Which list contains the different methods of authorization that are used by AAA?

Active Directory (AD) is not a directly configurable AAA authorization method on Cisco devices - it is a backend identity store that RADIUS or TACACS+ may reference.

This option omits RADIUS, which is a valid and commonly used authorization method, and incorrectly includes ACL as a method rather than a result of authorization.

ACL is not a valid AAA authorization method - it is a policy construct applied as the outcome of an authorization decision, and RADIUS is incorrectly excluded from this list.

Cisco IOS and NX-OS AAA authorization supports TACACS+ and RADIUS as external server methods, Local as a local-database method, and None to skip authorization entirely. These four are the valid options in 'aaa authorization' method-list commands; ACLs are an authorization result that gets applied, not a configurable method, and Active Directory is a backend identity store queried by RADIUS or TACACS+, not a direct method.