YourcompanyhasaserverthatrunsWindowsServer2008R2.ActiveDirectoryCertificateServices(ADCS)i
A.ConfigureauditingintheCertificationAuthoritysnap-in.
B.Enableauditingofsuccessfulandfailedattemptstochangepermissionsonfilesinthe%SYSTEM32%\CertSrvdirectory.
C.Enableauditingofsuccessfulandfailedattemptstowritetofilesinthe%SYSTEM32%\CertLog directory.
D.EnabletheAuditobjectaccesssettingintheLocalSecurityPolicyfortheActiveDirectoryCertificateServices(ADCS)server.