CISA · Question #508
Which of the following is the PRIMARY benefit of enabling database audit trails?
The correct answer is A. Accountability can be determined.. The primary purpose of a database audit trail is to establish accountability by creating an immutable, time-stamped record of who performed what actions on the database and when. This allows organizations to attribute specific transactions, data changes, or access events to speci
Question
Which of the following is the PRIMARY benefit of enabling database audit trails?
Options
- AAccountability can be determined.
- BTransactions can be researched.
- CSeparation of duties can be confirmed.
- DAvailability can be improved.
How the community answered
(35 responses)- A94% (33)
- B3% (1)
- C3% (1)
Explanation
The primary purpose of a database audit trail is to establish accountability by creating an immutable, time-stamped record of who performed what actions on the database and when. This allows organizations to attribute specific transactions, data changes, or access events to specific users or processes, which is essential for investigations, compliance, and deterrence. The existence of an audit trail itself discourages malicious or unauthorized activity because users know their actions are being recorded. While audit trails can be used to research transactions (B), that is a derivative use-the underlying reason you want to research transactions is to determine who is responsible, which is accountability. Separation of duties (C) is enforced through access controls and role assignments, not audit trails; audit trails detect violations of SoD after the fact but do not enforce it. Availability (D) is governed by redundancy, backups, and uptime controls-audit trail logging has no meaningful impact on database availability.
Topics
Community Discussion
No community discussion yet for this question.