mediumMultiple SelectObjective-mapped
350-701 Practice Question: Wants to implement multi-factor authentication…
An organization wants to implement multi-factor authentication (MFA) for VPN access using Cisco AnyConnect and Duo. Which TWO authentication factors can Duo provide? (Choose two.)
⚠ Common exam trap
Cisco often tests the distinction between authentication factors (like TOTP and push) and authentication protocols (like RADIUS and LDAP), leading candidates to mistakenly select protocols as factors.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TOTP
Duo provides TOTP (Time-based One-Time Password) as an authentication factor by generating a temporary six-digit code based on RFC 6238, which the user enters during the AnyConnect VPN login process. Push notification is another Duo factor, where a request is sent to the user's registered mobile device, and the user approves or denies the login attempt via the Duo Mobile app. Both factors satisfy the requirement for multi-factor authentication by adding a second layer beyond the primary password.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
TOTP
Why this is correct
Time-based one-time password from an authenticator app.
- ✗
LDAP
Why it's wrong here
LDAP is a directory service protocol.
- ✓
Push notification
Why this is correct
Sends a push request to the user's mobile device.
- ✗
802.1X
Why it's wrong here
802.1X is a network access control standard.
- ✗
RADIUS
Why it's wrong here
RADIUS is a protocol, not an authentication factor.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.