An administrator is investigating user logon failures for a VMware vCenter instance. Where can the administrator find log files containing information related to user login activities?

The vCenter Management Interface (VAMI) is a web interface for managing the VCSA itself, not for browsing the raw log files directly on the filesystem where they are generated.

The ESXi host's Direct Console User Interface (DCUI) provides access to logs specific to that ESXi host, not to the vCenter Server Appliance's internal logs for user authentication.

The vCenter Server Appliance (VCSA) is the Linux-based virtual machine that hosts all vCenter services, including authentication. Therefore, all log files related to vCenter operations, such as user login activities and failures, are stored directly on the file system of the VCSA itself.

The vSphere Client is a management interface used to interact with vCenter and ESXi hosts; it displays information from vCenter but does not store the raw log files of the vCenter Server Appliance itself.