Which two statements about the management access control on Cisco WLC, using an external TACACS+ server, are true? (Choose two.) 

Answer options:

A. The Cisco WLC supports TACACS+ command authorization.
B. The Cisco WLC AAA authorization is role-based, using custom TACACS+ attributes.
C. The Cisco WLC AAA authorization is role-based, using Cisco VSA attributes.
D. The Cisco WLC requires the TACACS+ server to return a Privilege-Level attribute.
E. If a user is not entitled to a specific task, then the user is not allowed to access that task.
F. If a user is not entitled to a specific task, then the user is allowed to have read-only access to that task.

BF