SCAZT User And Device Security Practice Question
A security auditor notices that Duo authentication logs show an 'Authentication Succeeded' status, but the user was denied access to the SaaS application. Which policy setting is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device health policy violation detected after MFA
If authentication succeeds but access is denied, the Duo policy likely includes a post-authentication check, such as device health or geo-blocking, that failed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Device health policy violation detected after MFA
Why this is correct
Duo permits the MFA request to pass, then checks the health policy before passing the claim to the service provider.
- ✗
Incorrect username provided during MFA
Why it's wrong here
This would result in an authentication failure, not a denial after success.
- ✗
Duo Authentication Proxy is down
Why it's wrong here
If the proxy were down, the authentication request would fail to reach the cloud.
- ✗
Expired Duo license
Why it's wrong here
An expired license would prevent the Duo service from functioning globally.
About these practice questions
One of 316 original SCAZT practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This SCAZT practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCAZT exam.