Which of the following are best practices for users with the SYSADMIN/ACCOUNTADMIN roles? Choose 3 answers

Which of the following are best practices for users with the SYSADMIN/ACCOUNTADMIN roles? Choose 3 answers
A . Their default role should be set to SYSTEMADMIN (the lower of the two)
B. They should not set up multi_Factor Authentication (MFA)―as administrator they may need to change the MFA settings and those enrolled in MFA are unable to do so
C. They should only access and ‘step into’ the ACCOUNTADMIN role temporarily, as needed to complete a specific operation
D. They should ensure all database objects in the account are owned by the ACCOUNTADMIN role
E. They should use the SYSADMIN role to perform administrative work on database objects

Answer: A,C,E