OKTA OKTA Reporting, Troubleshooting and Administration

Question 1

Where in the Okta Admin Console can administrators find a searchable log of all events that occur in the Okta tenant?

Accepted Answer

Reports > System Log

Answer

The System Log under Reports records every event in the Okta tenant — authentications, policy changes, provisioning events — and is searchable by event type, actor, and time.

Question 2

What query language does Okta's System Log support for advanced filtering?

Accepted Answer

Okta Expression Language (OEL) filters

Answer

Okta's System Log supports Okta Expression Language (OEL)-based filter expressions in the search bar, allowing complex queries by event type, actor, target, and more.

Question 3

An Okta admin needs to receive an email alert when a specific event type (e.g., admin privilege granted) occurs. Which feature should they configure?

Accepted Answer

Event Hooks

Answer

Event Hooks allow Okta to send real-time HTTP POST notifications to an external endpoint when specified event types occur, enabling alerting integrations.

Question 4

What is the default retention period for events in the Okta System Log?

Accepted Answer

90 days

Answer

Okta retains System Log events for 90 days by default; organizations needing longer retention should export logs to a SIEM or log management system.

Question 5

Which Okta feature helps detect and respond to suspicious user sign-in behavior based on contextual signals like IP reputation and device?

Accepted Answer

Okta ThreatInsight

Answer

Okta ThreatInsight analyzes sign-in context (IP, device, behavior) to identify and block threats such as credential stuffing and brute-force attacks.

OKTA - OKTA Certified Professional Practice Test

OKTA - OKTA Certified Professional Practice Test

OKTA OKTA Reporting, Troubleshooting and Administration