The correct answers are - endpoint profile transition from Apple-device to Apple-iPhone and - endpoint profile transition from Unknown to Windows10-Workstation.
When CoA is enabled globally for ReAuth, Cisco ISE will send a CoA to the endpoint when the endpoint profile changes. This allows Cisco ISE to dynamically update the endpoint's authorization profile.
In the given options, only when the endpoint profile changes from Apple-device to Apple-iPhone or from Unknown to Windows10-Workstation, CoA will be triggered.
The other options are incorrect:
Addition of endpoint to My Devices Portal does not trigger a CoA.
Endpoint marked as lost in My Devices Portal does not trigger a CoA.
Updating of endpoint dACL does not trigger a CoA.
DE after research:
https://community.cisco.com/t5/security-knowledge-base/ise-profiling-design-guide/ta-p/3739456#toc-hId-1003003974
--> Profile Transitions and Change of Authorization
True.
Moreover, global CoA setting mentioned in the question (Administration > System > Settings > Profiler) is related only to profiling, not to portals like My Devices, etc.
Refer to that phrase on official book "When the profiler CoA is enabled globally, a CoA is automatically sent for any endpoint that transitions from unknown to any known profile".
upvoted 4 times
...
This section is not available anymore. Please use the main Exam Page.300-715 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
denverfly
1 year, 5 months agojohndelorien
1 year, 5 months agoElCobra90
1 year, 3 months agojohndelorien
1 year, 5 months agoNikoTomas
8 months, 2 weeks agoYmerG
1 year, 8 months ago