User And Device Security

Which TWO of the following are valid Duo authentication methods that do not require an internet-connected mobile device for the user?

An organization requires that users on iOS devices must have a passcode enabled to access cloud resources. Which Duo feature enforces this?

Which THREE items are included in a Duo Authentication Log entry?

A user's device is marked as 'Out-of-Date' in Duo. How does the system determine this status?

A security engineer is configuring Duo Authentication for Microsoft 365. The organization requires that users must be prompted for MFA only when accessing cloud resources from outside the corporate network. Which configuration setting in the Duo Admin Panel achieves this?

Which TWO pieces of information are used by the Duo Authentication Proxy to identify which application is sending an auth request?

When integrating Duo with an application that uses the OIDC protocol, where are the 'Client ID' and 'Client Secret' configured?

Which THREE settings are part of the 'Authentication Policy' in the Duo Admin Panel?

An organization wants to restrict access to Salesforce to specific IP addresses. Where should this policy be configured?

An organization wants to use Duo for both Windows Logon and Cloud SSO. What is the difference in deployment?

How does Duo protect an application that does not support modern authentication protocols?

What is the primary benefit of the Duo Universal Prompt compared to the traditional iframe-based prompt?

A security auditor notices that Duo authentication logs show an 'Authentication Succeeded' status, but the user was denied access to the SaaS application. Which policy setting is the most likely cause?

During a Duo enrollment phase, a user is required to install the Duo Mobile app. What is the main security purpose of the app in the MFA flow?

Which THREE actions can be taken by an administrator if a user's mobile device is reported as stolen?

You are deploying Duo Passwordless authentication. Which factor must be verified on the endpoint before a user can successfully authenticate?

An administrator wants to audit all Duo administrative actions. Which log provides this information?

A security engineer is worried about 'MFA fatigue' attacks. Which Duo configuration is the best defense?

What is the primary function of the 'Duo Network Gateway'?

Which of the following describes the 'Duo Central' portal?

Which TWO things must be done to successfully protect a legacy VPN with Duo?

Which THREE factors can be evaluated by Duo Device Health during an access request?

Which TWO configuration parameters are required when setting up the Duo Authentication Proxy for an LDAP source?

When configuring Duo Trust Monitor, what is the primary purpose of 'Baseline' behavior?

In the context of the Duo Authentication Proxy, what is the 'fail_mode' parameter used for?

A company wants to prevent users from using personal devices for work. Which Duo policy is most effective for this?

An organization uses Duo Access Gateway (DAG) to protect on-premises applications. They want to transition to Duo SSO. What is the primary difference in architecture?

A user is attempting to access a cloud application protected by Duo SSO. The Duo prompt shows 'Access Denied: Your device is not running a supported browser'. Where is this restriction defined?

What is the purpose of the 'Enrollment Email' sent by Duo?

Which THREE of the following are components of the Duo 'Trusted Endpoints' solution?

Which Duo feature allows an administrator to visualize the percentage of users who have successfully registered their mobile devices?

Which Duo feature helps prevent phishing attacks by requiring the user to tap a button only after a verified authentication request?

Which TWO pieces of information are required in the Duo Admin Panel to configure a new SAML application integration?

Which TWO of the following scenarios would lead to an 'Access Denied' message in the Duo Authentication Log?

A user is prompted for MFA but their phone is dead. Which administrative feature allows for a temporary bypass?

Which mechanism does Duo use to integrate with non-SAML cloud applications?

Which of the following is a requirement for using the Duo 'Remembered Devices' feature?

You are implementing Cisco Duo Device Health for a Windows fleet. Users report that they are blocked from accessing cloud apps despite having valid credentials. The Duo Health app reports a missing OS security patch. Which component is responsible for enforcing this posture check during the authentication flow?

Which Duo log would be most useful for troubleshooting a failure during the initial push notification delivery?

You are investigating an authentication failure. The log shows 'Error: User not found in directory'. What does this imply?

An administrator needs to ensure that only managed devices can access SaaS applications via Cisco Duo. Which configuration step is mandatory in the Duo Admin Panel to ensure the device is recognized as 'Managed'?

Which THREE factors influence the user experience when using Duo Passwordless?

Which THREE conditions must be met for a user to be able to use the 'Self-Service Portal' for device enrollment?

What is the primary function of the Duo 'Telephony Credits'?

Which TWO of the following are benefits of using the Duo Authentication Proxy for on-premises AD integration?

A administrator wants to implement 'Strict' device health checks. What happens if a device reports an unknown OS version?

When syncing users from Active Directory to Duo, what is the role of the 'Duo Authentication Proxy'?

Which TWO methods can be used to bypass Duo authentication in an emergency?

Which THREE of the following are supported by the Duo Authentication Proxy?

A user is traveling and needs to access a cloud application. The user has no cellular service but has Wi-Fi. Which authentication method is best suited for this scenario?