You need to design a security strategy for the DHCP servers in the Seattle office. Which two actions should you perform？（）

• A、Disable all unnecessary services on each DHCP server
• B、Modify the discretionary access control lists （DACLs） in Active Directory so that only members of the Enterprise Admins security group can authorize additional DHCP servers
• C、Use an IPSec policy that allows only the packets necessary for DHCP and domain membership for each DHCP server
• D、Install a digital certificate for SSL on each DHCP server