Implementing Cisco Application Centric Infrastructure (DCACI) — Question 2

An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?

Answer options

• A. Inspect event records in the APIC UI to see all actions performed by users.
• B. Inspect /var/log/audit_messages on the APIC to see a record of all user actions.
• C. Inspect audit logs in the APIC UI to see all user events.
• D. Inspect the output of show command history in the APIC CLI.

Correct answer: C

Explanation

The correct answer is C because the audit logs in the APIC UI specifically track user events, making it the most direct way to determine if a user caused the change. Option A, while useful, does not focus solely on user events. Option B requires command line access and may not provide a complete view compared to the UI. Option D only shows command history and does not capture all user actions.