Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?

A network engineer is trying to figure out whether FlexVPN or DMVPN would fit better in their environment.
They have a requirement for more stringent security multiple security associations for the connections, more efficient VPN establishment as well consuming less bandwidth. Which solution would be best for this and why?

What provides visibility and awareness into what is currently occurring on the network?

What are two Detection and Analytics Engines of Cognitive Threat Analytics? (Choose two.)

An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which action accomplishes this task?