최신 Okta Customer Identity Certification Okta-Certified-Developer 무료샘플문제:

1. When you call this API endpoint ("/api/vl /sessions/me") with the GET HTTP verb:

A) If the Session is valid, a Session object is returned. Otherwise if the Session is invalid, a new session is created
B) If the Session is valid, a Session object is returned. Otherwise if the Session is invalid, an empty cookie object is returned as a 403 HTTP code
C) If the Session is valid, a Session object is returned. Otherwise if the Session is invalid, a ,404 Not Found, response is returned

2. Which of the following is/ are True?

A) The Authorization Code flow with PKCE doesn,t support Refresh tokens for browser-based apps
B) The Authorization Code flow with PKCE doesn,t support Refresh Tokens for SPAs
C) The PKCE-enhanced Authorization Code flow will require your application to generate a cryptographically random key called a "code verifier"

3. If your client's 'token_endpoint_auth_method' is 'either client_secret_basic' or 'client_secret_post' you need to include the client secret in outgoing requests.

A) For Provide the ,client_id and ,client_secret, as additional parameters in the POST request body
B) For ,client_secret_basic,: Provide the ,client_id, and ,client_secret, values in the Authorization header as a Basic auth base64- ncoded string within the POST request, as in: Authorization: Basic ${Base64(:)}
C) For ,client_secret_basic,: Provide the ,client_id, and ,client_secret, values as additional parameters in the GET request body
D) Statement is False in its entirety
E) For ,client_secret_basic,: Provide the ,client_id, and ,client_secret, values in the Authorization header as a Basic auth non-base64- ncoded string within the POST request, as in: Authorization: Basic $0

4. Which of the following is / are true when speaking about managing Self-Service Password Reset?

A) Email is the default recovery method for password policies
B) SMS is the default recovery method for password policies
C) You can add SMS and Voice call as recovery methods, but you have to ensure your users will configure those as authentication factors, otherwise they won,t be able to use them

5. Which of the following Oauth 2.0 flow(s) supports ID Tokens?

A) Client Credentials
B) Resource
C) Impl icit
D) Authorization Code
E) Authorization Code with PKCE

질문과 대답: