What is the main purpose of enabling auditing on a system that processes sensitive information?

• A. To track and monitor access and changes to sensitive data.
• B. To speed up data processing.
• C. To simplify user provisioning.
• D. To improve encryption algorithms.

Answer: (A)

Auditing a system that processes sensitive information is about maintaining an evidentiary trail of who accessed data, what actions they took, and when those actions occurred. This makes accountability possible, enables early detection of unusual or unauthorized activity, and provides logs for investigations, incident response, and regulatory compliance. For example, audit records show user IDs, timestamps, resources accessed, and the outcomes of operations, helping verify policy adherence and support forensic analysis.

The other options don’t fit the purpose: auditing isn’t meant to speed up data processing, streamline user provisioning, or directly improve encryption algorithms.