正解:D
In Cisco Identity Services Engine (ISE), when you want to assign VLANs to clients based on their method of authentication, you must enable the AAA Override option in the authorization profile settings. This allows attributes such as VLAN ID, Access Control Lists (ACLs), and session timeout values received in RADIUS accept messages from Cisco ISE to override the interface configuration on the network access device. Without enabling AAA Override, the network device will not apply the VLAN assignments specified by ISE during authentication.