Which Cisco FlexConnect state lets wireless clients continue operating when the controller connection is lost?

The correct answer is Authentication-Down/Switch-Local. This state allows wireless clients to maintain connectivity and operate locally even if the connection to the central Wireless LAN Controller (WLC) is lost. The access point (AP) handles local switching of data traffic. Authentication-Central/Switch-Local means authentication still relies on the WLC, which would fail if the connection is down. Authentication-Central/Switch-Central implies both authentication and switching are dependent on the WLC, leading to a complete outage. Authentication Down/Switching Down would mean no client connectivity at all.