Your company has a server that runs Windows Server 2008 R2. Active Directory Certificate Services (AD CS)
is configured as a standalone Certification Authority (CA) on the server.
You need to audit changes to the CA configuration settings and the CA security settings.
Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
Configure auditing in the Certification Authoritysnap-in.

B.
Enable auditing of successful and failed attemptsto change permissions on files in the %SYSTEM32%
\CertSrv directory.

C.
Enable auditing of successful and failed attemptsto write to files in the %SYSTEM32%\CertLog directory.

D.
Enable the Audit object access setting in the Local Security Policy for the Active Directory Certificate
Services (AD CS) server.