A route change caused an outage, but operators are unsure who made it. Which evidence should accompany flow analysis?

1. OCI Audit records for the network management operation.
2. Only the current route table with no history.
3. Only the resource's cost-center tag.
4. Only a successful ping after the incident.