Why is auditing and logging important in user account management?

• A. It automatically fixes misconfigurations.
• B. It eliminates the need for auditing.
• C. It provides traceability, detects misuse, supports compliance, and helps incident response.
• D. It replaces the need for MFA.

Answer: (C)

Auditing and logging provide a verifiable history of actions in how user accounts are managed. This creates traceability—you can see who did what, when, and from where—which is essential for accountability and forensic investigations. They help detect misuse by flagging unusual or unauthorized activities, such as unexpected privilege changes or abnormal login patterns. They also support compliance by providing the evidence and records needed for audits and regulatory requirements. When an incident occurs, logs guide investigators through what happened, helping to identify the scope, reconstruct timelines, and speed up containment and remediation.

Auditing and logging don’t automatically fix misconfigurations, nor do they eliminate the need for auditing or replace multi-factor authentication. They are complementary controls that enhance visibility, accountability, and response.