Okta-Certified-Consultant 試験問題を無料オンラインアクセス

The "access token" is issued by the authorization server (Okta) in exchange for the grant.

• A.Statement is True, but for the Access Token part, as the Refresh Token is the one exchanged, which then creates Access Tokens
• B.Statement is False
• C.Statement is True

Can you set up via API a limited and non-refreashable Okta session lifetime?

• A.Yes
• B.Yes, but refreshable once a user does anything in the browser on his Okta Dashboard, which will refresh the token, thus extending the session time
• C.No

''scope'' is returned only if the response includes:

• A.An access_token
• B.A claim
• C.A ,token, value
• D.A ,scope, value

Optional user account fields include a ''secondary email address'' and a ''security image''.

• A.Statement is False, as both aforementioned attributes would need to have a value assigned
• B.Statement is True
• C.Statement is False, as the ,secondary email address, is mandatory to have a value assigned
• D.Statement is False, as the ,security image, is mandatory to have a value assigned

Groups are pushed towards apps via the method(s):

• A.Push by SSO standard
• B.Push by rule
• C.Push by name
• D.Push by Entity Id