You work as a network administrator at International Retailers, Ltd. You have received instruction to start designing a Group Policy object (GPO) settings to support the use of the Encrypting File System (EFS). International Retailers, Ltd. requires that the solution you are busy designing meets business and security requirements of the company. You are required to select which of the actions you should perform
What should you do? (Each correct answer presents part of the solution. Choose TWO.)

A.
A data recovery agent should be designated and issue an EFS certificate to the data recovery agent.
The private key should be exported and restrict access to the exported key.

B.
The data recovery agent should be made a local administrator on all client computers.

C.
The default data recovery agent should be removed from the Default Domain Policy GPO.
Then, include the new data recovery agent instead.

D.
The Default Domain Policy GPO should be deleted. A new GPO linked to the domain should be configured that does not specify a data recovery agent.