How should I use these User And Device Security practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just User And Device Security questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the User And Device Security domain.

SCAZT · topic practice

User And Device Security practice questions

Practise Cisco Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT, 300-740, CCNP Security) (SCAZT) User And Device Security practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: User And Device Security

Practice 10 questions Browse domain →

What the exam tests

What to know about User And Device Security

User And Device Security questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common User And Device Security exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

User And Device Security questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice

Read the full User And Device Security explanation →

A user is attempting to access a cloud application protected by Duo SSO. The Duo prompt shows 'Access Denied: Your device is not running a supported browser'. Where is this restriction defined?

Trap 1: In the Active Directory GPO for the user

GPO does not dictate browser restrictions for cloud-based SSO prompts.

Trap 2: In the Duo Authentication Proxy configuration file

The proxy does not handle browser-level posture enforcement for SSO.

Trap 3: In the local browser settings of the client machine

Client-side settings cannot override server-side policy enforcement.

Study all User And Device Security common traps →

A
In the Active Directory GPO for the user
Why wrong: GPO does not dictate browser restrictions for cloud-based SSO prompts.
B
In the Duo Authentication Proxy configuration file
Why wrong: The proxy does not handle browser-level posture enforcement for SSO.
C
In the Duo Application configuration under 'Browser Restrictions'
Duo policies allow administrators to restrict access based on browser versions and types.
D
In the local browser settings of the client machine
Why wrong: Client-side settings cannot override server-side policy enforcement.

User And Device Security practice questions

What to know about User And Device Security

Common User And Device Security exam traps

User And Device Security questions

A user is attempting to access a cloud application protected by Duo SSO. The Duo prompt shows 'Access Denied: Your device is not running a supported browser'. Where is this restriction defined?

A user's device is marked as 'Out-of-Date' in Duo. How does the system determine this status?

Which Duo feature allows an administrator to visualize the percentage of users who have successfully registered their mobile devices?

An administrator needs to ensure that only managed devices can access SaaS applications via Cisco Duo. Which configuration step is mandatory in the Duo Admin Panel to ensure the device is recognized as 'Managed'?

You are deploying Duo Passwordless authentication. Which factor must be verified on the endpoint before a user can successfully authenticate?

An organization uses Duo Access Gateway (DAG) to protect on-premises applications. They want to transition to Duo SSO. What is the primary difference in architecture?

A security engineer is configuring Duo Authentication for Microsoft 365. The organization requires that users must be prompted for MFA only when accessing cloud resources from outside the corporate network. Which configuration setting in the Duo Admin Panel achieves this?

Which of the following is a requirement for using the Duo 'Remembered Devices' feature?

What is the primary benefit of the Duo Universal Prompt compared to the traditional iframe-based prompt?

When configuring Duo Trust Monitor, what is the primary purpose of 'Baseline' behavior?

During a Duo enrollment phase, a user is required to install the Duo Mobile app. What is the main security purpose of the app in the MFA flow?

An organization wants to restrict access to Salesforce to specific IP addresses. Where should this policy be configured?

Which mechanism does Duo use to integrate with non-SAML cloud applications?

A security auditor notices that Duo authentication logs show an 'Authentication Succeeded' status, but the user was denied access to the SaaS application. Which policy setting is the most likely cause?

A administrator wants to implement 'Strict' device health checks. What happens if a device reports an unknown OS version?

Which of the following describes the 'Duo Central' portal?

When syncing users from Active Directory to Duo, what is the role of the 'Duo Authentication Proxy'?

Which Duo feature helps prevent phishing attacks by requiring the user to tap a button only after a verified authentication request?

An administrator wants to audit all Duo administrative actions. Which log provides this information?

Track your progress over time

Start a User And Device Security only practice session

Related SCAZT topic practice pages

User And Device Security practice questions

Visibility And Assurance practice questions

Application And Data Security practice questions

Threat Response practice questions

Cloud Security Architecture practice questions

Network And Cloud Security practice questions

SCAZT fundamentals practice questions

SCAZT scenario practice questions

SCAZT troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid