When hosts are noncompliant with security policies, which Cisco Catalyst 4948 Switch feature allows

When hosts are noncompliant with security policies, which Cisco Catalyst 4948 Switch feature allows them to be isolated from the network?

A.
NAC

B.
private VLANs

C.
IP Source Guard

D.
unicast MAC filtering