Whenever you make an API call, you will then get back:
Solution: A new object (a user, group or app object)

As an Okta admin, when you implement IWA, you have to know how to successfully test it to see if it's working. For this you:
Solution: Open up a command prompt and ping the Okta server handling the requests, information about the server found in Okta IP tables for your own org's Cell

Okta AD Agents can be successfully and completely configured by:
Solution: Super administrators

If you want to remove an attribute's value in Okta, for example a value coming from AD that is not useful in any way, you have to:
Solution: Intentionally map a blank value to that specific attribute in the user profile

Regarding policies, Okta recommends:
Solution: To include a policy rule that catches not wanted behaviors as a first priority and then label others for permitted behaviors