Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You enable auditing for failed logon attempts on all domain controllers. You need to ensure that a record of failed logon attempts is retained for 90 days on all domain controllers. What should you do?

• From the Security Templates snap in, open the hisecdc template. Modify the Retain System Log setting.
• From the Security Templates snap in, open the securedc template. Modify the Retain Security Log setting.
• Open the Default Domain Policy. Modify the Retain System Log setting.
• Open the Default Domain Controller Policy. Modify the Retain Security Log setting.