How do you configure audits and compliance reporting?

• A. Disable all logs to protect privacy.
• B. Enable audit logs, create reports that correlate users, actions, and timestamps, and schedule regular reviews.
• C. Only track actions for administrators.
• D. Rely on manual memory to recall actions.

Answer: (B)

Auditing and compliance reporting hinge on having a complete, auditable trail of activity and a reliable way to review it. Enable audit logs so every relevant action is captured with who did it and when. Then create reports that bring together users, actions, and timestamps, so you can reconstruct events, verify approvals, and demonstrate governance during audits. Scheduling regular reviews or automated reports keeps oversight ongoing and ensures stakeholders receive timely, consistent insights, making it easier to spot anomalies and ensure policy adherence. Disabling logs defeats accountability, since there’s no record of activity. Tracking only administrators misses a large portion of activity by other users, and relying on memory is not a trustworthy foundation for audits.