Platform Overview & Architecture Flashcards

Which Okta agent allows on-premises VPNs and network devices to use Okta MFA through a standard network protocol?

Answer: Okta RADIUS Server Agent

The RADIUS Server Agent lets RADIUS-compatible devices such as VPNs authenticate against Okta with MFA.

In Okta Identity Engine, which feature provides passwordless, phishing-resistant authentication using Okta Verify bound to a device?

Answer: Okta FastPass

Okta FastPass uses Okta Verify with device-bound keys to deliver passwordless, phishing-resistant sign-in.

When multiple sources supply a user's profile, what Okta concept determines which source is authoritative for profile attributes?

Answer: Profile mastering

Profile mastering designates the authoritative source (e.g., AD or an HR system) whose attribute values Okta uses.

Which type of Okta hook lets an external service modify Okta's process in real time, such as adding claims to a token?

Answer: Inline hook

Inline hooks call out synchronously during an Okta process so an external service can change its outcome.

Which Okta hook type sends asynchronous notifications to an external endpoint after specific events occur?

Answer: Event hook

Event hooks deliver outbound, asynchronous notifications about System Log events to an external service.

Which authentication method stores a user's credentials for apps that do not support federation and replays them via the Okta Browser Plugin?

Answer: Secure Web Authentication (SWA)

SWA stores encrypted credentials and uses the Okta Browser Plugin to sign users into non-federated apps.

Which Okta security feature evaluates sign-in attempts against IP reputation data gathered across Okta's customer base to block suspicious traffic?

Answer: Okta ThreatInsight

ThreatInsight uses aggregated data across Okta orgs to detect and block malicious IPs before authentication.