HOTSPOT
Your network contains an Active Directory domain named contoso.com. All servers run
Windows Server 2012 R2.
You need to audit successful and failed attempts to read data from USB drives on the servers.
Which two objects should you configure?
To answer, select the appropriate two objects in the answer area.
Answer: 
Explanation:
http://technet.microsoft.com/en-us/library/jj574128.aspx
Thanks for the link, helped me to clarify this question.
Audit Removable Storage, as failure whas selected, also
Audit Handle Manipulation