Which selections must be used on the WLC when implementing a RADIUS server for wireless authentication?

Client Exclusion is a security feature that temporarily blocks clients exhibiting suspicious behavior, and SSH is a secure remote management protocol; neither is directly used for enabling RADIUS authentication on a WLAN.

Network Access Control State relates to NAC features, and SSH is for secure management; neither directly configures RADIUS authentication for wireless clients.

When configuring a RADIUS server for wireless authentication on a WLC, you need to specify the IP address of the RADIUS server so the WLC knows where to send authentication requests. AAA Override allows the RADIUS server to dynamically apply specific client-level policies, such as VLANs or ACLs, after successful authentication, which is a common and important feature when integrating with RADIUS.

While 802.1X is the standard for port-based network access control often used with RADIUS, you configure the RADIUS server by its IP address on the WLC, not its MAC address, which is a Layer 2 identifier.