthorized access by former employees or compromised accounts.

Question 42: What is the benefit of Just-In-Time (JIT) provisioning?

Delays access
Increases bandwidth
Reduces admin workload (Correct answer)
Improves data encryption

Correct answer: Reduces admin workload

Just-In-Time (JIT) provisioning is a method where user accounts are automatically created in target applications the first time a user attempts to log in. This eliminates the need for administrators to manually pre-create accounts for new users. Consequently, JIT provisioning significantly reduces the administrative workload associated with user onboarding and account management.

Question 43: Which Okta feature helps prevent brute-force attacks?

Data caching
Policy enforcement
Account lockout (Correct answer)
Cookie deletion

Correct answer: Account lockout

Account lockout is a critical security feature implemented in Okta to prevent brute-force attacks. It automatically disables or locks a user account after a specified number of consecutive failed login attempts. This mechanism thwarts attackers from repeatedly guessing passwords, thereby protecting user accounts from unauthorized access.

Question 44: Which open standard does Okta use for automated user provisioning and deprovisioning to cloud apps?

Kerberos
SCIM (Correct answer)
SAML 2.0
RADIUS

Correct answer: SCIM

SCIM is the standard REST-based protocol Okta uses for lifecycle provisioning to applications.

Question 45: What can be used to automate app assignment in Okta?

Print commands
Group rules (Correct answer)
Manual selection
Firewall ports

Correct answer: Group rules

Okta utilizes group rules to automate the assignment of applications to users. When users are added to specific groups, these rules automatically provision them with access to the associated applications. This method streamlines identity management, ensures consistent access control, and eliminates the need for manual app assignment for individual users.

Question 46: What quality assurance measure supports industry best practices?

Regular self-assessment, peer review, and adherence to established standards (Correct answer)
Quality only matters for new practitioners
Quality checks are unnecessary for experienced professionals
Annual review is sufficient

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 47: How can an Okta Workflow Flow receive data from an external system via HTTP?

By enabling SCIM provisioning on the external application
By configuring an Okta RADIUS agent on the external system
By creating an Event Hook for the external system in Okta Admin
By using an API Endpoint trigger to expose a webhook URL (Correct answer)

Correct answer: By using an API Endpoint trigger to expose a webhook URL

An API Endpoint trigger exposes a unique HTTPS URL that external systems can POST data to, initiating the Workflow Flow with the supplied payload.

Question 48: Which approach is a best practice for testing changes to authentication policies before production rollout?

Disable logging while testing
Ask users to report problems after rollout
Apply changes directly to all users during business hours
Test in a preview/sandbox tenant or with a pilot group first (Correct answer)

Correct answer: Test in a preview/sandbox tenant or with a pilot group first

Sandbox tenants and pilot groups reveal misconfigurations before they cause widespread lockouts.

Question 49: An admin notices a sudden spike in failed authentication attempts from a single IP address in the System Log. What Okta feature should they use to block that IP?

Disable the affected user accounts
Enable Okta FastPass for all users
Add the IP to a Network Zone and create a blocking sign-on policy rule (Correct answer)
Adjust the Global Session Policy timeout

Correct answer: Add the IP to a Network Zone and create a blocking sign-on policy rule

By adding the offending IP to a Network Zone configured as a 'Blocked' zone or creating a sign-on policy rule that denies access from that zone, admins can stop the attack.

Question 50: What quality assurance measure supports assessment and evaluation?

Annual review is sufficient
Quality checks are unnecessary for experienced professionals
Regular self-assessment, peer review, and adherence to established standards (Correct answer)
Quality only matters for new practitioners

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 51: What is a common use case for directory integration in Okta?

System monitoring
User identity synchronization (Correct answer)
Cloud backup
Email filtering

Correct answer: User identity synchronization

A common and essential use case for directory integration in Okta is user identity synchronization. This process ensures that user profiles, attributes, and group memberships are consistently updated between existing directories (like Active Directory or LDAP) and Okta's Universal Directory. By synchronizing identities, Okta maintains a single, accurate source of truth for user information across all connected applications.

Question 52: Which of the following is a common factor in MFA?

Screen resolution
Fingerprint (Correct answer)
Date of birth
IP address

Correct answer: Fingerprint

MFA factors are typically categorized into knowledge (something you know), possession (something you have), and inherence (something you are). A fingerprint falls under the 'something you are' category, known as an inherence factor. It is a common and highly secure biometric method used in MFA to verify a user's identity.

Question 53: What is a security policy in Okta?

Authentication rule set (Correct answer)
Device log history
User settings backup
List of admin users

Correct answer: Authentication rule set

In Okta, a security policy is a defined set of rules that dictate how users authenticate and what access they are granted. These policies specify requirements for passwords, Multi-Factor Authentication (MFA), session lifetimes, and conditional access based on factors like network, device, or location. They are fundamental to enforcing an organization's security posture and ensuring compliance.

Question 54: Which Okta component integrates with Active Directory?

Okta Integration Network
Okta AD Agent (Correct answer)
Universal Directory
Lifecycle API

Correct answer: Okta AD Agent

The Okta AD Agent is a crucial component that facilitates secure communication and integration between Okta's cloud platform and an organization's on-premises Active Directory. This agent allows Okta to import users and groups from AD, authenticate users against AD, and provision users back to AD. It acts as a bridge, enabling seamless identity synchronization and management between the two systems.

Question 55: How should professionals apply assessment and evaluation in daily practice?

Only when being evaluated
Consistently integrate best practices into every aspect of professional work (Correct answer)
Follow standards only for complex tasks
Apply principles selectively based on convenience

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 56: What quality assurance measure supports communication and documentation?

Annual review is sufficient
Quality checks are unnecessary for experienced professionals
Quality only matters for new practitioners
Regular self-assessment, peer review, and adherence to established standards (Correct answer)

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 57: What quality assurance measure supports professional standards and ethics?

Regular self-assessment, peer review, and adherence to established standards (Correct answer)
Annual review is sufficient
Quality only matters for new practitioners
Quality checks are unnecessary for experienced professionals

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 58: In SAML, what best practice helps prevent assertion tampering?

Disabling certificate validation at the SP
Digitally signing assertions and validating the signature at the service provider (Correct answer)
Using the same certificate for all tenants forever
Sending assertions over plain HTTP

Correct answer: Digitally signing assertions and validating the signature at the service provider

Signed assertions let the SP verify integrity and that the assertion was issued by the trusted IdP.

Question 59: Why is directory integration important for enterprise identity?

Improves load times
Boosts graphics
Provides centralized control (Correct answer)
Limits storage

Correct answer: Provides centralized control

Directory integration is paramount for enterprise identity because it consolidates user identities from disparate sources into a central platform like Okta. This centralization provides administrators with a single point of control over user access, profiles, and policies across all connected applications and resources. It simplifies identity management, enhances security, and ensures consistent user experiences.

Question 60: What is adaptive authentication?

Encrypts all data
Adjusts authentication based on risk (Correct answer)
Always requires 2FA
Logs out users automatically

Correct answer: Adjusts authentication based on risk

Adaptive authentication, also known as risk-based authentication, dynamically adjusts the level of authentication required based on contextual factors and the perceived risk of a login attempt. For instance, if a user logs in from an unusual location or device, the system might prompt for an additional MFA factor. This approach balances strong security with user convenience by only requiring stronger authentication when necessary.

Okta Certified Professional Exam

This exam validates a candidate's foundational knowledge and hands-on experience with Okta's core workforce identity products, including user management, application integration, and basic security features.

Questions

90 min

Time Limit

65%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

certification.okta.com — Test delivery, fees, passing score, renewal, retake fee, score release, exam format, time limit · verified Oct 2026