Which action should be taken to collect the events?

You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named
ABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01.
During the course of the day ABC.com decided to have a collector initiated subscription configured
for collecting events from ABC-SR01 to ABC-DC01.to a central location. At maintenance time you
notice no entries for ABC-SR01 have been recorded.
Which action should be taken to collect the events?

A.
You should consider utilizing the Collector initiated subscription method and configure the
Destination log as Forwarded Events.

B.
You should consider utilizing the Source initiated subscription method and configure the
Destination log as System Log.

C.
You should consider utilizing the Source initiated subscription method and configure the
Destination log as Security Log.

D.
You should consider utilizing the Source initiated subscription method and configure the
Destination log as Application Log.