Which statement explains this behavior?

Refer to the exhibit.

Your customer is testing native supplicant provisioning using Cisco ISE (192.168.1.2) and a Cisco WLC. The Cisco WLC has an ACL configured on it called onboarding. During the testing of many different client devices (Android, Apple, Windows) it appears that these devices are never redirected to the onboarding portal, though they can access the Internet.

Which statement explains this behavior?
A . There is nothing wrong with AC
B . The problem must exist either on the client side or on the configured ISE authorization profile.
C . The ISE ACLs have a permit statement. Redirection will not take place unless the ISE IP address is denied.
D . The ACL has a permit any at the end. Redirection does not take place unless the client hits a web site that gets denied.
E . The source and destination port in the ACL lines are not set up correctly.

Answer: C

Explanation:

From: http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth00.html