You need to log user permissions changes on server or on a domain controller. You also need to log changes to the local security account manager objects on all servers.
What should you do?

A.
Configure auditing of privilege user and object access on all servers and domain controllers and set it to failure.

B.
Configure auditing of policy change and account management on all servers and domain controllers and set it to success.

C.
Configure auditing of process tracking and logon events on all servers and domain controllers and set it to success.

D.
Configure auditing of system events and directory service access on all servers and domain controllers and set it to failure.