6.7 Describe Cisco Duo in a Zero-Trust Security Architecture (Trust Monitor, MFA, Device Trust, Health Checks, Adaptive Access Policies, SSO, and CII) 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which type of data does Cisco Duo Trust Monitor primarily analyze to identify risky authentication behavior?

   • AAuthentication events, including successful and failed login attempts
   • BNetwork packet captures from the corporate firewall
   • CEndpoint antivirus scan results
   • DDNS query logs from internal servers
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a zero-trust security architecture, what is the primary role of Cisco Duo?

   • ATo verify the identity of users and the trustworthiness of devices before granting access
   • BTo monitor network traffic for malware and block malicious packets in real time
   • CTo encrypt all data at rest and in transit across the enterprise
   • DTo replace the organization's firewall and provide network segmentation
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does Cisco Duo integrate with Single Sign-On (SSO) to streamline authentication?

   • ABy requiring users to authenticate separately for each application
   • BBy storing all user passwords in a central database
   • CBy allowing users to authenticate once and access multiple applications without re-entering credentials
   • DBy disabling multi-factor authentication for SSO-enabled applications
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization wants to ensure that only devices with up-to-date operating systems and enabled disk encryption can access a sensitive application. They want to automatically block access for devices that fail these checks. Which Duo feature should they use?

   • AUse Duo Trust Monitor to review device health reports.
   • BEnable Duo MFA with a hardware token for all users.
   • CConfigure Duo Device Trust with health checks for OS version and disk encryption.
   • DDeploy Duo SSO and rely on the identity provider to enforce device compliance.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team notices a pattern of successful MFA authentications from a single user account originating from multiple geographic locations within a short time frame. They want to investigate this anomaly and determine if it indicates a compromised account. Which Duo feature should they use to gain insight into these authentication events?

   • ACheck the Duo MFA logs for the user's recent authentication methods.
   • BReview the Duo Trust Monitor dashboard for anomalous authentication activity.
   • CUse Duo Device Trust to verify the user's devices are compliant.
   • DReview the Duo SSO activity report for the user's login sessions.
   Reveal Solution Discussion Select an answer first