A junior administrator is concerned that the root password on a production server is no longer secure. The junior administrator sends you an email with the following text:

SU 1/25 14:01 + pts/3 root-user2
SU 1/27 09:10 – pts/5 user1-root
SU 1/27 09:11 + pts/5 user1-root
SU 1/28 21:01 + console root-user3
SU 1/29 21:30 – pts/2 user2-root
SU 1/29 21:31 – pts/2 user2-guest3
SU 1/29 21:33 + pts/2 user2-user1

Which three statements about this output are true? (Choose three.)

A.
user1 knows the root password.

B.
user2 knows the root password.

C.
user3 knows the root password.

D.
user2 knows the password for user1.

E.
This text is from the /var/adm/wtmpx file.

F.
This text is from the /var/adm/sulog file.

G.
This text is from the /var/adm/lastlog file.