Your company recently implemented Layer 2 authentication and access control to secure
users accessing the corporate network. You implemented 802.1X, MAC RADIUS, and a
captive portal to support a variety of hosts on the network. Senior management is
concerned that valid users might be authenticated incorrectly on the network and they ask
you questions about how these different access technologies are used simultaneously.
Which three statements are correct? (Choose three.)

A.
MAC addresses that are part of a MAC address whitelist or a static MAC list are
authenticated before any other authentication protocol is invoked.

B.
If a port is configured with 802.1X and the host does not respond to EAP requests, no
other authentication protocol can authenticate the host.

C.
Captive portal can only be configured on Layer 3 interfaces.

D.
Captive portal is a supported fallback option for 802.1X.

E.
If the authentication server fails to respond to access requests and both a server-fail and
guest VLAN are configured correctly, the server-fail VLAN takes precedence over the guest
VLAN.