Part II · Hands-On Configuration · 23% of Exam
Security Enforcement
5 configuration tasks. Each task pairs a concept course with a hands-on lab you run in your own sandbox — course first, then the lab.
Task 1 — Set Up an Authenticator
TASK 1Course
Set Up an Authenticator — Course
Compact pointer to the full Security Module 1 deck, plus the enrollment-policy operational angle.
Start →
TASK 1Lab
Set Up an Authenticator — Lab
Configure a new authenticator in your sandbox.
Task 2 — Set Up an MFA Enrollment Policy
TASK 2Course
MFA Enrollment Policy — Course
Required/Optional/Disabled, rule scoping, and the two grace-period types.
Start →
TASK 2Lab
MFA Enrollment Policy — Lab
Build an MFA enrollment policy with a grace period in your sandbox.
Task 3 — Modify the Default Global Session Policy
TASK 3Course
Modify Global Session Policy — Course
Compact pointer to the full Security Module 1 deck, plus the "edit the one default" angle.
Start →
TASK 3Lab
Modify Global Session Policy — Lab
Edit your org's default global session policy in your sandbox.
Task 4 — Create an Authentication Policy for MFA
TASK 4Course
Authentication Policy — Course
App sign-on policy structure: default, customization, presets, and rules.
Start →
TASK 4Lab
Authentication Policy — Lab
Create an authentication policy for MFA in your sandbox.
Task 5 — Test the Authentication Policy
TASK 5Course
Test the Policy — Course
The Access Testing Tool, and closing the build-then-test loop across every policy type.
Start →
TASK 5Lab
Test the Policy — Lab
Use the Access Testing Tool to verify your Task 4 policy in your sandbox.
About this study guide
evlbot.xyz is an independent study aid for the Okta Certified Administrator Hands-On Configuration exam, not an official Okta product.
Learn more →