Which two statements best describe the reason that TACACS+ is more desirable from a security standpoint than RADIUS?

Which two statements best describe the reason that TACACS+ is more desirable from a security standpoint than RADIUS? (Choose two.)

A.
It encrypts the password field with a unique key between server and requester.

B.
It uses TCP as its transport

C.
It uses UDP as its transport.

D.
Encrypting the whole data payload is optional.