SCAZT User And Device Security Practice Question
When syncing users from Active Directory to Duo, what is the role of the 'Duo Authentication Proxy'?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To facilitate directory synchronization between AD and Duo
The proxy acts as the bridge that performs LDAP/AD queries and pushes user objects to the Duo cloud.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
To facilitate directory synchronization between AD and Duo
Why this is correct
The proxy is used to sync directory objects to the cloud.
- ✗
To enforce hardware-based encryption on AD servers
Why it's wrong here
This is outside the scope of the proxy.
- ✗
To store user passwords locally
Why it's wrong here
Duo does not store user passwords.
- ✗
To serve as the primary identity provider for the cloud
Why it's wrong here
The AD server remains the source of truth; the proxy just syncs it.
About these practice questions
One of 316 original SCAZT practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This SCAZT practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCAZT exam.