You have deployed a run-time image that includes the Enhanced Write Filter (EWF) component. The component is configured for RAM overlay. You start the run-time image. You discover that changes persist to the disk. You confirm that EWF is enabled. You need to discover why EWF did not function correctly. What should you review?

A.
The FBALOG.TXT file

B.
The registry

C.
The System Event log

D.
The SETUPAPI.LOG file