part.
Explanation:
Step 1: Understand the Scenario
Issue:Userscannot authenticateusing personal devices.User claim:No changes have been made to
their devices since they were last able to authenticate.
Step 2: Review the Policy Settings
From theGlobal settingstable:
✅Enabled Policies:
Anonymous networks:Blocks Tor (✅)
Operating systems:Blocks:
Android 8.1.0 and below
iOS 13.7 and below
Windows 7 and below
Chrome OS (all)
BlackBerry (all)
Authentication method:Push only (✅)
User location:Only allows regions:
NORTHAMERICA-REGION-7
NORTHAMERICA-REGION-10
NORTHAMERICA-REGION-11
NORTHAMERICA-REGION-12
Disabled Policies:
Browser restriction(Chrome, Firefox, Edge) isdisabled(i.e., any browser is allowed)
New user policyisdisabled
Step 3: Examine the Authentication Results Table
From the access log table:
Subject
Result
Access object
Jacob
Deny - context
Sales_application
Bob
Time-out
IT_intelligence_svc
Jane
Deny - context
Accounting_database
Jenny
Time-out
Sales_application
These four failed. Let's match them with policies.
Step 4: Correlate With Telemetry Logs
Jacob:
OS:iOS 13.0 →Below 13.7→❌Violation ofOperating System policy
Location:REGION not specified fully, assume okay unless proven otherwise✅Policy
violated:Operating system
Bob:
OS:Android 10 →✅Allowed
Location:NORTHAMERICA-REGION-12 →✅Allowed
Behavior:Time-outThis could be aconnectivityorpush timeout, not policy violation.⛔️Not due to
policy violation
Jane:
OS:iOS 14.2 →✅Allowed
Location:NORTHAMERICA-REGION-6 →❌Not in allowed regions✅Policy violated:User location
Jenny:
OS:Android 10 →✅Allowed
Location:NORTHAMERICA-REGION-6 →❌Not in allowed regions✅Policy violated:User location
✅Step 5: Final Answer
Violated Policies:
✅Operating Systems→ Violated byJacob
✅User Location→ Violated byJaneandJenny
Telemetry Logs that explain violations:
Log 3– Jacob (OS iOS 13.0 → blocked)
Log 6– Jane (Region 6 → blocked)
Log 7– Jenny (Region 6 → blocked)
✔️Final Answer Summary:
Policies Violated:
✅Operating systems
✅User location
Relevant Telemetry Logs:
Jacob → Log 3
Jane → Log 6
Jenny → Log 7
