Which of the following are best practices for users with the SYSADMIN/ACCOUNTADMIN roles? Choose 3 answers

Which of the following are best practices for users with the SYSADMIN/ACCOUNTADMIN roles? Choose 3 answers
A . Their default role should be set to SYSTEMADMIN (the lower of the two)
B . They should not set up multi_Factor Authentication (MFA)―as administrator they may need to change the MFA settings and those enrolled in MFA are unable to do so
C . They should only access and ‘step into’ the ACCOUNTADMIN role temporarily, as needed to complete a specific operation
D . They should ensure all database objects in the account are owned by the ACCOUNTADMIN role
E . They should use the SYSADMIN role to perform administrative work on database objects

Answer: A,C,E