You have a Windows Server 2008 R2 Enterprise Root certification authority （CA）. You need to grant members of the Account Operators group the ability to only manage Basic EFS certificates. You grant the Account Operators group the Issue and Manage Certificates permission on the CA . Which three tasks should you perform next（）

A. Enable the Restrict Enrollment Agents option on the C
B. Enable the Restrict Certificate Managers option on the C
C. Add the Basic EFS certificate template for the Account Operators group.
D. Grant the Account Operators group the Manage CA permission on the C
E. Remove all unnecessary certificate templates that are assigned to the Account Operators group.