A is not correct. Only C is correct https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_010101.html.xml#ID542 The profiling service issues the change of authorization in these cases: Endpoint deleted—When an endpoint is deleted from the Endpoints page and the endpoint is disconnected or removed from the network. Cisco ISE does not issue a CoA for the following reasons: An Endpoint disconnected from the network—When an endpoint disconnected from your network is discovered.

Answer is C. https://content.cisco.com/chapter.sjs?uri=%2Fsearchable%2Fchapter%2Fcontent%2Fen%2Fus%2Ftd%2Fdocs%2Fsecurity%2Fise%2F2-6%2Fadmin_guide%2Fb_ise_admin_guide_26%2Fb_ise_admin_guide_26_chapter_010100.html.xml&platform=Cisco%20Identity%20Services%20Engine&release=2.6

A is correct too.

Selected Answer: C C for sure. Refer to this statement in the link below: "An endpoint profiling policy has changed and the policy is used in an authorization policy—When an endpoint profiling policy changes, and the policy is included in a logical profile that is used in an authorization policy." link: https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_010101.html.xml#ID542

link doesn't work

Selected Answer: C https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/Workflow/b_endpoint_profiling_2_4.html