Which two statements about the management access control on Cisco WLC, using an external
TACACS+ server, are true? (Choose two.)

A.
The Cisco WLC supports TACACS+ command authorization.

B.
The Cisco WLC AAA authorization is role-based, using custom TACACS+ attributes.

C.
The Cisco WLC AAA authorization is role-based, using Cisco VSA attributes.

D.
The Cisco WLC requires the TACACS+ server to return a Privilege-Level attribute.

E.
If a user is not entitled to a specific task, then the user is not allowed to access that task.

F.
If a user is not entitled to a specific task, then the user is allowed to have read-only access to that
task.