In an edge deployment of an in-band virtual-gateway Cisco NAC Appliance solution, how does the Cisco NAS ensure that authenticated client traffic arrives at the correct default gateway?

A.
Managed subnets ensure that devices on different untrusted VLANs arrive at the correct default gateways on the trusted side

B.
After authentication, the Cisco NAA using its cached IP Addresses, supplies the IP Address of the Correct gateway to the Cisco NAS

C.
VLAN trunks are used to aggregate the traffic form the managed subnets to the Cisco NAS before forwarded to their respective gateways on the Layer 3 switch or router

D.
Cisco NAS interface are connected to trunked ports to provide VLAN passthrough to the correct gateway