Configure the switch to allow network traffic to the locally assigned VLAN before 802.1X authentication has taken place by issuing the authentication open command in interface configuration mode. By default, 802.1X drops all non-EAPOL traffic before a successful 802.1X (or MAB) authentication or web authorization initialization. This mode is referred to as closed mode.
The authentication open command enables open-access mode, which allows traffic (in both the data and voice VLANs), before successful authentication.
If that traffic is not restricted by an ACL locally assigned to the port, it is considered monitor mode.
If a locally assigned ACL is in place, limiting the traffic that is allowed before authentication, then it is considered low impact mode.
For more, see https://guides.co/g/cisco-trustsec-phased-deployment-overview/11100
Correct answer is A.
Configure the switch to allow network traffic to the locally assigned VLAN before 802.1X authentication has taken place by issuing the authentication open command in interface configuration mode. By default, 802.1X drops all non-EAPOL traffic before a successful 802.1X (or MAB) authentication or web authorization initialization. This mode is referred to as closed mode.
The authentication open command enables open-access mode, which allows traffic (in both the data and voice VLANs), before successful authentication.
If that traffic is not restricted by an ACL locally assigned to the port, it is considered monitor mode.
If a locally assigned ACL is in place, limiting the traffic that is allowed before authentication, then it is considered low impact mode.