Okta Professional for OIE Solved Papers - Questions with Complete Solutions What is the base protocol used for used for SAML and SSO? - Correct Answers ✅XML What does SAML exchange for SSO? - Correct Answers ✅Authentication and authorization What are the SAML assertion statement types? - Correct Answers ✅Authentication, attribution and authorization What does authentication cover in SAML? - Correct Answers ✅The authentication statement covers when and how the subject is authenticated.What does the attribution cover in SAML? - Correct Answers ✅The attribution statement provides details about the user, such as group membership or their role within a hierarchy.What does the authorization cover in SAML? - Correct Answers ✅The authorization statement tells the SP which level of authorization the user has across different resources.OAuth 2.0 provides security through what type of tokens? - Correct Answers ✅Scoped access tokens OIDC is built on top of what authorization protocol? - Correct Answers ✅OAuth 2.0 1 / 3
Okta Professional for OIE Solved Papers - Questions with Complete Solutions OIDC provides what for end users? - Correct Answers ✅Authentication and SSO Within the OIDC workflow, can Okta act as the IdP or SP? - Correct Answers ✅Both the IdP and SP depending on the workflow What verification can OIDC use to verify the user? - Correct Answers ✅MFA and SSO credentials How is the SAML assertion sent to the SP from the IdP? - Correct Answers ✅Through the browser Is a SAML authentication flow asynchronous and why? - Correct Answers ✅Yes because the Service Provider doesn't know if the Identity Provider will ever complete the entire flow. Because of this, the Service Provider doesn't maintain any state of any authentication requests generated.When the Service Provider receives a response from an Identity Provider, the response must contain all the necessary information.Can SAML be enabled for everyone or a subset of users? - Correct Answers ✅Either depending on the needs of the organization 2 / 3
Okta Professional for OIE Solved Papers - Questions with Complete Solutions What does a SP need for SAML? - Correct Answers ✅Certificate, ACS endpoint (SP sign on URL) or IdP sign-on URL What is federation? - Correct Answers ✅Access to protected resources can be granted to security principals (people) existing in different realms (domains) How does WS-FED work? - Correct Answers ✅The web application sends query parameters in a Request Security Token (RST) as the request to the Identity provider. After verifying the user's identity, the identity provider returns a Request Security Token Response (RSTR).What are the physical hardware requirements to complete the active directory integration? - Correct Answers ✅At least 2 CPUs and a minimum of 8GB RAM Should all AD agents be the same of different versions? - Correct Answers ✅All the same, running different version will cause issues Should AD agents be installed on the domain controller or domain server? - Correct Answers ✅Domain server What Windows server can the AD agent be installed on? - Correct Answers ✅Windows server 2012, Windows server
- / 3