How should this customer design their security model to support the Sales division administrator role?

A customer needs to have division administrators so that each administrator can access user records in their own division across three continents. Their divisions include Sales, HR, and IT and each division exists in three continents: Europe, North America, and Asia.

How should this customer design their security model to support the Sales division administrator role? Note: There are 2 correct answers to this question.
A . Create a domain restriction that includes all of the Sales domains
B. Create subdomains for Europe Sales, North America Sales and Asia Sales and place them under each continent domain
C. Create Sales administrator accounts and place them in domains for each continent
D. Create domain restriction that include all divisions in Europe, all divisions in North America and all divisions in Asia

Answer: A,B