What are the purposes of audit records on an information system? Each correct answer represents a complete solution. Choose two.

Audit records are logs of events, not copies of data or system state; they serve no function as a data backup or recovery mechanism.

Audit records provide a chronological trail of events (logins, access attempts, changes) that investigators use to reconstruct incidents and attribute actions to specific users or processes. They are a primary tool in both security incident response and compliance auditing.

System upgrades are planned administrative activities guided by change management processes, not by audit record content.

System administrators use audit records to identify anomalies, trace error conditions, and correlate events leading to system failures, making them directly useful for diagnosing and resolving operational problems.