A. Active Directory alone is not enough, but when it is integrated with the role-based access firewall, the combined solution functions as a mobile device management solution.

B. Microsoft's Active Directory has been proven by multiple security analysts to be easily hackable, so it requires ClearPass's more secure credential repository to enhance it.

C. While Active Directory can define access controls for users based on factors such as identity and type of connection, it does not provide machine learning to track user behavior, as ClearPass does.

D. Active Directory authenticates users, but true network access control must define who and which devices can connect to which devices, data, infrastructure, and apps, as ClearPass does.