Okta Okta-Certified-Consultant Exam Overview:
| Certification Vendor: | Okta |
|---|---|
| Exam Name: | Okta Certified Consultant Exam |
| Exam Number: | Okta-Certified-Consultant |
| Exam Format: | Performance-based, DOMC, Hands-on Configuration |
| Certificate Validity Period: | 2 years |
| Real Exam Qty: | 60 |
| Related Certifications: | Okta Certified Administrator Okta Certified Professional |
| Exam Price: | $300 USD |
| Passing Score: | Not publicly disclosed |
| Exam Duration: | 90-150 |
| Available Languages: | Japanese, English |
| Sample Questions: | Okta Okta-Certified-Consultant Sample Questions |
| Exam Way: | Online proctored exam and hands-on configuration exam delivered remotely. |
| Pre Condition: | Candidates are recommended to hold active Okta Certified Professional and Okta Certified Administrator certifications before attempting this exam. |
| Official Syllabus URL: | https://certification.okta.com/okcon1-okta-certified-consultant-hands-on-configuration-exam |
Okta Okta-Certified-Consultant Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Lifecycle Management and Provisioning | 15%-20% | - Provisioning
|
| Topic 2: Security and Policies | 15%-20% | - Authentication Policies
|
| Topic 3: Okta Architecture and Deployment | 20%-25% | - Okta Org Design
|
| Topic 4: Troubleshooting and APIs | 10%-15% | - Okta APIs
|
| Topic 5: Authentication and Federation | 20%-25% | - Single Sign-On
|
Okta Certified Consultant Sample Questions:
Question 1
Which of the following is / are true regarding USG (Universal Security Group) Support?
A. You need to have an Ad Agent in each domain in your forest where there is a USG object you want to synchronize
B. With USG Support enabled - domain boundaries are ignored when you import group memberships for your users
C. When a user,s group memberships match any imported groups from connected domains in a forest, Okta syncs the memberships for the user to each group
Question 2
The On-Prem MFA Agent has an ''sslPinningEnabled'' flag within its files, just as an AD Agent has one as well.
A. False, as it,s only available for the AD Agent, not for others
B. True, but it,s not editable
C. True, but it,s not available for the AD Agent beside the On-Prem MFA one, but only for the On-Prem MFA Agent and the IWA Agent
D. TRUE
E. FALSE
Question 3
Can you have both Gateway IPs and Proxy IPs delimited in your Network Zones?
A. This can never be implemented as Proxy IPs would contain much more Originating IPs which are hidden behind them and thus create a security issue in the Local Network
B. Yes
C. No
Question 4
Inline Hooks use asynchronous calls, which means that the Okta process that triggered the hook is paused until a response from your service is received.
A. Statement is True
B. Statement is False, as they are synchronous calls
C. Statement is False, as the hook is not paused at all
D. Statement is True, but for the ,Okta process, part, as it,s not a process, it,s a job
Question 5
Is it alright, as a best-practice with Okta, to install AD Agent in close proximity to the location of your users?
A. No, Okta randomly selects an AD Agent, location is not a factor in this equation
B. Yes, Okta is pinging all the AD Agents to find their location and then it will use the one closest to the user initiating log in requests
C. Yes, this way there will surely be less hops on a traceroute for the requests
Solutions:
| Question 1 Answer: A,B,C | Question 2 Answer: D | Question 3 Answer: B | Question 4 Answer: B | Question 5 Answer: A |

We're so confident of our products that we provide no hassle product exchange.


By Linda


