Which two features should be used on Cisco ISE to enable the TACACS+ feature? (Choose two )

External TACACS Servers are configured if ISE is acting as a proxy to forward requests, not to enable ISE's own TACACS+ functionality.

To enable TACACS+ functionality on Cisco ISE for device administration, the 'Device Admin Service' must be enabled on the Policy Service Node, as this service handles the TACACS+ authentication and authorization requests.

A 'Device Administration License' is required to unlock and utilize the TACACS+ feature within Cisco ISE, allowing for secure management of network devices.

Server Sequence defines the order in which identity sources are checked, which is part of policy configuration, not a feature enabling TACACS+ itself.

Command Sets are used for granular TACACS+ authorization (what commands an administrator can run), which is configured *after* the TACACS+ feature is enabled.