ISE RADIUS is configured for VTY authentication with local fallback. If ISE is down, Telnet should use local admin/cisco123. Which two config changes fix the failure? (Choose two.)

The command aaa authentication login RAD-LOCAL group RAD-SERV local defines a new authentication method list named RAD-LOCAL. This list first attempts authentication using the RAD-SERV server group (which would point to ISE RADIUS). If RAD-SERV is unavailable or authentication fails, it falls back to local authentication. The command line vty 0 4 login authentication RAD-LOCAL then applies this newly defined method list to the VTY lines, ensuring that the fallback mechanism is active. The option aaa authentication login RAD-SERV group RAD-LOCAL local is incorrect because it defines a method list that prioritizes a group named RAD-LOCAL, which is not the intended RADIUS server group. The option line vty 0 4 login authentication default would use the global default authentication list, which might not include the desired fallback. The option line vty 0 4 login authentication RAD-SERV would only attempt RADIUS authentication and would not provide a local fallback if ISE is down.