How should you configure BSM to help you detect whether an attacker has removed audit records?

A.
Audit records already indicate this by default.

B.
You execute the command bsmconv +cnt and reboot.

C.
auditconfig -setpolicy +cnt should be added to /etc/security/audit_startup.

D.
auditconfig -setpolicy +seq should be added to /etc/security/audit_startup.