An administrator needs to ensure that only managed devices can access SaaS applications via Cisco Duo. Which configuration step is mandatory in the Duo Admin Panel to ensure the device is recognized as 'Managed'?
A network security administrator is deploying Cisco Identity Services Engine (ISE) for a new branch office. The branch has a mix of corporate-owned Windows laptops and employee-owned mobile devices. The administrator wants to ensure that corporate laptops are granted full network access, while employee-owned devices are placed in a restricted VLAN with internet-only access. Which ISE feature should be configured to achieve this?
A security engineer is configuring Cisco Identity Services Engine (ISE) to support 802.1X authentication for a group of Linux workstations. The organization uses a public key infrastructure (PKI) and wants to ensure that only workstations with a valid certificate issued by the corporate CA can authenticate. The engineer has already configured the CA certificate in ISE. Which additional configuration is required on ISE to validate the certificate chain during EAP-TLS authentication?
A network administrator is deploying Cisco Identity Services Engine (ISE) with TrustSec for a campus network. The administrator wants to enforce segmentation based on user roles, such as restricting access to the finance server only to members of the finance department. The administrator has already configured security group tags (SGTs) and security group ACLs (SGACLs). Which additional component is required to enforce these policies on the network devices?
A security administrator is configuring Cisco Identity Services Engine (ISE) to authenticate employees connecting to the corporate wireless network using PEAP-MSCHAPv2. The administrator wants to ensure that only domain-joined Windows devices can connect. Which ISE policy condition should be used to meet this requirement?
A user is attempting to access a cloud application protected by Duo SSO. The Duo prompt shows 'Access Denied: Your device is not running a supported browser'. Where is this restriction defined?
You are implementing Cisco Duo Device Health for a Windows fleet. Users report that they are blocked from accessing cloud apps despite having valid credentials. The Duo Health app reports a missing OS security patch. Which component is responsible for enforcing this posture check during the authentication flow?
An organization uses Duo Access Gateway (DAG) to protect on-premises applications. They want to transition to Duo SSO. What is the primary difference in architecture?
A security engineer is configuring Duo Authentication for Microsoft 365. The organization requires that users must be prompted for MFA only when accessing cloud resources from outside the corporate network. Which configuration setting in the Duo Admin Panel achieves this?
A security auditor notices that Duo authentication logs show an 'Authentication Succeeded' status, but the user was denied access to the SaaS application. Which policy setting is the most likely cause?
A user is traveling and needs to access a cloud application. The user has no cellular service but has Wi-Fi. Which authentication method is best suited for this scenario?
A security team is deploying Cisco Duo to protect a set of internal web applications accessed through a reverse proxy. They require that users authenticate with Duo before the proxy forwards any request, and they want to enforce this at the network edge without modifying each application. Which Duo deployment component should they implement?
A financial institution uses Duo to protect access to a critical trading platform. Security policy requires that users authenticate with a hardware token that generates one-time codes, and that the token be bound to the user's identity in Duo. Which Duo factor type should be configured to meet this requirement?
A security team is deploying Cisco Identity Services Engine (ISE) for a large enterprise. They want to implement a robust posture policy that checks endpoint compliance before granting network access. Which two components are required to perform posture assessment in ISE? (Choose two.)