User And Device Security

An organization requires that users on iOS devices must have a passcode enabled to access cloud resources. Which Duo feature enforces this?

Which THREE items are included in a Duo Authentication Log entry?

A user's device is marked as 'Out-of-Date' in Duo. How does the system determine this status?

A security engineer is configuring Duo Authentication for Microsoft 365. The organization requires that users must be prompted for MFA only when accessing cloud resources from outside the corporate network. Which configuration setting in the Duo Admin Panel achieves this?

When integrating Duo with an application that uses the OIDC protocol, where are the 'Client ID' and 'Client Secret' configured?

Which THREE settings are part of the 'Authentication Policy' in the Duo Admin Panel?

An organization wants to use Duo for both Windows Logon and Cloud SSO. What is the difference in deployment?

How does Duo protect an application that does not support modern authentication protocols?

What is the primary benefit of the Duo Universal Prompt compared to the traditional iframe-based prompt?

A security auditor notices that Duo authentication logs show an 'Authentication Succeeded' status, but the user was denied access to the SaaS application. Which policy setting is the most likely cause?

During a Duo enrollment phase, a user is required to install the Duo Mobile app. What is the main security purpose of the app in the MFA flow?

A security team is deploying Cisco Duo to protect a set of internal web applications accessed through a reverse proxy. They require that users authenticate with Duo before the proxy forwards any request, and they want to enforce this at the network edge without modifying each application. Which Duo deployment component should they implement?

You are deploying Duo Passwordless authentication. Which factor must be verified on the endpoint before a user can successfully authenticate?

An administrator wants to audit all Duo administrative actions. Which log provides this information?

A security engineer is worried about 'MFA fatigue' attacks. Which Duo configuration is the best defense?

What is the primary function of the 'Duo Network Gateway'?

Which of the following describes the 'Duo Central' portal?

Which TWO things must be done to successfully protect a legacy VPN with Duo?

Which THREE factors can be evaluated by Duo Device Health during an access request?

Which TWO configuration parameters are required when setting up the Duo Authentication Proxy for an LDAP source?

When configuring Duo Trust Monitor, what is the primary purpose of 'Baseline' behavior?

In the context of the Duo Authentication Proxy, what is the 'fail_mode' parameter used for?

A company wants to prevent users from using personal devices for work. Which Duo policy is most effective for this?

An organization uses Duo Access Gateway (DAG) to protect on-premises applications. They want to transition to Duo SSO. What is the primary difference in architecture?

A user is attempting to access a cloud application protected by Duo SSO. The Duo prompt shows 'Access Denied: Your device is not running a supported browser'. Where is this restriction defined?

What is the purpose of the 'Enrollment Email' sent by Duo?

Which THREE of the following are components of the Duo 'Trusted Endpoints' solution?

Which Duo feature allows an administrator to visualize the percentage of users who have successfully registered their mobile devices?

Which TWO pieces of information are required in the Duo Admin Panel to configure a new SAML application integration?

A security team is deploying Cisco Identity Services Engine (ISE) for a large enterprise. They want to implement a robust posture policy that checks endpoint compliance before granting network access. Which two components are required to perform posture assessment in ISE? (Choose two.)

A user is prompted for MFA but their phone is dead. Which administrative feature allows for a temporary bypass?

Which of the following is a requirement for using the Duo 'Remembered Devices' feature?

You are implementing Cisco Duo Device Health for a Windows fleet. Users report that they are blocked from accessing cloud apps despite having valid credentials. The Duo Health app reports a missing OS security patch. Which component is responsible for enforcing this posture check during the authentication flow?

Which Duo log would be most useful for troubleshooting a failure during the initial push notification delivery?

Which THREE factors influence the user experience when using Duo Passwordless?

What is the primary function of the Duo 'Telephony Credits'?

A financial institution uses Duo to protect access to a critical trading platform. Security policy requires that users authenticate with a hardware token that generates one-time codes, and that the token be bound to the user's identity in Duo. Which Duo factor type should be configured to meet this requirement?

A administrator wants to implement 'Strict' device health checks. What happens if a device reports an unknown OS version?

Which TWO methods can be used to bypass Duo authentication in an emergency?

A user is traveling and needs to access a cloud application. The user has no cellular service but has Wi-Fi. Which authentication method is best suited for this scenario?