User And Device Security

A user is attempting to access a cloud application protected by Duo SSO. The Duo prompt shows 'Access Denied: Your device is not running a supported browser'. Where is this restriction defined?

A user's device is marked as 'Out-of-Date' in Duo. How does the system determine this status?

You are implementing Cisco Duo Device Health for a Windows fleet. Users report that they are blocked from accessing cloud apps despite having valid credentials. The Duo Health app reports a missing OS security patch. Which component is responsible for enforcing this posture check during the authentication flow?

Which Duo feature allows an administrator to visualize the percentage of users who have successfully registered their mobile devices?

You are deploying Duo Passwordless authentication. Which factor must be verified on the endpoint before a user can successfully authenticate?

An organization uses Duo Access Gateway (DAG) to protect on-premises applications. They want to transition to Duo SSO. What is the primary difference in architecture?

A security engineer is configuring Duo Authentication for Microsoft 365. The organization requires that users must be prompted for MFA only when accessing cloud resources from outside the corporate network. Which configuration setting in the Duo Admin Panel achieves this?

Which of the following is a requirement for using the Duo 'Remembered Devices' feature?

What is the primary benefit of the Duo Universal Prompt compared to the traditional iframe-based prompt?

When configuring Duo Trust Monitor, what is the primary purpose of 'Baseline' behavior?

During a Duo enrollment phase, a user is required to install the Duo Mobile app. What is the main security purpose of the app in the MFA flow?

A security auditor notices that Duo authentication logs show an 'Authentication Succeeded' status, but the user was denied access to the SaaS application. Which policy setting is the most likely cause?

A administrator wants to implement 'Strict' device health checks. What happens if a device reports an unknown OS version?

Which of the following describes the 'Duo Central' portal?

An administrator wants to audit all Duo administrative actions. Which log provides this information?

A user is traveling and needs to access a cloud application. The user has no cellular service but has Wi-Fi. Which authentication method is best suited for this scenario?

A company wants to prevent users from using personal devices for work. Which Duo policy is most effective for this?

In the context of the Duo Authentication Proxy, what is the 'fail_mode' parameter used for?

What is the purpose of the 'Enrollment Email' sent by Duo?

What is the primary function of the Duo 'Telephony Credits'?

When integrating Duo with an application that uses the OIDC protocol, where are the 'Client ID' and 'Client Secret' configured?

An organization requires that users on iOS devices must have a passcode enabled to access cloud resources. Which Duo feature enforces this?

How does Duo protect an application that does not support modern authentication protocols?

An organization wants to use Duo for both Windows Logon and Cloud SSO. What is the difference in deployment?

Which Duo log would be most useful for troubleshooting a failure during the initial push notification delivery?

A user is prompted for MFA but their phone is dead. Which administrative feature allows for a temporary bypass?

What is the primary function of the 'Duo Network Gateway'?

A security engineer is worried about 'MFA fatigue' attacks. Which Duo configuration is the best defense?

Which TWO pieces of information are required in the Duo Admin Panel to configure a new SAML application integration?

Which THREE factors can be evaluated by Duo Device Health during an access request?

Which TWO methods can be used to bypass Duo authentication in an emergency?

Which THREE items are included in a Duo Authentication Log entry?

Which THREE settings are part of the 'Authentication Policy' in the Duo Admin Panel?

Which TWO configuration parameters are required when setting up the Duo Authentication Proxy for an LDAP source?

Which TWO things must be done to successfully protect a legacy VPN with Duo?

Which THREE of the following are components of the Duo 'Trusted Endpoints' solution?

Which THREE factors influence the user experience when using Duo Passwordless?

A security team is deploying Cisco Duo to protect a set of internal web applications accessed through a reverse proxy. They require that users authenticate with Duo before the proxy forwards any request, and they want to enforce this at the network edge without modifying each application. Which Duo deployment component should they implement?

A financial institution uses Duo to protect access to a critical trading platform. Security policy requires that users authenticate with a hardware token that generates one-time codes, and that the token be bound to the user's identity in Duo. Which Duo factor type should be configured to meet this requirement?

A security team is deploying Cisco Identity Services Engine (ISE) for a large enterprise. They want to implement a robust posture policy that checks endpoint compliance before granting network access. Which two components are required to perform posture assessment in ISE? (Choose two.)