Which of the following tools can be used to assign, display, or modify ACLs (access control lists) to files or folders and could also be used within batch files in Windows NT/2000/XP operating system?

netstat is a networking utility that displays active TCP/UDP connections and listening ports, not a tool for managing file-system permissions.

ipconfig.exe displays and manages the IP configuration of network adapters and has no functionality related to file or folder ACLs.

cacls.exe (Change ACLs) is a built-in Windows NT/2000/XP command-line tool that can display, assign, and modify discretionary ACLs on files and directories. Because it is a command-line utility, it can be embedded directly in batch scripts to automate permission management across multiple files or folders.

tracert traces the hop-by-hop route packets take to a destination host and has no relation to access control list management.