Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Monitoring. You are configuring a Windows Server 2008 R2 Hyper-V server. You need to ensure that members of the Monitoring group can view virtual machines （VMs） but cannot make changes to them. What are two possible ways to achieve this goal？（）

A. In Active Directory， create a group named HVMonitor. Grant the Read permission to the HVMonitor group for the VM configuration files and the VHD files. Add the Monitoring group to the HVMonitor group.
B. In Local Users and Computers， create a group named HVMonitor. Grant the Read permission to the HVMonitor group for the VM configuration files and the VHD files. Add the Monitoring group to the HVMonitor group.
C. In Authorization Manager， create a role named HVMonitor. Add all the View operations and the Read Service Configuration operation to the role. Assign the role to the Monitoring group.
D. In Authorization Manager， create a role named HVMonitor. Create a task that includes all the View operations and the Read Service Configuration operation. Add this task to the HVMonitor role. Assign the role to the Monitoring group.