Which two statements about configuring the Cisco ACS server to perform router command authorization are ture?

Which two statements about configuring the Cisco ACS server to perform router command authorization are ture? (Choose two.)
exhibit

Which two statements about configuring the Cisco ACS server to perform router command authorization are ture? (Choose two.)

A.
In the ACS User Group setyp screen, use Shell Command Authorization Set options to configure which commands and command arguments to permit or deny.

B.
From the ACS Interface Configuration screen,select RADIUS (Cisco IOS/PIX 6.0), and then enable the Shell (exec) option on the RADIUS Services screen.

C.
When adding the router as an AAA client on the Cisco ACS server,choose the TACACS+ (CISCO IOS) protocol.

D.
Configure the Cisco ACS server to forward authentication of users to an external user databases, like Windows Database.