which point in the authentication process does the Junos Pulse Access Control Service determine whether the endpoint complies with a realm’s authentication policy?

At which point in the authentication process does the Junos Pulse Access Control Service
determine whether the endpoint complies with a realm’s authentication policy?

A.
Before the user credentials are submitted to the authentication server

B.
After the user has successfully been authenticated by the authentication server

C.
During the role-mapping process

D.
After the user has been assigned a role