In single SSID onboarding, which of the following methods can be used in the Enforcement
Policy to distinguish between a provisioned device and a device that has not gone through
the Onboard workflow?

A.
Authentication Method used

B.
Network Access Device used

C.
Endpoint OS Category

D.
OnGuard Agent used

E.
Active Directory Attributes