You have a Windows Server 2008 R2 Enterprise Root certification authority (CA).

You need to grant members of the Account Operators group the ability to only manage Basic EFS certificates.

You grant the Account Operators group the Issue and Manage Certificates permission on the CA.

Which three tasks should you perform next? (Each correct answer presents part of the solution.
Choose three.)

A.
Enable the Restrict Enrollment Agents option on the CA.

B.
Enable the Restrict Certificate Managers option on the CA.

C.
Add the Basic EFS certificate template for the Account Operators group.

D.
Grant the Account Operators group the Manage CA permission on the CA.

E.
Remove all unnecessary certificate templates that are assigned to the Account Operators group.