The school-district student application catalog must fail closed when UEM compliance cannot be read. How should the Access policy treat unknown device posture?
Select an answer to reveal the explanation.
Short Explanation
Unknown posture is a blank hall pass, and sensitive catalogs should not wave it through. Deny when compliance cannot be read. Allow-on-unknown is fail-open, which is the opposite of what the district asked.
Full Explanation
Workspace ONE Access can require device compliance as a condition and should deny when that signal is missing for sensitive applications. Defaulting unknown compliance to allow is fail-open. Username-only access and NSX-T tags do not implement fail-closed posture for the student catalog.