An Audit Log provides a chronological record of system activities that enables what?

An Audit Log provides a chronological record of system activities that enables what?

• A. A non-reversible hash of data
• B. Independently verifiable trail to reconstruct the sequence of events
• C. Automatic data backup
• D. Real-time intrusion detection

Answer: (B)

An Audit Log is a chronological record of system activities that, when protected for integrity, provides an independently verifiable trail to reconstruct the sequence of events. This means you can trace who did what, when, and on which resources, and you can trust the order of those actions to investigate incidents, conduct audits, and meet compliance requirements. The emphasis is on the ability to verify and reconstruct events after they happen, not on backing up data or detecting intrusions in real time. A cryptographic or tamper‑evident approach helps ensure the log itself hasn’t been altered, which is essential for trust in the reconstruction.

An Audit Log is a chronological record of system activities that, when protected for integrity, provides an independently verifiable trail to reconstruct the sequence of events. This means you can trace who did what, when, and on which resources, and you can trust the order of those actions to investigate incidents, conduct audits, and meet compliance requirements. The emphasis is on the ability to verify and reconstruct events after they happen, not on backing up data or detecting intrusions in real time. A cryptographic or tamper‑evident approach helps ensure the log itself hasn’t been altered, which is essential for trust in the reconstruction.