Which statement about the Cisco ACI fabric is most accurate?

A. The APIC is able to enforce security by inserting itself into the data path.
B. The fabric header carries the EPG from the egress to the ingress leaf switch.
C. An APIC is a cluster of at least three APIC controllers, providing a single point of management without a single point of failure.
D. The spine switch rewrites the EPG from ingress to egress when it performs the forwarding proxy function