OKTA OKTA Reporting, Troubleshooting and Administration

Question 1

Where in the Okta Admin Console can administrators find a searchable log of all events that occur in the Okta tenant?

Accepted Answer

Reports > System Log

Answer

Dashboard > Overview

Answer

Security > Identity Engine

Answer

Applications > Audit Trail

Question 2

What query language does Okta's System Log support for advanced filtering?

Accepted Answer

Okta Expression Language (OEL) filters

Answer

SQL

Answer

SCIM filter syntax

Answer

SCQL

Question 3

An Okta admin needs to receive an email alert when a specific event type (e.g., admin privilege granted) occurs. Which feature should they configure?

Accepted Answer

Event Hooks

Answer

Okta ThreatInsight

Answer

Inline Hooks

Answer

System Log Export

Question 4

What is the default retention period for events in the Okta System Log?

Accepted Answer

90 days

Answer

7 days

Answer

30 days

Answer

1 year

Question 5

Which Okta feature helps detect and respond to suspicious user sign-in behavior based on contextual signals like IP reputation and device?

Accepted Answer

Okta ThreatInsight

Answer

Okta FastPass

Answer

Okta Verify Push

Answer

Okta Workflows

Question 6

An administrator wants to export Okta System Log data to a third-party SIEM. What is the recommended approach?

Accepted Answer

Use Okta's Log Streaming feature (e.g., AWS EventBridge or Splunk Cloud)

Answer

Manually download CSV exports from the Admin Console daily

Answer

Enable SCIM export on each application integration

Answer

Configure a RADIUS agent to forward authentication events