The Web Security Appliance has identities defined for faculty and staff, students, and default
access. The faculty and staff identity identifies users based on the source network and
authenticated credentials. The identity for students identifies users based on the source network
along with successful authentication credentials. The global identity is for guest users not
authenticated against the domain.
Recently, a change was made to the organization’s security policy to allow faculty and staff access
to a social network website, and the security group changed the access policy for faculty and staff
to allow the social networking category.
Which are the two most likely reasons that the category is still being blocked for a faculty and staff
user? (Choose two.)

A.
The user is being matched against the student policy because the user did not enter
credentials.

B.
The user is using an unsupported browser so the credentials are not working.

C.
The social networking URL was entered into a custom URL category that is blocked in the
access policy.

D.
The user is connected to the wrong network and is being blocked by the student policy.

E.
The social networking category is being allowed but the AVC policy is still blocking the website.

Explanation: