Okta Professional exam Premier practice test question

Hi @RaviK.51127 (Customer)​ , Thank you for reaching out to the Okta Community! 

You are asking whether to change the Okta password policy so that users can unlock their accounts from outside the Corporate Network zone, given that the requirement did not include self-service password reset and the option to change a password while logged in is not appearing.

Solution: Scope the self-service unlock to the Outside of Corporate Network zone and leave self-service password reset disabled. The missing password change option is a policy setting, and it is separate from password reset.

1. Navigate to Security → Authentication → Password policies in the Okta Admin Console, then open the policy assigned to the target group.
2. Confirm that the policy allows account unlock for users outside the Corporate Network zone and that self-service password reset remains disabled, as the requirement specifies.
3. Review the Account Management policy in Security → Authentication → Account Management Policy. The Catch-all rule can require two factors for profile changes, which is why the change password option does not appear for a user with only a password enrolled. Lower the requirement only if the security team approves it, because this lowers the security posture for all self-service profile edits.
4. Verify the change by signing in as a test user from outside the Corporate Network zone, triggering a lockout, and checking that the unlock path is available while the reset path is not.
5. Use the admin action to set the password for the user if the task requires an immediate change. Navigate to Directory → People, select the user, and choose the option to reset the password. This is an administrator action and does not depend on the self-service policy.

For issues regarding the Okta Certifications Exam, contact certification@okta.com . 

If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

Hope my answer helps! 

--

Help others in the community by liking or hitting Select as Best if this response helped you.

Collect them all. Learn a new skill and earn a new Okta Learning badge.

Just released: More Okta Community badges just added

Hi Mihai

Thanks for answering my question. They asked me to add a rule to Unlock account, I thought they want to allow to "Unlock account" only and not "password reset" or "password change" so I made it like in my screenshot. Then I was not getting option to reset the password because "Password Change" was not selected. Did I misunderstood the questions about creating the rule or they made a mistake? Did they mean to allow all three option or just "Unlock Account" in the rule because they mentioned "Create a rule to allow user to "Unlock account". In second attempt I selected all three option and I was able to change. I got credit for that task.