An Okta Administrator needs to ensure that all remote contractors are prompted for multifactor authentication (MFA) when they attempt to log in to Okta.
Is this a step the administrator should take to meet this requirement?
Solution: Add an Okta Sign-on Policy.
Suggested Answer: B
Get Premium Okta Certified Professional Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
DA
Daniel
12 months ago
I thought MFA was optional for some users?
DE
Detra
12 months ago
Adding a Sign-on Policy is the right move!
RO
Rosina
12 months ago
Wait, is MFA really necessary for all contractors?
NG
Nguyet
1 year ago
100% agree, it's a must!
DE
Deeanna
1 year ago
Definitely need MFA for remote access!
KA
Kassandra
1 year ago
Yes, I believe the sign-on policy is crucial for this. We discussed how policies can help manage access for different user types in our last study session.
HA
Halina
1 year ago
I feel like there might be other configurations needed, like setting up the MFA methods themselves. Is the sign-on policy enough?
DO
Dominga
1 year ago
I remember practicing a similar question where we had to set up MFA for specific user groups. It seems like this is the same concept.
CH
Charlie
1 year ago
I think adding an Okta Sign-on Policy is definitely a step in the right direction for enforcing MFA, but I'm not entirely sure if that's the only requirement.
VA
Van
1 year ago
Hmm, this seems like a tricky one. I'll need to think carefully about the different methods mentioned and which one is most commonly used for boiler feed water corrosion assurance.
DW
Dwight
1 year ago
I'm a bit unsure about this one. I know we need to do something to make the changes effective, but I'm not sure if no action is required or if we need to run a specific command. I'll have to think this through carefully.
SH
Sheldon
1 year ago
This one seems pretty straightforward. The key security concern with BYOD is that the organization has less control over the devices, so they can't ensure the same level of security as with corporate-owned devices.
JO
Joesph
1 year ago
I'm not entirely sure, but "entity" sounds closer to the least complex model, right? I need to think this through more.