Why is maintaining an audit trail important for privileged escalation?

• A. An audit trail provides traceability and accountability for elevated actions.
• B. Audit trails slow down operations with no benefit.
• C. Audit trails expose sensitive data to all users.
• D. Audit trails are optional for compliance.

Answer: (A)

Maintaining an audit trail provides traceability and accountability for elevated actions. When someone uses privileged access, the system logs who performed the action, what was done, when it happened, and where it originated. This visibility lets security teams detect unusual or unauthorized use, investigate incidents, and hold individuals responsible for their actions. It also supports compliance by showing evidence of how privileged access was granted and used, which many governance and regulatory standards require. For example, if a sensitive configuration change is made with admin rights, the logs reveal the exact user and timestamp, enabling verification and remediation if needed.

The other statements miss the point: audit trails aren’t mainly about slowing operations without benefit, nor do they automatically expose sensitive data to all users—access to logs is typically restricted and protected. And audits aren’t optional for compliance in many frameworks; logging privileged activity is a common requirement.