If an invalid username and password is entered on the EchoClient, which log files will be the first to record this (assuming all components have necessary logging and tracing enabled)?（）

A. the PDACLD authentication audit log
B. the EchoClient log during token generation
C. IBM Tivoli Federated Identity Manager （ITFIM） tracing on AppSrv01 during token validation
D. ITFIM tracing on AppSrv03 during an attempted JAAS logi