Which of these is true of a Layer 3 out-of-band NAS deployment?

Which of these is true of a Layer 3 out-of-band NAS deployment?

A.
The NAS acts as a gateway for all Layer 3 traffic.

B.
Only the MAC address is used to identify the client device.

C.
User traffic remains on the same VLAN for the duration of the connection.

D.
After authentication and posture assessment, client traffic no longer passes through the NAS.