Your company has an Active Directory directory service domain. All servers run Windows Server 2003. You are designing a security plan to reduce the risk in the event of a brute force password attack.

You need to modify Group Policy settings to record unauthorized access attempts.

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

A.
Audit failure events.

B.
Audit success events.

C.
Enable the Audit. Shut down system immediately if unable to log security audits policy setting.

D.
Disable the Audit. Shut down system immediately if unable to log security audits policy setting.