We're so confident of our products that we provide no hassle product exchange.
Okta Okta-Certified-Consultant Exam Overview:
| Certification Vendor: | Okta |
|---|---|
| Exam Name: | Okta Certified Consultant Hands-On Configuration Exam |
| Exam Number: | Okta-Certified-Consultant / OKCON1 |
| Available Languages: | English |
| Certificate Validity Period: | 2 years |
| Passing Score: | Not disclosed; Pass/Fail result only |
| Exam Price: | USD 250 (first attempt), USD 100 (retake) |
| Real Exam Qty: | 47 + 4 performance-based tasks |
| Exam Duration: | 180 minutes |
| Exam Format: | Performance-based hands-on configuration tasks, Discrete Option Multiple Choice (DOMC) |
| Related Certifications: | Okta Certified Technical Architect Okta Certified Professional Okta Certified Administrator |
| Recommended Training: | Okta Certified Consultant Study Guide Okta Training & Education |
| Exam Registration: | Okta Certification Portal |
| Sample Questions: | Okta Okta-Certified-Consultant Sample Questions |
| Exam Way: | Online proctored exam; Part I: 60 minutes, Part II: 120 minutes; live Okta Identity Engine environment for hands-on tasks |
| Pre Condition: | Active, unexpired Okta Certified Professional and Okta Certified Administrator certifications |
| Official Syllabus URL: | https://certification.okta.com/okcon1-okta-certified-consultant-hands-on-configuration-exam |
Okta Okta-Certified-Consultant Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Implementing Inbound Federation with Okta | 13% | - Trust relationships and metadata management - Partner and customer identity federation - SAML, OIDC, WS-Federation protocols |
| Implementing Custom Configuration Options with Okta | 19% | - Branding and customization - Custom expressions and logic - Event hooks and inline hooks |
| Implementing Okta Policies | 15% | - Access and session management - Authentication and authorization policies - Conditional access and risk-based policies |
| Implementing Directory Solutions | 13% | - LDAP and Active Directory integration - Directory synchronization and filtering - Multi-forest / multi-domain environments |
| Implementing Advanced Sourcing | 8% | - Attribute mapping and transformation - Advanced directory integration - User and group provisioning |
| Working with API Access Management | 11% | - OAuth 2.0 and OpenID Connect flows - Scope and claim management - API security and governance |
| Working with Okta APIs | 6% | - Management and integration APIs - Webhooks and event API - API authentication and authorization |
| Implementing Advanced SSO Strategies | 15% | - Access gateway and reverse proxy - Complex SSO workflows - External identity providers |
Okta Certified Consultant Sample Questions:
Question 1
Can you have both Gateway IPs and Proxy IPs delimited in your Network Zones?
A. This can never be implemented as Proxy IPs would contain much more Originating IPs which are hidden behind them and thus create a security issue in the Local Network
B. Yes
C. No
Question 2
Optional user account fields include a ''secondary email address'' and a ''security image''.
A. Statement is False, as both aforementioned attributes would need to have a value assigned
B. Statement is False, as the ,secondary email address, is mandatory to have a value assigned
C. Statement is True
D. Statement is False, as the ,security image, is mandatory to have a value assigned
Question 3
In regards to OpenID COnnect & OAuth 2.0 API, ''/token'' is the endpoint which has the following use:
A. Return information about a token
B. Revoke an access or refresh token
C. Obtain an access and/or ID token by presenting an authorization grant or refresh token
D. End the session associated with the given ID token
Question 4
By using Okta SpEL (Spring Expression Language), you can:
A. Extract substrings from a string type attribute value
B. Integrate the OIDC standard with Okta for apps based on the Spring Framework
C. Construct a username by concatenating multiple attributes into a single value ready to be pushed
D. Imply conditions based on attributes, values
Question 5
Can you set up via API a limited and non-refreashable Okta session lifetime?
A. Yes
B. Yes, but refreshable once a user does anything in the browser on his Okta Dashboard, which will refresh the token, thus extending the session time
C. No
Solutions:
| Question 1 Answer: B | Question 2 Answer: C | Question 3 Answer: C | Question 4 Answer: A,C,D | Question 5 Answer: A |
By Lee
