You plan to use Cisco Centralized Key Manager fast roaming with FlexConnect APs. Which configuration do you apply to minimize delays for real-time traffic while roaming?

FlexConnect groups allow member APs to share Pairwise Master Key (PMK) caching information, which is required for CCKM and OKC fast roaming to function correctly when clients roam between APs. This eliminates the need for full 802.1X reauthentication on each roam, minimizing delays that would otherwise disrupt real-time traffic such as voice or video.

FlexConnect local authentication offloads 802.1X authentication to the branch when the WAN is down but does not provide the shared key caching needed for fast roaming.

FlexConnect AVCs (Application Visibility and Control) enforce per-application QoS and access policies but have no role in managing roaming key handoffs.

FlexConnect centralized authentication sends client credentials back to the WLC for processing, which increases latency on each roam and is the opposite of what is needed to minimize delay.