Your company has a server that runs Windows Server 2008. Certification Services is configured as a stand-alone Certification Authority （CA） on the server. You need to audit changes to the CA configuration settings and the CA security settings. Which two tasks should you perform（）
- AConfigure auditing in the Certification Services snap-in.
- BEnable auditing of successful and failed attempts to change permissions on files in the %SYSTEM32% \CertSrv directory.
- CEnable auditing of successful and failed attempts to write to files in the %SYSTEM32%\CertLog directory.
- DEnable the Audit object access setting in the Local Security Policy for the Certification Services server.