Consider the Apex controller above, that is called from a Lightning Aura Component.

What is wrong with it?

A. Line 1: class must be global
B. Lines 1 and 6: class and method must be global

C. Line 6: method must be static

D. Line 8: method must first serialize the list to JSON before returning