Controlling Commands on Network Infrastructure Devices

D.

The correct answer is D. TACACS+.

TACACS+ (Terminal Access Controller Access-Control System Plus) is a protocol that provides centralized access control for network devices. It can be used to control which commands a user is allowed to execute on a network infrastructure device such as a router or switch. TACACS+ operates on a client-server model, where the client sends a request to the server, and the server responds with an access grant or denial.

LDAP (Lightweight Directory Access Protocol) is a protocol used to access and manage directory information. It is not used for controlling commands on network infrastructure devices.

Kerberos is a protocol used for authentication. It is not used for controlling commands on network infrastructure devices.

SAML (Security Assertion Markup Language) is an XML-based protocol used for exchanging authentication and authorization data between parties. It is not used for controlling commands on network infrastructure devices.

In summary, TACACS+ is the protocol that can be used to control specific commands that can be executed on a network infrastructure device.