User And Device Security

A user is attempting to access a cloud application protected by Duo SSO. The Duo prompt shows 'Access Denied: Your device is not running a supported browser'. Where is this restriction defined?

A user's device is marked as 'Out-of-Date' in Duo. How does the system determine this status?

You are implementing Cisco Duo Device Health for a Windows fleet. Users report that they are blocked from accessing cloud apps despite having valid credentials. The Duo Health app reports a missing OS security patch. Which component is responsible for enforcing this posture check during the authentication flow?

Which Duo feature allows an administrator to visualize the percentage of users who have successfully registered their mobile devices?

An administrator needs to ensure that only managed devices can access SaaS applications via Cisco Duo. Which configuration step is mandatory in the Duo Admin Panel to ensure the device is recognized as 'Managed'?

You are deploying Duo Passwordless authentication. Which factor must be verified on the endpoint before a user can successfully authenticate?

An organization uses Duo Access Gateway (DAG) to protect on-premises applications. They want to transition to Duo SSO. What is the primary difference in architecture?

A security engineer is configuring Duo Authentication for Microsoft 365. The organization requires that users must be prompted for MFA only when accessing cloud resources from outside the corporate network. Which configuration setting in the Duo Admin Panel achieves this?

Which of the following is a requirement for using the Duo 'Remembered Devices' feature?

What is the primary benefit of the Duo Universal Prompt compared to the traditional iframe-based prompt?

When configuring Duo Trust Monitor, what is the primary purpose of 'Baseline' behavior?

During a Duo enrollment phase, a user is required to install the Duo Mobile app. What is the main security purpose of the app in the MFA flow?

An organization wants to restrict access to Salesforce to specific IP addresses. Where should this policy be configured?

Which mechanism does Duo use to integrate with non-SAML cloud applications?

A security auditor notices that Duo authentication logs show an 'Authentication Succeeded' status, but the user was denied access to the SaaS application. Which policy setting is the most likely cause?

A administrator wants to implement 'Strict' device health checks. What happens if a device reports an unknown OS version?

Which of the following describes the 'Duo Central' portal?

When syncing users from Active Directory to Duo, what is the role of the 'Duo Authentication Proxy'?

Which Duo feature helps prevent phishing attacks by requiring the user to tap a button only after a verified authentication request?

An administrator wants to audit all Duo administrative actions. Which log provides this information?

You are investigating an authentication failure. The log shows 'Error: User not found in directory'. What does this imply?

A user is traveling and needs to access a cloud application. The user has no cellular service but has Wi-Fi. Which authentication method is best suited for this scenario?

A company wants to prevent users from using personal devices for work. Which Duo policy is most effective for this?

In the context of the Duo Authentication Proxy, what is the 'fail_mode' parameter used for?

What is the purpose of the 'Enrollment Email' sent by Duo?

What is the primary function of the Duo 'Telephony Credits'?

When integrating Duo with an application that uses the OIDC protocol, where are the 'Client ID' and 'Client Secret' configured?

An organization requires that users on iOS devices must have a passcode enabled to access cloud resources. Which Duo feature enforces this?

How does Duo protect an application that does not support modern authentication protocols?

An organization wants to use Duo for both Windows Logon and Cloud SSO. What is the difference in deployment?

Which Duo log would be most useful for troubleshooting a failure during the initial push notification delivery?

A user is prompted for MFA but their phone is dead. Which administrative feature allows for a temporary bypass?

What is the primary function of the 'Duo Network Gateway'?

A security engineer is worried about 'MFA fatigue' attacks. Which Duo configuration is the best defense?

Which TWO of the following are valid Duo authentication methods that do not require an internet-connected mobile device for the user?

Which TWO pieces of information are required in the Duo Admin Panel to configure a new SAML application integration?

Which THREE factors can be evaluated by Duo Device Health during an access request?

Which THREE conditions must be met for a user to be able to use the 'Self-Service Portal' for device enrollment?

Which THREE actions can be taken by an administrator if a user's mobile device is reported as stolen?

Which TWO of the following are benefits of using the Duo Authentication Proxy for on-premises AD integration?

Which TWO methods can be used to bypass Duo authentication in an emergency?

Which THREE items are included in a Duo Authentication Log entry?

Which THREE of the following are supported by the Duo Authentication Proxy?

Which THREE settings are part of the 'Authentication Policy' in the Duo Admin Panel?

Which TWO configuration parameters are required when setting up the Duo Authentication Proxy for an LDAP source?

Which TWO things must be done to successfully protect a legacy VPN with Duo?

Which THREE of the following are components of the Duo 'Trusted Endpoints' solution?

Which TWO of the following scenarios would lead to an 'Access Denied' message in the Duo Authentication Log?

Which TWO pieces of information are used by the Duo Authentication Proxy to identify which application is sending an auth request?

Which THREE factors influence the user experience when using Duo Passwordless?