6.7 Describe Cisco Duo in a Zero-Trust Security Architecture (Trust Monitor, MFA, Device Trust, Health Checks, Adaptive Access Policies, SSO, and CII) 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team is investigating a potential account compromise. They see that a user successfully authenticated with MFA from a known device, but the authentication occurred from an unusual geographic location. They want to determine if this is a true anomaly and also want to automatically require additional verification for future authentications from that location. Which Duo features should they use together?

   • AUse Device Trust to check the device's posture and revoke access if non-compliant.
   • BUse Trust Monitor to analyze the authentication event and create an Adaptive Access policy to require step-up authentication for that location.
   • CUse SSO activity reports to investigate and manually disable the user.
   • DUse MFA logs to review the event and block the user's account.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of Cisco Duo's Critical Infrastructure Integration (CII)?

   • ATo monitor physical access to data centers
   • BTo provide backup and disaster recovery for critical systems
   • CTo replace the need for network segmentation in critical infrastructure
   • DTo extend zero-trust protections to critical infrastructure applications and systems
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A critical infrastructure organization has a mix of modern web applications and legacy systems that only support RADIUS. They want to enforce MFA across all systems and also ensure that only managed devices can access the legacy systems. They have a limited budget and want to minimize the number of Duo components to deploy. Which approach should they take?

   • ADeploy a single Duo Authentication Proxy to handle RADIUS MFA for legacy systems and use Duo Device Trust for device posture checks on those systems.
   • BImplement Duo MFA with hardware tokens for all users and skip device checks.
   • CDeploy Duo SSO for all applications and rely on SAML for legacy systems.
   • DUse Duo Trust Monitor to enforce MFA and device compliance.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a typical check performed by Cisco Duo health checks?

   • AThe device's Bluetooth pairing history
   • BThe device's color and model
   • CWhether the device has a screen lock enabled
   • DThe user's email signature
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which contextual factor can Cisco Duo adaptive access policies use to adjust authentication requirements?

   • AThe user's role or group membership
   • BThe user's favorite color
   • CThe device's screen brightness
   • DThe user's internet browser history
   Reveal Solution Discussion Select an answer first