Your company recently implemented Layer 2 authentication and access control to secure users
accessing the corporate network. You implemented 802.1X, MAC RADIUS, and a captive portal to
support a variety of hosts on the network. Senior management is concerned that valid users might
be authenticated incorrectly on the network and they ask you questions about how these different
access technologies are used simultaneously.
Which three statements are correct? (Choose three.)

A.
MAC addresses that are part of a MAC address whitelist or a static MAC list are authenticated
before any other authentication protocol is invoked.

B.
Captive portal is a supported fallback option for 802.1X.

C.
If the authentication server fails to respond to access requests and both a server-fail and guest
VLAN are configured correctly, the server-fail VLAN takes precedence over the guest VLAN.

D.
Captive portal can only be configured on Layer 3 interfaces.

E.
If a port is configured with 802.1X and the host does not respond to EAP requests, no other
authentication protocol can authenticate the host.