Okta Certified Developer Sample Questions:

1. 'profile' requests access to these default profile claims:

A) All of these
B) locale,
C) name,, ,family_name,, ,given_name,, ,middle_name,, ,nickname,
D) profile,
E) gender,, ,birthdate,

2. Okta strongly recommends that your organization implement the , to prevent sender address forgery?

A) Asynchronous Requests Policy
B) CORS Policy
C) TLS 1.2 protocol
D) Sender Policy Framework (SPF)

3. Okta Certified Developer Exam Objectives

A) Okta Certified Developers are technically proficient at building secure, seamless experiences using Okta APIs and SDKs. Developers have experience working with RESTful APIs and developing web applications. They have general understanding of authentication and authorization standards such as OpenID Connect (OIDC) and OAuth, as well as how Okta supports these standards for building authentication, flexible authorization, and role-base access control. Developers also have experience configuring authorization with API Access Management and implementing Single Sign-On (SSO) with OIDC. They have working knowledge of Okta Lifecycle Management and administrative APIs.
B) Part IAuthentication 9%SSO and API Access Management with OIDC and OAuth 18%Lifecycle Management 16%Administrative APIs 20%Debug Techniques 9%Design Principles 18%Okta Hooks 9%Working with the Sign-In widget for Authentication 2%Part IIOnboard new users using Okta,s Management SDK and User and Group APIs 27%Federate an App through OIDC 33%Securing an API using OAuth and Securely accessing an API from a client app using OAuth 20%Implement the Okta Sign-In Widget for Authentication Purposes 20%
C) Part I: 45 Discrete Option Multiple Choice QuestionsPart II: Four Performance-Based, Hands-on Use CasesExam takers complete Part I and then are permitted to start Part II.Exam takers are not permitted to return to Part I after they have completed it and submitted their responses for grading.Time allotted: Part I: 60 minutes, Part II: 90 minutesIMPORTANT:Each part is timed separately. Any time left over from Part I does NOT carry over to Part II.Because this is a two-hour and 30 minutes exam, come fully prepared to sit through the entire exam. There is no break between parts I and II of this exam.Exam fee: USD 250 (USD 100 for each subsequent retake)Format: Part I of this exam includes Discrete Option Multiple-Choice (DOMC) items. Part II contains performance-based, hands-on use cases.

4. W o t e o owing are C lent Sl e HTTP error co es?

A) All of these
B) 410 (Gone)
C) 403 (Forbidden)
D) 400 (Bad Request)
E) 404 (Not Found)
F) 408 (Request Time Out)

5. What is SCIM (for)?

A) It is a version of an older SAML (SAML v.l .1), but instead of SAML xml assertions - it uses json
B) The gold of the standard is to securely automate the exchange of user identity data between any SPs (SaaS apps as an example) and your own company,s cloud apps
C) It provides a REST ful API to run CRUD operations on user and group resources
D) Is an open standard designed to manage user identity information
E) It provides a defined schema for representing users and groups

Solutions: