You administer Windows 10 Enterprise client computers in your company network. A computer that is used by
non-administrator users has a directory named C:\\Folder1.
A shared collection of Microsoft Excel files is stored in the C:\\Folder1 directory, with non-administrator users
being granted modify permissions to the directory.
You discover that some files have been incorrectly modified by a user.
You need to determine which users are making changes to the files in the directory.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A.
Set localpolicy: Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Audit Policy
\\Audit object access to Failure.

B.
From the Auditing Entry for Folder1, set the Principal to Everyone, and then set the Type to Failure for the
Modify permission.

C.
From the Auditing Entry for Folder1, set the Principal to Guests, and then set the Type to Success for the
Modify permission.

D.
Set local policy: Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Audit Policy
\\Audit object access to Success.

E.
From the Auditing Entry for Folder1, set the Principal to Guests, and then set the Type to Failure for the
Modify permission.

F.
From the Auditing Entry for Folder, set the Principal to Everyone, and then set the Type to Success for the
Modify permission.