Okta Certified Consultant 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which Okta feature / solution offers you the possibility to maintain alternate authentication for off-network users, while keeping Okta for on-network users' authentication requests?

A.Desktop Single-Sign On
B.Routing Rules
C.Agentless DSSO
D.Device Trust
E.On-Prem MFA Agent
F.Org to Org

正解:

Question No : 2
Which of the following is / are true?

A.Okta Device Trust allows only managed devices with your specified security posture to access Okta-integrated apps
B.Okta Device Trust protects enterprise data in scenarios where there's no defined network boundary
C.Okta recommends that you do not apply a 'Not Trusted - Deny' app sign policy to your Okta-federated MDM application, as doing so will prevent new users from enrolling their device in your MDM application and accessing other device trust-secured apps

正解:

Question No : 3
In regards to OpenID COnnect & OAuth 2.0 API, '/token' is the endpoint which has the following use:

A.Obtain an access and/or ID token by presenting an authorization grant or refresh token
B.Return information about a token
C.Revoke an access or refresh token
D.End the session associated with the given ID token

正解:

Question No : 4
In regards to OpenID Connect & OAuth 2.0 API, '/introspect' is the endpoint which has the following use:

A.Return public keys used to sign responses
B.Return claims about the authenticated end user
C.Interact with the resource owner and obtain an authorization grant
D.Return information about a token

正解:

Question No : 5
In regards to OpenID Connect & OAuth 2.0 API, '/authorize' is the endpoint which has the following use:

A.End the session associated with the given ID token
B.Return claims about the authenticated end user
C.Interact with the resource owner and obtain an authorization grant
D.Return OpenID Connect metadata related to the specified authorization server

正解:

Question No : 6
There is a property named 'uid', which is the user ID. This parameter is returned:

A.Only if the token is a refresh token and the subject is an end user
B.Only if the token is an access token and the subject is an end user
C.Only if the token is an access token and the subject is an admin
D.Only if the token is an refresh token and the subject is a resource server
E.Only if the token is an access token and the subject is a authorization server

正解:

Question No : 7
'token_type_hint' indicates the type of 'token' being passed. Valid value(s) can be:

A.'access_token'
B.'oidc_token'
C.'id_token'
D.'refresh_token'

正解:

Question No : 8
'invalid_client' error is thrown when:

A.The scopes list contains an invalid or unsupported value
B.The specified 'client_id' wasn't found
C.The request structure was invalid

正解:

Question No : 9
'unsupported_grant_type' error is thrown when the 'grant_type' isn't:

A.'authorization_code'
B.'refresh_token'
C.'client_credentials'
D.'password'

正解:

Question No : 10
'grant_type' can take value(s) out of the following:

A.'authorization_code'
B.'nonce'
C.'client_credentials'
D.'refresh_token'
E.'password'

正解:

Question No : 11
'scope' is returned only if the response includes:

A.A 'token' value
B.A 'scope' value
C.A claim
D.An access_token

正解:

Question No : 12
'code' is an opaque value that is returned if 'reponse_type' includes:

A.'code' and 'code' has a lifetime of 45 seconds
B.'token' and 'code' has a lifetime of 24 hours
C.'value' and 'code' has a lifetime of 90 seconds
D.'code' and 'code' has a lifetime of 60 seconds

正解:

Question No : 13
Access tokens are returned if 'response_type' included:

A.'nonce'
B.'none'
C.'access'
D.'token'
E.'access_token'

正解:

Question No : 14
The authorization server also acts as an:

A.OpenID Connect Provider, which means you can request ID tokens in addition to access tokens from the authorization server endpoints
B.OpenID Connect protocol, which means you can request ID tokens in addition to OIDC or OAuth 2.0 tokens from the authorization server endpoints
C.OpenID Connect Provider, which means you can request ID tokens in addition to access tokens from the authentication server endpoints
D.OpenID Connect Provider, which means you can request Open ID Connect tokens in addition to access tokens from the authentication server endpoints

正解:

Question No : 15
You cannot:

A.Have multiple authorization servers in Okta
B.Edit the access policy in Okta, when Okta is the Default Authorization Server
C.Have custom scopes when Okta is the authorization server

正解:

Okta Certified Consultant 問題練習