where are failed super-user level access attempts stored?

In Unix, where are failed super-user level access attempts stored?

A.
/var/adm/sulog

B.
/var/adm/wtmp

C.
/etc/adm/sulog

D.
/etc/wtmp