6.7 Describe Cisco Duo in a Zero-Trust Security Architecture (Trust Monitor, MFA, Device Trust, Health Checks, Adaptive Access Policies, SSO, and CII) 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a mix of corporate-owned Windows laptops and employee-owned personal devices. They want to enforce that corporate devices have a specific antivirus version and that personal devices are not rooted/jailbroken. They also want to require MFA for all users, but they want to avoid prompting for MFA on every single access for trusted devices. Which Duo configuration should they implement?

   • AEnable Duo MFA with a hardware token for all users and require device enrollment.
   • BDeploy Duo Trust Monitor and block any authentication from non-compliant devices.
   • CEnable Duo Device Trust with health checks and configure Adaptive Access policies to allow remembered devices to skip MFA for a set period.
   • DUse Duo SSO and rely on the identity provider to enforce device compliance.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A utility company needs to protect access to a legacy SCADA system that does not support modern authentication protocols. They want to add MFA and ensure that only approved, managed devices can connect. The SCADA system only supports RADIUS. Which Duo integration approach should they use?

   • AImplement Duo Trust Monitor and block any authentication that is flagged as anomalous.
   • BConfigure Duo MFA with a one-time password and rely on the SCADA system's built-in device checks.
   • CDeploy a Duo Authentication Proxy to provide RADIUS MFA and pair it with Duo Device Trust for device posture checks.
   • DUse Duo Single Sign-On with the SCADA system as a SAML service provider.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is an example of a critical infrastructure system that Cisco Duo CII can protect?

   • AA personal email account
   • BA supervisory control and data acquisition (SCADA) system
   • CA social media application
   • DA video game console
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What does Cisco Duo Device Trust assess before granting access to an application?

   • AThe user's social media activity
   • BThe device's IP address and geographic location
   • CThe device's posture, such as whether it is jailbroken or has outdated operating systems
   • DThe user's password strength
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of Cisco Duo adaptive access policies?

   • ATo enforce password complexity requirements
   • BTo dynamically adjust authentication requirements based on user and device context
   • CTo replace the need for multi-factor authentication entirely
   • DTo provide a static set of authentication rules for all users
   Reveal Solution Discussion Select an answer first