Comprehensive Detailed Explanation:
In 802.1X/EAP-based authentication:
After Open System authentication, clients send EAP messages via the uncontrolled port.
The Controlled Port remains blocked until the 802.1X/EAP and 4-Way Handshake processes are complete.
Incorrect:
A). The AP or controller is the authenticator, not the client.
B). EAP types must match between supplicant and server.
D). Controlled port remains blocked until full authentication and key negotiation completes.
References:
CWSP-208 Study Guide, Chapter 4 (802.1X Controlled and Uncontrolled Port Behavior) IEEE 802.1X Framework Details