User administration and sudo

Several correct answers

Which checks together confirm that labops got exactly one command?

• A sudo -l -U labops shows one rule, and a neighbouring call as labops is refused.
• B root read the log directly.
• C The allowed call works as labops.
• D labops confirmed in words that everything works.