OKTA Group Management & Access Controls 3

Question 1

What happens in Okta when a group that is configured with Group Push is deleted directly in the downstream target application?

Accepted Answer

Okta unlinks the group from the push configuration and marks the push status as an error requiring admin action

Answer

When a pushed group is deleted in the downstream application, Okta detects the discrepancy, unlinks the group, and flags the Group Push entry with an error so an admin can re-push or investigate.

Question 2

Which of the following correctly describes how Okta groups interact with application role assignments?

Accepted Answer

Okta groups can be assigned to specific application roles to control users' access levels within the application

Answer

In Okta, groups can be assigned to applications with specific role mappings, enabling group-level authorization so that all members of a group receive the appropriate role within the application.

Question 3

When an application with provisioning enabled is assigned to an Okta group, what happens when a new user is added to that group?

Accepted Answer

The user is automatically provisioned into the application according to the provisioning configuration

Answer

When provisioning is enabled for an application assigned to a group, adding a user to that group triggers automatic provisioning of the user into the application per the configured attribute mappings.

Question 4

Which method is the correct way to delegate management of a specific Okta group to a non-super-admin user?

Accepted Answer

Assign the user the Group Administrator admin role scoped to that specific group

Answer

In Okta, you can assign a user the Group Administrator role and scope it to specific groups, allowing that user to manage membership in only those groups without broader administrative access.

Question 5

In Okta, when are Group Rules evaluated and applied?

Accepted Answer

Whenever a relevant user profile attribute is updated, and also on demand when rules are re-run

Answer

Okta Group Rules are evaluated when relevant user attributes change and can also be triggered on demand, ensuring group memberships stay current with profile data in near-real time.

OKTA - OKTA Certified Professional Practice Test

OKTA - OKTA Certified Professional Practice Test

OKTA Group Management & Access Controls 3