Which two actions should you perform?

You have a standalone root certification authority (CA).
You have a new security policy requirements specifying that any changes to the CA configuration must be logged.
You need to ensure that the CA meets the new security requirement.
Which two actions should you perform? Each correct answer presents part of the solution.
A. From the Certification Authority console, modify the Auditing settings for the CA.
B. From the Certification Authority console, modify the Security settings for the CA.
C. From Local Group Policy Editor, configure auditing for policy change.
D. From the Certification Authority console, modify the Certificate Managers settings for the CA.
E. From Local Group Policy Editor, configure auditing for object access.