Refer to the exhibit.

Employees connect on wired connections, which are secured with 802.1X. Employees can also
connect to a WLAN that enforces Wi-Fi Protocol Access 2 (WPA2) and 802.1X authentication.
The customer wants users to be assigned to different VLANs based on their Active Directory user
groups.
Each of the 14 users groups includes between 100 and 200 users. The customer expects only
several hundred concurrent wireless users, who might move around the site.
How can the architect make this design seamless roaming between access points (APs)
connected in different locations?

A.
Disable WPA2 and 802.1X on the employees WLAN. Configure the controller’s IPSec Virtual
Private Network (VPN) capabilities for the WLAN instead.

B.
Enable preauthentication for the Employees WLAN. Also enable this feature on the Wireless
clients and on the RADIUS server that authentication users.

C.
Make sure that the RADIUS server assigns a user to the same VLAN regardless of whether the
user has connected on an Ethernet port or to the WLAN.

D.
Add VLAN 2-16 to the core switch with new subnet addresses. Have APs tunnel all user traffic
to the controller (using mobility traffic manager[MTM]