Integrating Existing Directories

Question 1

Only one Okta AD Agent can be installed per AD domain

Answer 1

False

Question 2

The Okta AD Agent must be installed on a Domain Controller

Answer 2

False

Question 3

JIT Provisioning is enabled by default with Okta

Answer 3

False

Question 4

JIT Provisioning does not require Delegated Authentication

Answer 4

False

Question 5

Why are matching rules important?

Answer 5

A user can be modified from multiple profile sources

Question 6

Matching rules cannot provide automatic confirmation for updated users

Answer 6

False

Question 7

Installing multiple AD Agents in a close geographical proximity enhances
performance.

Answer 7

False

Question 8

If my AD deployment has 30,000 to 100,000 users, how many Okta AD agents should
be deployed.

Answer 8

At least 3 Okta AD Agent is needed

Question 9

Okta can only integrate with OpenLDAP

Answer 9

False

Question 10

Okta must import from LDAP as JIT is only available with AD

Answer 10

False

Question 11

An Okta Administrator is running the Okta Active Directory (AD) agent installer to
install the AD Agent on a domain joined server. Is this the minimum AD user account
permission required to run the installer>

Answer 11

Local Administrator

Question 12

Does the Okta Active Directory (AD) Agent require this port to be open?

Question 13

Can the Okta service account for the Okta AD Agent be created in this way

Answer 13

The Okta AD Agent installer can create the agent while the agent is being
installed

Question 14

Is this an expected behavior when an incremental report from AD?

Answer 14

All new or updated users since the last import are imported

Question 15

An Okta administrator ran a full import from AD and and expected group was NOT
imported to okta . Is this a reason

Answer 15

The organisational unit (OU) containing the group was not selected for import