Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

Marking an endpoint as lost in My Devices Portal might trigger other administrative actions like quarantine, but it does not directly trigger a CoA for reauthentication based on a profile change.

Adding an endpoint to My Devices Portal is an administrative action and does not, by itself, trigger a CoA for reauthentication unless it also causes a profile change or policy re-evaluation.

When an endpoint's profile transitions to a more specific or different profile, such as from a general 'Apple-device' to 'Apple-iPhone', Cisco ISE can initiate a CoA to re-evaluate authorization based on the new, more precise profile.

A profile transition from an 'Unknown' status to a clearly identified device type like 'Windows 10-Workstation' signifies a change in endpoint classification, prompting a CoA for reauthentication and reauthorization based on its new identity.

Updating of an endpoint's dACL (Dynamic Access Control List) is typically a *result* of a policy change and subsequent CoA, not an event that *triggers* the CoA for reauthentication itself.