You are the network administrator for The network consists of a single Active Directory domain named The TestKing Staff department has a Windows 2003 computer that functions as a file server. The computer contains a folder named TestKingData. Auditing is enabled on the TestKingData folder. The TestKing Staff department reports that confidential files were deleted from the folder. You need to identify the user who deleted the confidential files. What should you do?（）

• A、In Event Viewer, create a new log view from the security log. Filter the log view to display only success audits.
• B、In Event Viewer, create a new log view from the security log. Filter the log view to display only failure audits.
• C、In Event Viewer, create a new log view from the system log. Filter the log view to display only success audits.
• D、In Event Viewer, create a new log view from the system log. Filter the log view to display only failure audits.