Exam 156-215.80 topic 1 question 443 discussion

D is correct: When you work with AD Query, it is important that you understand and comply with these limitations: -User/IP association timeout - After a predefined period of network inactivity, a user session closes automatically. The user must log in again with the Captive Portal. - Many user accounts connected from the same IP address - AD Query cannot detect when a user logs out. Therefore, more than one user can have open sessions from the same IP address. When this occurs, the permissions for each account remain active until their User/IP association timeout occurs. In this scenario, there is a risk that currently connected users can access network resources, for which they do not have permissions. https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_IdentityAwareness_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_IdentityAwareness_AdminGuide/149265

I think it's B, all other actions have impact on a user vs IP link Requesting a ticket doesn't mean you'll get one, so I think B is the correct answer, but I could be wrong...