IX-enabled switch allow before authentication?

By default, which traffic does an 802.IX-enabled switch allow before authentication?

A.
alltraffic

B.
no traffic

C.
trafficpermittedin the port dACL on Cisco ISE

D.
traffic permitted in the default ACL on the switch