Okta Certified Professional Exam — Questions and Answers

Question 1: What function does Okta's Identity Engine serve?

Block traffic
Replace DNS servers
Manage encryption keys
Support adaptive authentication flows (Correct answer)

Correct answer: Support adaptive authentication flows

Okta's Identity Engine is a powerful, policy-driven framework that enables highly customizable and adaptive authentication flows. It allows organizations to define granular security policies based on contextual factors like user location, device, or network, dynamically adjusting authentication requirements. This supports advanced use cases such as passwordless login, step-up authentication, and risk-based access decisions, providing a flexible and secure user experience.

Question 2: How should professionals apply core concepts and principles in daily practice?

Consistently integrate best practices into every aspect of professional work (Correct answer)
Apply principles selectively based on convenience
Only when being evaluated
Follow standards only for complex tasks

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 3: What is a common use case for directory integration in Okta?

User identity synchronization (Correct answer)
Email filtering
System monitoring
Cloud backup

Correct answer: User identity synchronization

A common and essential use case for directory integration in Okta is user identity synchronization. This process ensures that user profiles, attributes, and group memberships are consistently updated between existing directories (like Active Directory or LDAP) and Okta's Universal Directory. By synchronizing identities, Okta maintains a single, accurate source of truth for user information across all connected applications.

Question 4: What role does OAuth 2.0 play in Okta integration?

Enable secure delegated access (Correct answer)
Restart sessions
Create backup copies
Block access

Correct answer: Enable secure delegated access

OAuth 2.0 plays a crucial role in Okta integration by enabling secure delegated access for applications. It is an authorization framework that allows a user to grant a third-party application limited access to their resources on another service (like Okta) without sharing their actual credentials. This mechanism enhances security and privacy by issuing access tokens with specific permissions.

Question 5: An admin notices a sudden spike in failed authentication attempts from a single IP address in the System Log. What Okta feature should they use to block that IP?

Add the IP to a Network Zone and create a blocking sign-on policy rule (Correct answer)
Enable Okta FastPass for all users
Disable the affected user accounts
Adjust the Global Session Policy timeout

Correct answer: Add the IP to a Network Zone and create a blocking sign-on policy rule

By adding the offending IP to a Network Zone configured as a 'Blocked' zone or creating a sign-on policy rule that denies access from that zone, admins can stop the attack.

Question 6: How should assessment and evaluation knowledge be maintained and updated?

Learning stops after certification
Initial training provides lifelong competence
Through continuous professional development, current literature review, and professional networking (Correct answer)
Knowledge updates are only needed every five years

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 7: How does Okta handle password policies?

With third-party plugins only
Using firewall rules
Via security policy configuration (Correct answer)
In billing settings

Correct answer: Via security policy configuration

Okta handles password policies through its robust security policy configuration, allowing administrators to define strict rules for user passwords. These policies can enforce requirements such as minimum length, complexity (e.g., uppercase, lowercase, numbers, special characters), password history, and expiration periods. This ensures strong password hygiene and enhances overall security across the organization.

Question 8: Which protocol is commonly used by Okta for single sign-on (SSO)?

SAML (Correct answer)
FTP
SMTP
SNMP

Correct answer: SAML

SAML (Security Assertion Markup Language) is an XML-based open standard widely used by Okta for enabling single sign-on (SSO). SAML allows an identity provider, like Okta, to securely exchange authentication and authorization data with a service provider (an application). This means users can log in once to Okta and gain seamless access to multiple integrated applications without needing to re-enter their credentials.

Question 9: What is the default retention period for events in the Okta System Log?

1 year
90 days (Correct answer)
30 days
7 days

Correct answer: 90 days

Okta retains System Log events for 90 days by default; organizations needing longer retention should export logs to a SIEM or log management system.

Question 10: What does the Okta Universal Directory enable?

Data export
Central identity management (Correct answer)
Spam filtering
Virus scanning

Correct answer: Central identity management

The Okta Universal Directory serves as a centralized, cloud-based repository for all user identities, profiles, and group information within an organization. It aggregates identity data from various sources into a single, unified directory. This enables central identity management, providing a single source of truth for all user attributes and simplifying access control across all applications.

Question 11: What is adaptive authentication?

Logs out users automatically
Always requires 2FA
Adjusts authentication based on risk (Correct answer)
Encrypts all data

Correct answer: Adjusts authentication based on risk

Adaptive authentication, also known as risk-based authentication, dynamically adjusts the level of authentication required based on contextual factors and the perceived risk of a login attempt. For instance, if a user logs in from an unusual location or device, the system might prompt for an additional MFA factor. This approach balances strong security with user convenience by only requiring stronger authentication when necessary.

Question 12: Which Okta component integrates with Active Directory?

Okta AD Agent (Correct answer)
Lifecycle API
Universal Directory
Okta Integration Network

Correct answer: Okta AD Agent

The Okta AD Agent is a crucial component that facilitates secure communication and integration between Okta's cloud platform and an organization's on-premises Active Directory. This agent allows Okta to import users and groups from AD, authenticate users against AD, and provision users back to AD. It acts as a bridge, enabling seamless identity synchronization and management between the two systems.

Question 13: Which Okta feature helps detect and respond to suspicious user sign-in behavior based on contextual signals like IP reputation and device?

Okta Verify Push
Okta ThreatInsight (Correct answer)
Okta FastPass
Okta Workflows

Correct answer: Okta ThreatInsight

Okta ThreatInsight analyzes sign-in context (IP, device, behavior) to identify and block threats such as credential stuffing and brute-force attacks.

Question 14: What ethical standard governs applied methods and techniques practice?

Ethical standards are optional for certified professionals
Ethics only apply in academic settings
Adherence to the profession's code of ethics and applicable laws and regulations (Correct answer)
Ethics are personal opinions, not professional requirements

Correct answer: Adherence to the profession's code of ethics and applicable laws and regulations

Professional ethics codes and applicable laws provide the framework for ethical practice in every professional field.

Question 15: What is the benefit of Just-In-Time (JIT) provisioning?

Increases bandwidth
Reduces admin workload (Correct answer)
Delays access
Improves data encryption

Correct answer: Reduces admin workload

Just-In-Time (JIT) provisioning is a method where user accounts are automatically created in target applications the first time a user attempts to log in. This eliminates the need for administrators to manually pre-create accounts for new users. Consequently, JIT provisioning significantly reduces the administrative workload associated with user onboarding and account management.

Question 16: What happens when a user is deactivated in Okta?

They receive a warning
Access is removed (Correct answer)
Settings reset
They get promoted

Correct answer: Access is removed

When a user is deactivated in Okta, a critical security action occurs: their access to all applications managed by Okta is immediately removed. This ensures that the user can no longer log in or access any sensitive company resources. Deactivation is a fundamental step in offboarding processes, preventing unauthorized access by former employees or compromised accounts.

Question 17: How can an Okta Workflow Flow receive data from an external system via HTTP?

By using an API Endpoint trigger to expose a webhook URL (Correct answer)
By configuring an Okta RADIUS agent on the external system
By creating an Event Hook for the external system in Okta Admin
By enabling SCIM provisioning on the external application

Correct answer: By using an API Endpoint trigger to expose a webhook URL

An API Endpoint trigger exposes a unique HTTPS URL that external systems can POST data to, initiating the Workflow Flow with the supplied payload.

Question 18: What happens to existing group memberships in a downstream application when you deactivate a Group Rule in Okta?

Users receive email notifications about the upcoming membership change
The application creates an automatic backup of the current group membership state
The rule stops evaluating new changes but existing group memberships remain unchanged (Correct answer)
Users are immediately removed from the group in Okta and lose application access

Correct answer: The rule stops evaluating new changes but existing group memberships remain unchanged

Deactivating a Group Rule in Okta stops the rule from processing future membership changes, but users already in the group due to that rule retain their membership until manually changed.

Question 19: Which Okta feature helps prevent brute-force attacks?

Policy enforcement
Cookie deletion
Data caching
Account lockout (Correct answer)

Correct answer: Account lockout

Account lockout is a critical security feature implemented in Okta to prevent brute-force attacks. It automatically disables or locks a user account after a specified number of consecutive failed login attempts. This mechanism thwarts attackers from repeatedly guessing passwords, thereby protecting user accounts from unauthorized access.

Question 20: How should industry best practices knowledge be maintained and updated?

Through continuous professional development, current literature review, and professional networking (Correct answer)
Initial training provides lifelong competence
Learning stops after certification
Knowledge updates are only needed every five years

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 21: What is one benefit of Okta’s cloud-native approach?

Scalability & zero downtime (Correct answer)
Requires local server installation
Manual software patching
Fixed infrastructure

Correct answer: Scalability & zero downtime

Okta's cloud-native approach means its services are built to operate efficiently within cloud environments. This architecture inherently provides high scalability, allowing the platform to seamlessly handle increasing user loads and data volumes. It also contributes to exceptional reliability and zero downtime, as cloud infrastructure is designed with redundancy and resilience in mind.

Question 22: An admin needs to force all users to re-authenticate immediately due to a suspected breach. What is the fastest way to accomplish this?

Disable and re-enable each application
Reset all user passwords from the Admin Console
Change the Okta org URL to invalidate cookies
Revoke all active sessions globally via the API or per-user 'Clear Sessions' action (Correct answer)

Correct answer: Revoke all active sessions globally via the API or per-user 'Clear Sessions' action

Using the Okta API's session revocation endpoint (or the per-user 'Clear Sessions' action) immediately invalidates all active sessions, forcing users to re-authenticate.

Question 23: What is the role of the 'Okta' connector in Okta Workflows?

It connects Workflows to external identity providers via SAML
It enables Workflows to read raw SQL from the Okta database
It configures RADIUS authentication for VPN access
It provides pre-built action and event cards for the Okta platform (Correct answer)

Correct answer: It provides pre-built action and event cards for the Okta platform

The Okta connector in Workflows includes a library of pre-built action cards (e.g., Create User, Assign App) and event trigger cards specific to the Okta platform.

Question 24: Which of the following is a common factor in MFA?

IP address
Date of birth
Fingerprint (Correct answer)
Screen resolution

Correct answer: Fingerprint

MFA factors are typically categorized into knowledge (something you know), possession (something you have), and inherence (something you are). A fingerprint falls under the 'something you are' category, known as an inherence factor. It is a common and highly secure biometric method used in MFA to verify a user's identity.

Question 25: What ethical standard governs communication and documentation practice?

Ethics only apply in academic settings
Adherence to the profession's code of ethics and applicable laws and regulations (Correct answer)
Ethical standards are optional for certified professionals
Ethics are personal opinions, not professional requirements

Correct answer: Adherence to the profession's code of ethics and applicable laws and regulations

Professional ethics codes and applicable laws provide the framework for ethical practice in every professional field.

Question 26: What query language does Okta's System Log support for advanced filtering?

Okta Expression Language (OEL) filters (Correct answer)
SQL
SCIM filter syntax
SCQL

Correct answer: Okta Expression Language (OEL) filters

Okta's System Log supports Okta Expression Language (OEL)-based filter expressions in the search bar, allowing complex queries by event type, actor, target, and more.

Question 27: Why is directory integration important for enterprise identity?

Limits storage
Provides centralized control (Correct answer)
Boosts graphics
Improves load times

Correct answer: Provides centralized control

Directory integration is paramount for enterprise identity because it consolidates user identities from disparate sources into a central platform like Okta. This centralization provides administrators with a single point of control over user access, profiles, and policies across all connected applications and resources. It simplifies identity management, enhances security, and ensures consistent user experiences.

Question 28: An Okta admin needs to receive an email alert when a specific event type (e.g., admin privilege granted) occurs. Which feature should they configure?

Okta ThreatInsight
System Log Export
Event Hooks (Correct answer)
Inline Hooks

Correct answer: Event Hooks

Event Hooks allow Okta to send real-time HTTP POST notifications to an external endpoint when specified event types occur, enabling alerting integrations.

Question 29: Where in the Okta Admin Console can administrators find a searchable log of all events that occur in the Okta tenant?

Applications > Audit Trail
Security > Identity Engine
Reports > System Log (Correct answer)
Dashboard > Overview

Correct answer: Reports > System Log

The System Log under Reports records every event in the Okta tenant — authentications, policy changes, provisioning events — and is searchable by event type, actor, and time.

Question 30: What is the role of the Okta App Catalog?

Access audit logs
Okta troubleshooting tools
Pre-configured app templates (Correct answer)
List of blocked apps

Correct answer: Pre-configured app templates

The Okta App Catalog serves as a comprehensive library of pre-configured application templates. These templates simplify the integration process by providing ready-to-use settings for single sign-on (SSO) and user provisioning for a vast array of enterprise applications. This significantly reduces the time and effort required to connect new applications to the Okta platform.

Question 31: What is the foundational principle of continuing education requirements in the OKTA Certified Professional field?

Following the easiest path available
Avoiding all challenging situations
Maintaining competence, integrity, and service to stakeholders (Correct answer)
Maximizing personal advancement

Correct answer: Maintaining competence, integrity, and service to stakeholders

The foundational principles of continuing education requirements in OKTA Certified Professional center on maintaining competence, integrity, and quality service.

Question 32: How should challenges in core concepts and principles be addressed?

Delegate all challenges to supervisors
Avoid challenges and stick to familiar tasks
Ignore challenges until they resolve themselves
Apply systematic problem-solving, seek expert guidance when needed, and document decisions (Correct answer)

Correct answer: Apply systematic problem-solving, seek expert guidance when needed, and document decisions

Systematic problem-solving combined with appropriate consultation and documentation ensures challenges are addressed effectively.

Question 33: Which user group can be assigned a specific security policy?

Unverified users only
Any defined user group (Correct answer)
All guests
Only administrators

Correct answer: Any defined user group

Okta's security policies are highly flexible and can be assigned to any defined user group within the Okta environment. This granular control allows administrators to implement specific authentication requirements and access rules tailored to different departments, roles, or risk profiles. For example, a group of privileged users might be assigned a stricter MFA policy than general employees.

Question 34: What is the purpose of the built-in 'Everyone' group in Okta?

A special group that automatically contains all active users and cannot be manually modified (Correct answer)
A group that includes all users, active and deactivated, for auditing purposes
A group used to assign public-facing applications to external users
A default admin group with organization-wide administrative privileges

Correct answer: A special group that automatically contains all active users and cannot be manually modified

The 'Everyone' group is a built-in Okta group that automatically contains all active users in the organization and cannot be manually managed or modified.

Question 35: What quality assurance measure supports continuing education requirements?

Quality only matters for new practitioners
Regular self-assessment, peer review, and adherence to established standards (Correct answer)
Quality checks are unnecessary for experienced professionals
Annual review is sufficient

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 36: Which architectural model does Okta follow?

On-premise only
Single-tenant
Multi-tenant cloud (Correct answer)
Peer-to-peer

Correct answer: Multi-tenant cloud

Okta follows a multi-tenant cloud architectural model. In this model, a single instance of Okta's software application serves multiple customers, or 'tenants,' each with their data securely isolated from others. This architecture allows Okta to offer high scalability, cost-efficiency, and continuous updates to all its customers without requiring individual on-premise deployments, making it a flexible and robust solution.

Question 37: What is an Okta integration network?

Pre-built app integrations (Correct answer)
A coding tool
Mobile device interface
Database schema tool

Correct answer: Pre-built app integrations

The Okta Integration Network (OIN) is a comprehensive catalog of thousands of pre-built integrations with popular cloud and on-premise applications. These ready-to-use integrations significantly simplify the process of connecting Okta to various services, enabling quick setup of single sign-on (SSO), user provisioning, and deprovisioning. This network drastically reduces the effort and time required for IT teams to manage access across their application ecosystem.

Question 38: What is Okta primarily used for?

Email hosting
Virtual machine deployment
Identity & access management (Correct answer)
Cloud storage

Correct answer: Identity & access management

Okta is primarily used for Identity and Access Management (IAM), a critical security discipline that ensures the right individuals have access to the right resources at the right times. Okta provides cloud-based services like single sign-on (SSO), multi-factor authentication (MFA), and user provisioning, centralizing identity control and enhancing security across an organization's applications and devices. It simplifies how users securely connect to technology.

Question 39: How should safety and compliance knowledge be maintained and updated?

Through continuous professional development, current literature review, and professional networking (Correct answer)
Initial training provides lifelong competence
Learning stops after certification
Knowledge updates are only needed every five years

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 40: What is the function of Okta's 'Delegated Authentication' feature?

Allows end users to authenticate on behalf of other users
Delegates MFA enforcement to a third-party identity provider
Enables service accounts to authenticate without MFA
Lets Okta validate user credentials against an on-premises Active Directory or LDAP server (Correct answer)

Correct answer: Lets Okta validate user credentials against an on-premises Active Directory or LDAP server

Delegated Authentication allows Okta to pass username/password credentials to an on-premises AD or LDAP directory for validation, useful during phased migrations.

Question 41: Which protocol helps automate user updates in Okta?

FTP
TLS
SCIM (Correct answer)
SMTP

Correct answer: SCIM

SCIM (System for Cross-domain Identity Management) is an open standard protocol specifically designed to automate the exchange of user identity information between identity providers like Okta and various service providers (applications). It enables automated user provisioning, deprovisioning, and attribute updates, streamlining identity lifecycle management across different systems. This protocol ensures efficient and consistent user data synchronization.

Question 42: In Okta, when are Group Rules evaluated and applied?

Only when an administrator manually triggers a group rule evaluation from the admin console
On a fixed nightly batch schedule regardless of user activity
Only during initial user creation and never re-evaluated after that
Whenever a relevant user profile attribute is updated, and also on demand when rules are re-run (Correct answer)

Correct answer: Whenever a relevant user profile attribute is updated, and also on demand when rules are re-run

Okta Group Rules are evaluated when relevant user attributes change and can also be triggered on demand, ensuring group memberships stay current with profile data in near-real time.

Question 43: How should professional standards and ethics knowledge be maintained and updated?

Through continuous professional development, current literature review, and professional networking (Correct answer)
Learning stops after certification
Knowledge updates are only needed every five years
Initial training provides lifelong competence

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 44: How should professionals apply assessment and evaluation in daily practice?

Consistently integrate best practices into every aspect of professional work (Correct answer)
Only when being evaluated
Follow standards only for complex tasks
Apply principles selectively based on convenience

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 45: When an application with provisioning enabled is assigned to an Okta group, what happens when a new user is added to that group?

The user must manually accept the application assignment from their End User Dashboard
The user is automatically provisioned into the application according to the provisioning configuration (Correct answer)
The application generates a new account only after an admin explicitly approves the assignment
The user is added to the group but must be separately and manually provisioned in the application

Correct answer: The user is automatically provisioned into the application according to the provisioning configuration

When provisioning is enabled for an application assigned to a group, adding a user to that group triggers automatic provisioning of the user into the application per the configured attribute mappings.

Question 46: An organization wants to ensure that Okta admin actions are recorded and can be reviewed during a compliance audit. Which built-in Okta capability satisfies this requirement?

Okta ThreatInsight threat reports
Okta Workflows audit tables
The Application Usage Report
System Log, which records all admin and user events with actor details (Correct answer)

Correct answer: System Log, which records all admin and user events with actor details

The System Log records every admin and user action within Okta including the actor's identity, timestamp, and event details, providing a complete audit trail for compliance reviews.

Question 47: What does the Okta Universal Directory provide?

Identity synchronization across systems (Correct answer)
VPN management
System logs only
Multi-factor token storage

Correct answer: Identity synchronization across systems

The Okta Universal Directory serves as a highly scalable and flexible cloud-based repository for all user identities within an organization. Its primary function is to consolidate user profiles from various sources, such as Active Directory or HR systems, and then synchronize this identity data across all connected applications. This ensures consistent user information and streamlined identity management throughout the enterprise.

Question 48: What does Okta's Lifecycle Management automate?

User provisioning (Correct answer)
Time tracking
Manual approvals
Expense reporting

Correct answer: User provisioning

Okta's Lifecycle Management is a powerful feature designed to automate the entire user lifecycle within an organization. Its primary function is user provisioning, which includes automatically creating, updating, and deactivating user accounts across various applications and directories. This automation significantly reduces manual administrative tasks and improves operational efficiency.

Question 49: What is the maximum number of concurrent Flow executions Okta Workflows supports by default per tenant?

Unlimited
100 (Correct answer)
50
10

Correct answer: 100

By default, Okta Workflows allows up to 100 concurrent Flow executions per tenant; this limit can be increased for high-volume use cases.

Question 50: What is the purpose of the 'Health Insight' feature in the Okta Admin Console?

To provide proactive recommendations for improving security posture and configuration best practices (Correct answer)
To monitor Okta's infrastructure uptime and SLA metrics
To display real-time CPU and memory usage of the Okta tenant
To alert on upcoming SSL certificate expirations for integrated apps

Correct answer: To provide proactive recommendations for improving security posture and configuration best practices

Health Insight analyzes the Okta tenant's configuration and provides actionable recommendations to address security gaps and align with best practices.

Question 51: What ethical standard governs core concepts and principles practice?

Adherence to the profession's code of ethics and applicable laws and regulations (Correct answer)
Ethical standards are optional for certified professionals
Ethics are personal opinions, not professional requirements
Ethics only apply in academic settings

Correct answer: Adherence to the profession's code of ethics and applicable laws and regulations

Professional ethics codes and applicable laws provide the framework for ethical practice in every professional field.

Question 52: How are authentication factors managed in Okta?

Using device firmware
Through email only
Via admin security policies (Correct answer)
In application logs

Correct answer: Via admin security policies

In Okta, authentication factors, including which MFA factors are available and when they are required, are managed and enforced via admin security policies. These policies allow administrators to define granular rules based on user groups, network zones, device types, and application sensitivity. This provides comprehensive control over the organization's authentication security posture.

Question 53: What ethical standard governs continuing education requirements practice?

Ethics are personal opinions, not professional requirements
Adherence to the profession's code of ethics and applicable laws and regulations (Correct answer)
Ethical standards are optional for certified professionals
Ethics only apply in academic settings

Correct answer: Adherence to the profession's code of ethics and applicable laws and regulations

Professional ethics codes and applicable laws provide the framework for ethical practice in every professional field.

Question 54: Which protocol is commonly used in Okta for authentication?

POP3
ARP
OAuth 2.0 (Correct answer)
HTTP

Correct answer: OAuth 2.0

OAuth 2.0 is an authorization framework commonly used in Okta for delegated authorization. It allows applications to obtain limited access to user accounts on an HTTP service without sharing the user's credentials directly. While SAML and OpenID Connect are also crucial for authentication and SSO, OAuth 2.0 specifically enables secure, token-based authorization for API access and resource sharing.

Question 55: What quality assurance measure supports industry best practices?

Regular self-assessment, peer review, and adherence to established standards (Correct answer)
Quality only matters for new practitioners
Annual review is sufficient
Quality checks are unnecessary for experienced professionals

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 56: Which directory services can be integrated with Okta?

Only LDAP
Only Azure
AD & LDAP (Correct answer)
None

Correct answer: AD & LDAP

Okta is designed to integrate seamlessly with various enterprise directory services to leverage existing identity infrastructure. The most common and widely supported directory services for integration with Okta are Microsoft Active Directory (AD) and LDAP (Lightweight Directory Access Protocol). These integrations allow organizations to synchronize users and groups from their on-premises directories to Okta.

Question 57: How should professionals apply continuing education requirements in daily practice?

Follow standards only for complex tasks
Consistently integrate best practices into every aspect of professional work (Correct answer)
Apply principles selectively based on convenience
Only when being evaluated

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 58: What is a security policy in Okta?

Device log history
Authentication rule set (Correct answer)
User settings backup
List of admin users

Correct answer: Authentication rule set

In Okta, a security policy is a defined set of rules that dictate how users authenticate and what access they are granted. These policies specify requirements for passwords, Multi-Factor Authentication (MFA), session lifetimes, and conditional access based on factors like network, device, or location. They are fundamental to enforcing an organization's security posture and ensuring compliance.

Question 59: What is the purpose of Multi-Factor Authentication (MFA)?

Sync data to cloud
Verify identity using multiple factors (Correct answer)
Delete browser cookies
Improve bandwidth

Correct answer: Verify identity using multiple factors

Multi-Factor Authentication (MFA) is a security enhancement that requires users to provide two or more distinct types of verification factors to prove their identity. Instead of relying solely on a password, MFA combines 'something you know' (like a password), 'something you have' (like a phone or token), or 'something you are' (like a fingerprint). This layered approach significantly strengthens security by making it much harder for unauthorized users to gain access.

Question 60: Which method is the correct way to delegate management of a specific Okta group to a non-super-admin user?

Set the user as the Group Owner using the groupOwner profile attribute
Assign the user the Group Administrator admin role scoped to that specific group (Correct answer)
Enable the Group Delegation toggle on the group's settings page
Grant the user self-service group management permissions in their profile

Correct answer: Assign the user the Group Administrator admin role scoped to that specific group

In Okta, you can assign a user the Group Administrator role and scope it to specific groups, allowing that user to manage membership in only those groups without broader administrative access.

Okta Certified Professional Exam

This exam validates a candidate's foundational knowledge and hands-on experience with Okta's core workforce identity products, including user management, application integration, and basic security features.

Questions

90 min

Time Limit

65%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds