Which of the following controls helps to ensure that data extraction queries run by the database administrator (DBA) are monitored?

Performing periodic access reviews verifies who has access to DBA roles or sensitive data, but it doesn't monitor what actions a DBA performs once they have that access.

Storing logs of database access is a necessary foundational step, but merely storing them doesn't ensure monitoring; the logs must be actively reviewed to be an effective control.

Restricting access to DBA activities limits the scope of what a DBA can do, which is a preventive control, but it doesn't monitor the specific data extraction queries they do run within their authorized scope.

Reviewing the activity logs of the Database Administrator (DBA) provides direct evidence of what queries were executed, when, and by whom. This review allows for post-event analysis to ensure that data extraction queries were legitimate, within policy, and did not involve unauthorized data access or modification, thus providing active monitoring of DBA actions.