Refer to the exhibit. 
Your manager has asked you to configure a remote office Cisco WLC to support local EAP
authentication. The manager wants the clients to use EAP-FAST. The LDAP server is Microsoft
Active Directory. All users, including the account that is used to bind to the LDAP server, are in the
default Users container in Active Directory. No RADIUS servers are configured on the Cisco WLC.
The client is using the latest Intel card and supplicant.
Why does the test client fail to authenticate?
A.
Local EAP does not support EAP-FAST when using an Active Directory LDAP server.
B.
The LDAP bind account cannot be in the same container as the wireless user accounts.
C.
The User object type is incorrect.
D.
The default Users container in Active Directory is a container rather than an organizational unit.
E.
The User attribute is incorrect.