Which of the following is a chronological record of system activities to enable the reconstruction and examination of the sequence of events and/or changes in an event?

Corrective controls are actions taken to mitigate the impact of an incident after it has occurred, not a record of activities.

An audit trail is a security control that records a sequence of events, allowing for the reconstruction of activities, identification of unauthorized access, and monitoring of system usage patterns.

A security audit is a systematic evaluation of an information system's security posture, not the chronological record itself.

Detective controls are mechanisms designed to identify and alert about security incidents after they have occurred, such as intrusion detection systems, but they are not the record of events.