6.7 Describe Cisco Duo in a Zero-Trust Security Architecture (Trust Monitor, MFA, Device Trust, Health Checks, Adaptive Access Policies, SSO, and CII) 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is rolling out Duo to protect a legacy VPN that does not support SAML. They want to enforce MFA for all users but require additional verification when a user logs in from a new device or an unusual location. The VPN only supports RADIUS. Which Duo feature should the administrator use to meet these requirements?

   • ADeploy Duo Device Trust and require all devices to be enrolled before VPN access.
   • BImplement Duo Trust Monitor and block any authentication that is flagged as anomalous.
   • CConfigure a Duo Authentication Proxy with RADIUS and enable Adaptive Access policies.
   • DUse Duo Single Sign-On with the VPN as a SAML service provider.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of Cisco Duo health checks on devices?

   • ATo measure the device's battery life and performance
   • BTo evaluate the device's security posture and enforce access policies based on the results
   • CTo verify the user's identity using biometric data
   • DTo update the device's firmware automatically
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of Cisco Duo Trust Monitor?

   • ATo replace the need for multi-factor authentication by using behavioral biometrics
   • BTo block all authentication attempts from unknown IP addresses
   • CTo enforce password complexity requirements for all users
   • DTo collect and analyze authentication events to detect anomalies and provide risk insights
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of a second factor that Cisco Duo can use for multi-factor authentication?

   • AThe user's department name
   • BThe user's username
   • CThe user's IP address
   • DA push notification to the user's registered mobile device
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is implementing Duo SSO for multiple SAML applications. They want to enforce MFA for all users, but they also want to allow users to authenticate once per day and not be prompted again for MFA on subsequent application access. They also want to require step-up authentication for users accessing from a new device. Which Duo configuration should they use?

   • AConfigure Duo SSO with a session lifetime of 24 hours and enable Adaptive Access policies to require step-up authentication for new devices.
   • BDisable Duo SSO and require MFA for each application separately.
   • CUse Duo Device Trust to allow trusted devices to skip MFA indefinitely.
   • DEnable Duo Trust Monitor to automatically block new devices.
   Reveal Solution Discussion Select an answer first