Okta Certified Access Gateway - Specialty Certification Exam Study Guide
Okta Certification Study Guides are updated frequently. You can access the most recent versions of these guides on the Okta Certification Credential Manager.
NEW - Frequently Asked Questions (FAQs) ~ProctorU by Meazure Learning
Okta Certified Access Gateway - Specialty Certification Exam Study Guide
This exam is dedicated to the memory of a committed member of our subject matter expert team, Dave Silvestro. Dave’s commitment to the excellence of this project and excellence in his work is a testament to his legacy.
Introduction
Congratulations on beginning the process to prepare for your Okta Certified Access Gateway - Specialty Certification. To learn how to prepare for your Okta Certification Exam, watch our video here.
This exam study guide is designed to help you prepare for the Okta Certified Access Gateway - Specialty Certification Exam. It contains a detailed list of the topics covered on this exam, as well as a list of preparation resources.
Passing this exam is a requirement for earning the Okta Certified Access Gateway - Specialty Certification. The Okta Certified Access Gateway - Specialty Certification Exam consists of only Discrete Option Multiple Choice (DOMC) questions.
How to use this study guide
At minimum, we highly recommend that you thoroughly review each topic listed within the Exam Subject Area section of this study guide. Make sure you understand each topic. If you are not familiar with a topic, research it by using one of the corresponding preparation resources or search the Okta Help Center or Okta Product Documentation Library. Many topics are best learned through hands-on experience with the Okta service.
What does it mean to be Okta Access Gateway - Specialty Certified?
Earners of the Okta Certified Access Gateway - Specialty Certification can install and configure Okta Access Gateway (OAG), configure applications such as Kerberos applications, header-based applications, Oracle E-Business Suite, and PeopleSoft for OAG, set up and manage OAG security, configure OAG for high availability, configure OAG data stores, and monitor and troubleshoot OAG during implementation.
Who should take the Okta Certified Access Gateway - Specialty Certification Exam?
Candidates for the Okta Certified Access Gateway - Specialty Certification should meet the following requirements at minimum:
- 5+ years of experience in the area of Identity and Access Management
- 2+ years of experience implementing Okta across a number of different projects
- 1+ year of experience implementing Okta Access Gateway
- 2+ years of Core TCP/IP networking experience
- Experience with secure DMZ operations and architecture
- Exposure to traditional web application management/HTTP header security
Although roles within different organizations may vary, candidates for the Okta Certified Access Gateway - Specialty Certification are generally involved in implementing IT strategy in support of an Okta solution. Candidates for this certification may be Okta Access Gateway implementation consultants, identity access management (IAM) architects, security engineers, security architects, and security analysts. In addition, some identity leaders, identity specialists, administrators, developers, devops engineers, and enterprise architects may seek this certification for career advancement.
About the Okta Certified Access Gateway - Specialty Certification Exam
|
Number and types of questions |
50 Discrete Option Multiple Choice (DOMC) items |
|
Time allotted |
90 minutes Because this is a 90-minute exam, you should come fully prepared to sit through the entire exam. There is no scheduled break during this exam. You may request a brief break from your proctor, but the exam timer will not be stopped while you are away. When you return from your break, your proctor can request an additional scan of your room. |
|
Exam Fee |
USD 250 (USD 100 for each subsequent retake) |
|
Prerequisites |
There are no prerequisite certifications for this Specialty certification. Successful completion of the recommended training or self-study using the preparation resources listed in the Okta Certified Access Gateway - Specialty Certification Exam subject areas table at the end of this page |
Exam scheduling
Okta certification exams are administered and proctored by ProctorU, a secure online proctoring service. Okta has partnered with ProctorU to protect theof our certification exams. Online proctoring means that you can take Okta exams from almost any location at a time that is convenient for you, without requiring that you travel to a test center. Your Okta certification exam must be scheduled at least 24 hours in advance of the time you plan to sit for the test in order to avoid the additional fee associated with on-demand testing. You can schedule your exam through the Okta Certification Credential Manager.
Understanding the DOMC item type
This exam consists of 50 DOMC items. DOMC is a powerful measurement tool that produces reliable test scores. It does so by removing several “contaminants” that affect test outcomes but are unrelated to the knowledge and skills being tested. The DOMC item type levels the playing field, and more fairly measures your skills by improving:
- Readability. Because you are required to read less text, the exam tends to take less time and places fewer demands on the slower reader or the non-native English speaker.
- Fairness. When savvy test takers are unsure of an answer, they look for clues by comparing options or gleaning information from other items on an exam. DOMC removes this test-taking advantage and serves as a powerful method to assess your actual knowledge.
- Security. Instead of displaying all options at the same time, options are randomly presented one at a time. For each option presented, you must make a YES or NO decision to indicate whether you think the option is correct. Answer options are presented in random order, and in most instances, you are NOT presented with all the available options associated with a DOMC item. Item exposure is limited by presenting only a subset of the available options to you. Limiting item exposure helps ensure theof the exam.
Scoring
You can be assured that the DOMC item type is scored fairly and with precision.
- If you are presented with a correct option and respond YES, then that response is scored as “correct". A DOMC item can be programmed to require one or more correct responses in order to be complete and to be considered answered correctly. Typically, however, only one correct response is required.
- If you are presented with a correct option and respond NO, then that item is scored as “incorrect”.
- If you are presented with an incorrect option and respond YES, then that item is scored as “incorrect”.
- If you are presented with an incorrect option, and respond NO (technically a correct response), the item is not scored until additional options are presented and responded to.
Note: Even after you respond correctly or incorrectly to an item, additional correct or incorrect options might be presented but your responses to those options will not be scored at all. This is done to prevent you from guessing the correctness or incorrectness of a response.
The DOMC item format might require that you make some adjustments to your usual test-taking approaches. The reward of such effort is the confidence that those test takers who become certified are truly competent in the areas tested on the exam and will represent excellence in the field.
To learn more about DOMC items, visit https://domc.caveon.com/home. In addition, the Okta Certified Access Gateway - Specialty Certification Practice and Premier Practice Exams will help you become accustomed to the new test format. We highly recommend that you become familiar with the format of this item type before taking any Okta certification exams.
All exams go through an audit process that can take up to 3 business days, or 72 hours. A successful audit will trigger an email that will communicate your final and official exam result to you. Your official result may be communicated before the 3 business day period, but in some cases, it may take the full 3 business days.
Preparing for the Okta Certified Access Gateway - Specialty Certification Exam
A combination of Okta training courses, self-paced learning, self-study, and on-the-job experience will prepare you to take this exam. In addition to this study guide, each certification exam has an associated standard practice exam and premier practice exam (available at cost). These resources and Okta-authorized training courses are the only approved resources for Okta exam preparation.
Exam dumps and other resources are prohibited from our list of approved resources. Using these resources to prepare for your exam can lead to invalidation of your exam scores, revoking your certification, and testing bans from our program. If you are ever in doubt about approved materials for Okta exam preparation, you can reach out to our team at certification@asqula.com.
Training
Okta Education Services offers a range of classes and training materials to help you prepare for this certification exam. Although attending a training class does not guarantee success on an Okta certification exam, we strongly recommend that you complete the Implement Okta Access Gateway instructor-led course in preparation for this exam. You can learn more about it here: https://www.asqula.com/training/implement-okta-access-gateway-oag
In the Implement Okta Access Gateway course, participants learn how to:
- Identify common use cases for Okta Access Gateway (OAG)
- Install and update OAG
- Configure a sample header-based application
- Configure a Kerberos application
- Understand how to configure complex applications, like EBS
- Set up SSL certificates and manage OAG security
- Configure OAG for High Availability
- Monitor and troubleshoot OAG
- Configure OAG Data Stores
Note: This content is also available in on-demand format here as part of the Expert Learning Pass.
Visit https://learning.asqula.com for the complete course catalog.
Other resources
-
The Okta Help Center contains a knowledge library of articles and videos, some of which are pertinent to topics covered on this exam.
-
The Okta Content Library offers searchable white papers with a rich body of information to explore before your exam.
-
Join the Okta Community to review questions, discussions, ideas, and blogs for additional exam preparation.
Okta Certified Access Gateway - Specialty Certification Exam subject areas
Topics, subtopics, and preparation resources
The following table lists the topics that are covered in this exam. These topics are grouped into topic areas, and topic areas roll up into exam sections. Use this list as an outline to guide your study and validate your readiness for this exam.
|
Exam Section |
Percentage of Exam Related to Section |
Planning an Okta Access Gateway Implementation |
10% |
Network Planning |
|
|
Determine DNS hostnames |
Preparation resources: |
|
Decide whether to use a DMZ network, internal network, or both |
Preparation resources: |
Capacity Planning |
|
|
Understand capacity planning concepts |
Preparation resources: |
High Availability Planning |
|
|
Determine the number of environments that will be needed for implementing high availability |
Preparation resources: |
|
Determine disaster recovery plans given number of data centers and a customers' needs for time to recovery |
Preparation resources: |
Installation and Initial Configuration of Okta Access Gateway |
6% |
Install and configure OAG |
|
|
Know the prerequisites to complete the initial installation of OAG |
Preparation resources: |
|
Install and configure the management console |
Preparation resources: |
|
Complete initial configuration of OAG Admin UI |
Preparation resources: |
Configuring Okta Access Gateway |
74% |
Configure Applications |
|
|
Configure the OAG SSO Admin application |
Preparation resources: |
|
Know which "Advanced" and "Behaviors" settings to configure given a scenario |
Preparation resources: |
Configure Application Load Balancers |
|
|
Understand when to use the OAG load balancer vs when to use the customer's load balancer |
Preparation resources: |
|
Configure application load balancing |
Preparation resources: |
|
Set priority and health check settings |
Preparation resources: |
|
Integrate a header-based application |
Preparation resources: |
Integrate Generic Applications |
|
|
Integrate a Kerberos application |
Preparation resources: |
|
Integrate a SAML or OIDC pass through application |
Preparation resources: |
|
Understand split DNS, which icons to display, and the double log in process when integrating SAML and OIDC pass through applications |
Preparation resources: |
Integrate Third-Party Applications |
|
|
Configure an Oracle E-Business Suite application |
Preparation resources: |
|
Configure an Oracle PeopleSoft application |
Preparation resources: |
Manage OAG Security |
|
|
Understand where to do SSL termination |
Preparation resources: |
|
Understand how to secure header-based authentication |
Preparation resources: |
Configure OAG for High Availability, load balancers, and DNS |
|
|
Understand how OAG high availability works |
Preparation resources: |
|
Know how to nominate Admin and worker nodes |
Preparation resources: |
|
Know how to configure a load balancer to connect to the worker nodes |
Preparation resources: |
|
Know how to deploy an OAG cluster for disaster recovery |
Preparation resources: |
|
Know how to back up OAG |
Preparation resources: |
|
Know when to use an OAG data store |
Preparation resources: |
|
Know how to configure LDAP and database data stores |
Preparation resources: |
|
Understand how to use LDAP and database data stores with an application |
Preparation resources: |
Monitoring and Troubleshooting Okta Access Gateway |
10% |
Monitoring |
|
|
Understand how to configure open telemetry |
Preparation resources: |
|
Understand how to configure SNMP |
Preparation resources: |
|
Understand how to configure log forwarding |
Preparation resources: |
Troubleshooting |
|
|
Understand how to debug an OAG application |
Preparation resources: |
|
Understand how to debug Kerberos |
Preparation resources: |
Okta Certified Access Gateway - Specialty Practice Exam
Know what to expect on the day of the exam. Take the Okta Certified Access Gateway - Specialty Practice Exam to familiarize yourself with the format of the DOMC item type. Click the button below to check it out.
Okta Certified Access Gateway - Specialty Standard Practice Exam
Take the Okta Certified Access Gateway - Specialty Premier Practice Exam to evaluate your readiness for the Okta Certified Access Gateway - Specialty Certification Exam. This Premier Practice Exam measures many of the same topic areas and configuration tasks that are measured in the Okta Access Gateway certification exam. Click the button below to check it out.
Okta Certified Access Gateway - Specialty Premier Practice Exam
Subject matter experts for the Okta Certified Access Gateway - Specialty Certification Exam
Okta certification exams are designed and built by subject matter experts who have extensive real world-experiences implementing and administering the Okta service and products.
Here is the list of subject matter experts who made significant contributions in designing and building this exam:
Dave Silvestro
Oscar Rodriguez
Shaun Feaker





























































