Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Monitoring. You are configuring a Windows Server 2008 R2 Hyper-V server. You need to ensure that members of the Monitoring group can view virtual machines （VMs） but cannot make changes to them. What are two possible ways to achieve this goal？（）

• A、In Active Directory， create a group named HVMonitor. Grant the Read permission to the HVMonitor group for the VM configuration files and the VHD files. Add the Monitoring group to the HVMonitor group.
• B、In Local Users and Computers， create a group named HVMonitor. Grant the Read permission to the HVMonitor group for the VM configuration files and the VHD files. Add the Monitoring group to the HVMonitor group.
• C、In Authorization Manager， create a role named HVMonitor. Add all the View operations and the Read Service Configuration operation to the role. Assign the role to the Monitoring group.
• D、In Authorization Manager， create a role named HVMonitor. Create a task that includes all the View operations and the Read Service Configuration operation. Add this task to the HVMonitor role. Assign the role to the Monitoring group.