Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

DHCP server is a network service for assigning IP addresses and is not an advanced option on a WLAN specifically for triggering CWA.

Static IP tunneling relates to specific network configurations for traffic encapsulation and is not directly involved in triggering Central Web Authentication.

Override Interface ACL is a security feature to apply access control lists, but it doesn't directly trigger a web authentication flow like CWA.

AAA override, when enabled on a WLAN, permits the RADIUS server to send attributes back to the WLC that dynamically change client parameters, such as VLANs, ACLs, or URL redirects, which is essential for initiating Central Web Authentication. This feature allows Cisco ISE to instruct the WLC to redirect unauthenticated clients to a web portal for guest access or posture assessment.