CMX Facebook WiFi can allow access to the network before authentication. Which two of the following options are available? (Choose two)

CMX Facebook WiFi does not offer an option to intercept HTTPS traffic only before authentication, as HTTPS interception would require certificate substitution and is not a valid pre-auth mode in CMX.

Allowing only HTTP traffic before authentication ensures the captive portal redirect mechanism works for unauthenticated clients while blocking all other protocols, preventing unauthenticated network access beyond what is needed to trigger the login portal.

SNMP is a network management protocol and has no role in pre-authentication traffic control for a guest captive portal solution like CMX Facebook WiFi.

Allowing all traffic before authentication but intercepting only HTTP requests enables a permissive pre-auth experience where the Facebook login page is presented when clients attempt HTTP browsing, while non-HTTP traffic passes freely.

Allowing only HTTPS traffic before authentication is not a supported pre-authentication mode in CMX Facebook WiFi; the portal redirect relies on HTTP, not HTTPS.