MENU
In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.
Solution: The statement is valid, but Okta is not the one doing authentication - IWA Agent and AD Agent are doing that as AD agent verifies the AD user's identity
Suggested Answer: B
Get Premium Okta Certified Administrator Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
RO
Roselle
11 months ago
So, is Okta just a middleman in this process?
AL
Alberta
11 months ago
Nope, AD Agent plays a big role in verifying identity.
AL
Aleta
12 months ago
Wait, I thought Okta handled all the authentication?
DE
Deeanna
12 months ago
I agree, but the IWA Agent is key for authentication.
MO
Mohammad
12 months ago
Okta decrypts the Kerberos ticket, that's true.
MA
Malcolm
1 year ago
I believe the statement is misleading; Okta does decrypt the ticket, but it’s the AD Agent that authenticates the user.
EL
Elsa
1 year ago
This question feels similar to one we practiced where Okta was involved in the SSO process, but I can't recall the exact details.
DE
Desire
1 year ago
I’m not entirely sure, but I think the AD Agent plays a crucial role in verifying the user's identity, right?
JU
Jutta
1 year ago
I remember studying that Okta handles the session management, but I think the actual authentication is done by the IWA Agent.
BU
Buddy
1 year ago
Okay, let's see here. The question is asking about the specific areas the fraud risk assessment team should discuss. I think I'd lean towards option B - the possibility of management override is a classic fraud risk that needs to be considered.
ME
Melvin
1 year ago
Okay, let's see. Food and beverages are definitely variable since they're directly tied to the number of guests. Outside laundry service could also be variable if it scales with occupancy. I'm less sure about the other options.
EL
Elouise
1 year ago
Hmm, I'm a little unsure about this one. I know the different cloud models, but I'm not totally confident in distinguishing between them. I'll have to think this through carefully.
LA
Lauran
1 year ago
Spot on, the statement is definitely valid. Okta may be the 'wizard behind the curtain', but the IWA and AD Agents are the ones pulling the strings. Can't have one without the other!
HE
Hester
1 year ago
B) No
CO
Colette
1 year ago
A) Yes
LA
Latrice
1 year ago
B) No
CH
Christa
1 year ago
A) Yes
GR
Graciela
1 year ago
Haha, good one! Okta's like the 'Secret Service' of the authentication world - they handle the fancy stuff, but the real muscle comes from the IWA and AD Agents. It's a team effort, folks!
AL
Alease
1 year ago
Yes
LO
Lovetta
1 year ago
No
LI
Lilli
1 year ago
Yes
DO
Dominga
1 year ago
Ah, I see what they're getting at here. Okta acts as the middleman, but the real authentication happens in the background with the IWA and AD Agents. Pretty clever setup!
TI
Tish
1 year ago
Yes
IN
Inocencia
1 year ago
No
SU
Sueann
1 year ago
Yes
EM
Emmett
2 years ago
The statement is valid, but Okta is not the one doing authentication - that's the IWA Agent and AD Agent's job. Okta just handles the Kerberos ticket decryption and session passing.
DO
Dottie
1 year ago
Yes
KR
Kristal
1 year ago
No
DO
Donette
1 year ago
Yes
HE
Helga
1 year ago
No
PA
Pamella
1 year ago
Yes
BU
Bulah
1 year ago
No
HO
Holley
1 year ago
Yes
AN
An
2 years ago
I think the statement is valid because Okta is responsible for decrypting the Kerberos ticket and finding the user name.
JU
Justine
2 years ago
B) No
AN
An
2 years ago
A) Yes
CL
Clare
2 years ago
I think the statement is valid because Okta is responsible for decrypting the Kerberos ticket and finding the user name.
SH
Shawnee
2 years ago
B) No
CL
Clare
2 years ago
A) Yes