$5.$ Configuration management provides assurance that changes...?

A$.$ to application software cannot bypass system security features.

B$.$ do not adversely affect implementation of the security policy.

C$.$ to the operating system are always subjected to independent validation and verification.

D$.$ in technical documentation maintain an accurate description of the Trusted Computer Base.