Where would an administrator define the split-tunneling mode for a RAP located at a branch office?

Refer to the exhibit.

An administrator sets up a cluster of Aruba Mobility Controllers (MCs). What can the administrator determine about the cluster from the command output shown in the exhibit?

An administrator supports an Aruba wireless network. The administrator configures as AAA profile referenced in a WLAN profile, where:
* The initial role assigned in the AAA profile is logon
* The MAC authentication default role is guest
* The 802.1X authentication role is authenticated
ClearPass is used to verify the 802.1X user credentials. A user authenticates and is assigned the authenticated default role instead of the role assigned in the ClearPass serverconfiguration.
What must the administrator do so that the ClearPass role is assigned to the user?

Refer to the exhibit.

An administrator supports a RAP at a branch office shown in the exhibit. The company has one Mobility Controller (MC) at the Primary DMZ site and one at the Secondary DMZ site. TheRAP is configured to connect to only the MC at the Primary DMZ site. A network outage with the ISP at the Primary DMZ site causes the RAP to reboot. Upon reboot, the RAP cannot build a tunnel to the Secondary DMZ site MC because the administrator forgot toadd the Second LMS IP address to the AP Group configuration. Once the RAP can successfully connect, the administrator can add the Secondary DMZ MC as a backup LMS to fix the AP Group.
What should the administrator implement to allow the RAP to connect tothe MC at the Secondary DMZ site while the outage at the primary site persists?

An administrator has ArubaOS-Switches that support tunneled node. The administrator wants to tunnel all user traffic from the Ethernet ports on the switches, and have the controllers authenticate the user traffic and apply the appropriate user role.
Which implementation meets these requirements?