Refer to the exhibit.
A network engineer is configuring the switch to accept downloadable ACLs from a Cisco ISE server.
Which two commands should be run to complete the configuration? (Choose two.)
A. radius-server attribute 8 include-in-access-req
B. ip device tracking
C. dot1x system-auth-control
D. radius server vsa send authentication
E. aaa authorization auth-proxy default group radius
This should be B and D
Option C is for globally enabling dot1x
Also see: https://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/sec-802x-acl-support.html