CompTIA Security+ (SY0-501) — Question 939

Which of the following can be used to control specific commands that can be executed on a network infrastructure device?

Answer options

• A. LDAP
• B. Kerberos
• C. SAML
• D. TACACS+

Correct answer: D

Explanation

The correct answer is D, TACACS+, which is designed to provide command-level control over access to network devices. LDAP, Kerberos, and SAML are primarily used for authentication and authorization but do not offer the same level of command control specific to network devices.