What is a key reason to maintain audit trails for password resets?

• A. They provide traceability of reset events and help detect insecure methods.
• B. They slow down resets unnecessarily.
• C. They replace the need for MFA.
• D. They are optional in most systems.

Answer: (A)

Audit trails for password resets provide traceability and accountability for credential changes. They record who requested the reset, when it happened, where the request originated, and what verification steps were used. This visibility makes it possible to detect insecure or abusive reset methods, investigate incidents, and demonstrate that password-management controls are being followed. In practice, if a suspicious reset is reported or a security incident occurs, the logs show whether the reset was legitimate, who approved it, and whether proper verification was used, which is essential for incident response and compliance. This is why maintaining audit trails is a key practice. The other ideas aren’t the primary reason: backups like slowing processes, replacing MFA, or treating logs as optional don’t fulfill the need for accountability and traceability.