What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?

Refer to the exhibit.

A network administrator wants to allow contractors to access the WLAN named EmployeesNet. In order to restrict network access, the network administrator wants to assign this category of users to the contractor firewall role.

To do this, the network administrator configures ClearPass in a way that it returns the Aruba-User-Role VSA with the contractor value. When testing the solution the network administrator receives the wrong role.

What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?
A . Set contractor as the default role in the AAA profile.
B . Create the contractor firewall role in the M
D . Create server derivation rules in the server group.
E . Check the Download role from the CPPM option in the AAA profile.

Answer: A