What two next steps should the administrator tale to meet this requirement?

At Universal Containers, Organization-Wide Defaults (OWD) for Cases has been set to Public Read Only. A custom object calls Audits has a master-detail relationship to the Case object. Audit records should be accessible by the members of the Oversight Team only. A Public Group for the Oversight Team has been created.

What two next steps should the administrator tale to meet this requirement?
A . Build a permission set with create, read, and edit Audits selected and assign it to the individual public group members.
B . Set OWD to private for Cases and assign the public group a role Support Users in the hierarchy.
C . Create a sharing rule that gives the public group Read/Write access to Audits.
D . Remove create, read, edit and delete permissions to the Audits object for all profiles.

Answer: A,B