Exam 300-620 topic 1 question 295 discussion

To meet the security requirements of tracking user login/logout attempts, configuration changes, and fabric node failures, the following log types must be enabled: Audit Logs (B): Purpose: Audit logs track changes to managed objects, including configuration changes made by users or the system. This is essential for monitoring who made changes, what changes were made, and when. Relevance to the Scenario: Audit logs will capture configuration changes in the ACI fabric, such as modifications to policies or settings. Fault Logs (C): Purpose: Fault logs capture issues or failures in the ACI fabric, such as hardware faults (e.g., a fabric node failure) or misconfigurations. Relevance to the Scenario: Fault logs will record events like fabric node failures, ensuring these critical issues are logged and sent to the SIEM appliance for monitoring.

This is interesting question. A configuration change is not a failure and and node failure is not an event. B Audit is ok but if it's C or D it depends on the question.