Okta-Certified-Consultant 無料問題集「Okta Certified Consultant」

（A）Push by SSO standard

（B）Push by rule

（C）Push by name

（D）Push by Entity Id

（A）Yes

（B）Yes, but only if you specifically enable the tenant-wide option "Enable SSO and Provisioning on same instances of applications"

（C）Yes, but only for Office 365 and G Suite apps

（D）No

（A）Authorization Code flow

（B）Client Credentials

（C）Client Access Authorization flow

（D）Server Authorization flow

（E）Authorization Code flow with PKCE

（A）False, as APIs go directly into each other,s domains, thus endpoints

（B）True for OIDC, not for SAML 2.0

（C）True, hence why different TLS versions can still be understood between parts and browser will forward the information then to the other side with the right TLS version needed

（D）False, as SAML 2.0 implies the trust to be exchanged directly between IDP (Identity provider) and SP (Service Provider)

（A）Only if the token is a refresh token and the subject is an end user

（B）Only if the token is an access token and the subject is an admin

（C）Only if the token is an refresh token and the subject is a resource server

（D）Only if the token is an access token and the subject is a authorization server

（E）Only if the token is an access token and the subject is an end user

（A）Is always used to block user logins from outside the Networks defined in Okta

（B）Is an MFA factor

（C）Is developed by Okta

（D）It supports Push notifications

（A）Okta is an IdP, hence it cannot be an SP to allow such a flow

（B）By only enabling JIT (Just-in-Time) Provisioning at an org-level

（C）By creating an Inbound SAML connection with that IdP

（A）True and the issuer looks like: https://<subdomain>.okta.com

（B）FALSE

（C）True and the issuer looks like: https://okta.com

（D）True and the issuer looks like: https://<subdomain>.okta.com/oauth2/${authorizationServerId}

（E）TRUE

（A）Yes, via an Inbound SAML app, for example

（B）No

（C）Yes, but only if Okta is an IdP in the scenario

（A）Email should be in a UPN format, this needs to get checked

（B）To run a query and see if it returns the right port for LDAP (always non-SSL)

（C）That the ,username, attribute,s format contains the exact ,email, attribute,s address value

（D）To make sure you enabled LDAPS