You create a User Profile Synchronization connection.
You need to grant the necessary permissions to the synchronization account.
What should you do?
A. Grant the account Full Control on the ActiveUsers OU.
B. Grant the account Full Control on the AuthenticatedUsers AD security group.
C. Grant the account Read permission on the domain.
D. Grant the account the Replicate Directory Changes permission on the domain.
