You have a Windows Server 2008 R2 Enterprise Root certification authority (CA). You need to  grant members of the Account Operators group the ability to only manage Basic EFS certificates.    <br /> You grant the Account Operators group the Issue and Manage Certificates permission on the CA .  <br /> Which three tasks should you perform next()
A、Enable the Restrict Enrollment Agents option on the CA .
B、Enable the Restrict Certificate Managers option on the CA .
C、Add the Basic EFS certificate template for the Account Operators group.
D、Grant the Account Operators group the Manage CA permission on the CA .
E、Remove all unnecessary certificate templates that are assigned to the Account Operators group.