OKTA Industry Best Practices 4

Question 1

Which approach best reduces MFA fatigue (push bombing) attacks?

Accepted Answer

Use number matching or phishing-resistant authenticators and rate-limit push requests

Answer

Number matching and rate limiting stop users from blindly approving attacker-initiated prompts.

Question 2

What is the purpose of periodic access certification (access reviews) campaigns?

Accepted Answer

To verify that users' current access is still appropriate and remove what is not

Answer

Access reviews let managers or app owners confirm or revoke entitlements, preventing privilege creep.

Question 3

A user changes departments and keeps permissions from the old role. What is this risk called?

Accepted Answer

Privilege creep

Answer

Privilege creep occurs when access accumulates across role changes without removal of old entitlements.

Question 4

Which practice best supports separation of duties in identity administration?

Accepted Answer

Using custom admin roles scoped to specific resources and tasks

Answer

Scoped admin roles divide responsibilities so no single person controls an entire sensitive process.

Question 5

What is credential stuffing?

Accepted Answer

Using username/password pairs leaked from other breaches to try logins

Answer

Credential stuffing exploits password reuse by replaying breached credential pairs at scale.

OKTA - OKTA Certified Professional Practice Test