If single sign-on (SSO) is not working for a Layer 2 out-of-band (OOB) virtual gateway implementation, which two of these can you check to troubleshoot the issue? (Choose two.)
A.
The clock between the NAC server and the Active Directory server is synchronized.
B.
The KTPass.exe command was executed on the domain controller with the /RC4Only option.
C.
The adkernel.exe process on the domain controller is accepting requests from the Cisco Clean Access Server.
D.
The Active Directory domain definition was defined in upper case on the Cisco Clean Access Manager.
E.
The ports are open to the appropriate domain controller in the guest role on Cisco Clean Access Manager.