What is the next action taken by the Cisco NAC Appliance after it identifies a vulnerability on a client device?

What is the next action taken by the Cisco NAC Appliance after it identifies a vulnerability on a client device?
A. denies the client network resource access
B. repairs the effected devices
C. generates a Syslog message
D. permits the client but limits to guest access