What two sets of minimum permission are needed to delegate to an AD service account?

An architect is designing Active Directory (AD) permissions for a Horizon environment that will use pre-existing computer accounts. The AD Security Team has restrictions about the use of service accounts.
What two sets of minimum permission are needed to delegate to an AD service account? (Choose two.)
A. Create Computer Objects, Delete Computer Objects
B. List Contents, Read All Properties
C. Read Permissions, Reset Password
D. Write Permissions, Change Password