How does the Cisco NAM determine the presence of vulnerability without using the Cisco NAA on the client machine?

A.
The end-user Cisco Trust Agent capability summary message does not match the defined role-based security policy requirement on the Cisco NAM.

B.
The Cisco NAM receives a Cisco Security Agent vulnerability alert from the Cisco NAS

C.
The Nessus network scan report matches a defined role-based or OS-based vulnerability on the Cisco NAM

D.
The Cisco NAM will perform an agentless scan and interpret the results to determine if the client machines is vulnerable