Which server-level audit action group should you use?

You administer a Microsoft SQL Server 2016 database.

You provide temporary securityadmin access to User1 to the database server.

You need to know if User1 adds logins to securityadmin.

Which server-level audit action group should you use?
A . SERVER_STATE_CHANGE_GROUP
B . SERVER_PRINCIPAL_IMPERSONATION_GROUP
C . SUCCESSFUL_LOGIN_GROUP
D . SERVER_ROLE_MEMBER_CHANGE_GROUP

Answer: D

Explanation:

SERVER_ROLE_MEMBER_CHANGE_GROUP

This event is raised whenever a login is added or removed from a fixed server role. This event is raised for the sp_addsrvrolemember and sp_dropsrvrolemember stored procedures. Equivalent to the Audit Add Login to Server Role Event Class.

References: http://technet.microsoft.com/en-us/library/cc280663.aspx