A corporate environment includes Active Directory Domain Services (AD DS). The environment consists of an internal network and a perimeter network. AD DS is deployed only on the internal network. The company intends to utilize a service provider s cloud-based Exchange Server 2010 SP1 email service. You have the following requirements:

* Maximize the security of the design.
* Use the minimum permissions required to perform directory synchronization. You need to recommend a solution for directory synchronization between the corporate environment and the service provider s environment.

Which two actions should you recommend? (Each correct answer presents part of the solution. Choose two.)

A.
Install the directory synchronization tool on a computer on the internal network.

B.
Install the directory synchronization tool on a computer in the perimeter network.

C.
Create a directory synchronization service account with membership in the Domain Users group.

D.
Create a directory synchronization service account with membership in the Domain Admins group.