6.7 Describe Cisco Duo in a Zero-Trust Security Architecture (Trust Monitor, MFA, Device Trust, Health Checks, Adaptive Access Policies, SSO, and CII) 350-701 Practice Questions (Page 6)

Questions 26–29

1. 26expert · hard

   A company wants to enforce that only devices with a specific OS version and enabled disk encryption can access a sensitive application. They also want to allow users to access the application from a personal device, but only if the device passes health checks. They want to avoid prompting for MFA on every access for compliant devices. Which Duo configuration should they implement?

   • AUse Duo SSO and rely on the identity provider to enforce device compliance.
   • BEnable Duo Device Trust with health checks and configure Adaptive Access policies to allow compliant devices to skip MFA for a set period.
   • CDeploy Duo Trust Monitor and block any authentication from non-compliant devices.
   • DEnable Duo MFA with a hardware token for all users and require device enrollment.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company uses multiple cloud applications that support SAML. They want to reduce the number of times users have to authenticate while still enforcing MFA for all access. They also want to apply different MFA requirements based on the user's risk profile. Which Duo feature should they implement?

   • ADeploy Duo Authentication Proxy for each application to provide MFA.
   • BUse Duo Device Trust to ensure all devices are compliant before access.
   • CEnable Duo Trust Monitor to alert on risky authentications.
   • DConfigure Duo Single Sign-On for all SAML applications and enable Adaptive Access policies.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to allow employees to access a web application from any device, but they want to require an additional MFA factor when the user is accessing from a device that has not been seen before. They also want to require a specific browser version for all access. Which Duo feature should they use to implement these requirements?

   • AEnable Duo Device Trust and require all devices to be enrolled before access.
   • BConfigure Duo MFA with a single factor and rely on the application to enforce browser version.
   • CUse Duo Adaptive Access policies to require step-up authentication for new devices and enforce browser version checks.
   • DDeploy Duo Trust Monitor and block any authentication that is flagged as anomalous.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a key benefit of integrating Cisco Duo with SSO?

   • AIt eliminates the need for multi-factor authentication
   • BIt allows users to bypass security policies for SSO-enabled apps
   • CIt stores user credentials in plaintext for faster access
   • DIt reduces password fatigue by minimizing the number of login prompts
   Reveal Solution Discussion Select an answer first