6.7 Describe Cisco Duo in a Zero-Trust Security Architecture (Trust Monitor, MFA, Device Trust, Health Checks, Adaptive Access Policies, SSO, and CII) 350-701 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How does Cisco Duo establish device trust for managed devices?

   • ABy verifying the device's serial number with the manufacturer
   • BBy installing the Duo Device Health application on the device to collect posture information
   • CBy checking the device's MAC address against an allowlist
   • DBy requiring the device to be connected to a specific Wi-Fi network
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization is implementing Duo for a workforce that uses both iOS and Android devices. They want to provide a seamless MFA experience that does not require users to type a code, but they also want to ensure that the authentication method is phishing-resistant. Which Duo MFA factor should they configure as the primary method?

   • ASMS passcodes
   • BDuo Mobile passcodes
   • CHardware tokens
   • DDuo Push with number matching
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An organization wants to allow employees to access a web application from both company-managed laptops and personal mobile devices. They require that company-managed laptops have a specific antivirus version and that personal devices are only allowed if they are jailbroken/rooted? The administrator needs to enforce these requirements before granting access. Which Duo feature should be used?

   • AUse Duo SSO to centralize authentication and rely on the identity provider to enforce device compliance.
   • BEnable Duo MFA with push notifications and require all users to approve the login.
   • CConfigure Duo Device Trust and create policies that check for the antivirus version and jailbreak/root status.
   • DDeploy Duo Trust Monitor and review authentication logs to identify non-compliant devices.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which statement best describes how Cisco Duo supports the zero-trust model?

   • AIt establishes a trusted network perimeter and allows all internal traffic
   • BIt grants access based on the user's role alone, without considering device context
   • CIt only protects cloud applications and does not support on-premises resources
   • DIt continuously verifies user identity and device posture before allowing access to applications
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   How does Cisco Duo enforce strong authentication for users?

   • ABy requiring a second authentication factor in addition to the primary credentials
   • BBy using CAPTCHA challenges on every login
   • CBy blocking all access from mobile devices
   • DBy requiring users to change their passwords every 30 days
   Reveal Solution Discussion Select an answer first