Given the following configuration: set system authentication-order [ tacplus ] Which two statements are correct? (Choose two.)

Given the following configuration:
set system authentication-order [ tacplus ]
Which two statements are correct? (Choose two.)

A. If the TACACS+ server is available and rejects the username/password provided, the user is not allowed to access the device. B. If the TACACS+ server is available and rejects the username/password provided, the local password database is checked. C. If the TACACS+ server is not available, the user is not allowed to access the device. D. If the TACACS+ server is not available, the local user database is checked.