Okta-Certified-Consultant 無料問題集「Okta Certified Consultant」

（A）Only if the token is a refresh token and the subject is an end user

（B）Only if the token is an access token and the subject is an admin

（C）Only if the token is an refresh token and the subject is a resource server

（D）Only if the token is an access token and the subject is a authorization server

（E）Only if the token is an access token and the subject is an end user

（A）Statement is False, as both aforementioned attributes would need to have a value assigned

（B）Statement is False, as the ,secondary email address, is mandatory to have a value assigned

（C）Statement is True

（D）Statement is False, as the ,security image, is mandatory to have a value assigned

（A）,windowsUserName, and respectively ,UnixUserName,

（B）,winUserName, and respectively ,UserName,

（C）,osUserName, and respectively ,LinuxUserName,

（D）Only users have usernames, not servers, it,s obvious

（A）Okta has no editable options for Cross Origin Access, hence statement is False

（B）Statement is False

（C）Statement is True

（A）Communicates via UDP, over default port 1812 and does not support multiple ports simultaneously

（B）Communicates via UDP, over default port 1812 and supports multiple ports simultaneously

（C）Communicates via TCP, over default port 636 and does not support multiple ports simultaneously

（D）Communicates via UDP, over default port 1812 and supports multiple ports simultaneously

（E）Communicates via TCP, over default port 443 and does not support multiple ports simultaneously

（A）No, you can only have one custom domain set up for your organization

（B）You are limited to three custom domains per org

（C）Yes, you can have multiple custom domains set up for your organization

（A）This is used for Authentication use cases

（B）This is used for OIDC use cases

（C）This is used with the issuer being https://okta.com

（D）This is used with an issuer being https://<subdomain>.okta.com

（E）You cannot use Okta org as an authorization server

（A）10 days

（B）90 days

（C）180 days

（D）It has no limit and can retrieve data since the creation of the specific org from which the token authorizing the API call got issued

（E）30 days

（A）,code, and ,code, has a lifetime of 60 seconds

（B）,token, and ,code, has a lifetime of 24 hours

（C）,value, and ,code, has a lifetime of 90 seconds

（D）,code, and ,code, has a lifetime of 45 seconds

（A）Any org URL and are blocked prior to any type of policy evaluation

（B）The Org through Inbound SAML SSO or any app through SP-initiated SSO, but can log into their End-User Panel in Okta and that,s about it

（C）Any org URL but are blocked after they face policy evaluations, for them to not think they got on the block list, hence not possibly knowing this step of a reversed engineering at a Networking level