Which two of these statements are true about the Cisco Clean Access solution? (Choose two.)

A.
When two Cisco Clean Access Managers (Cisco CAMs) are set up in failover, the “service IP address” is the IP address of the primary Cisco CAM.

B.
If a single Cisco Clean Access Server (Cisco CAS) operating in in-band device mode dies, the traffic cannot pass through the hardware.

C.
When a Cisco Clean Access Server (Cisco CAS) is unable to communicate with the Cisco CAM, users who are already connected will not be affected, but new users will not be able to log in.

D.
When a Cisco Clean Access Server (Cisco CAS) is unable to communicate with the Cisco CAM, all users (previously authenticated users and new users) will pass traffic due to its default behavior of Fail Open.

E.
The clock between the Cisco Clean Access Server (Cisco CAS) and the Cisco Clean Access Manager (Cisco CAM) must be synchronized for Active Directory single sign-on to work.