Which statement about traceability is most accurate for audits?

• A. Enhanced security through encryption of logs
• B. Complete traceability by reconstructing message flow for audits, debugging, and accountability
• C. Reduced log volume by removing metadata
• D. Increased log complexity without benefit

Answer: (B)

Traceability in audits is about being able to follow the exact path a message or action takes through the system, including who handled it, when, and what happened at each step. The statement that emphasizes reconstructing the end-to-end message flow for audits, debugging, and accountability captures this idea best. In practice, it means collecting consistent identifiers, timestamps, and event relationships across components so you can replay or reconstruct the sequence of events, verify decisions, and hold the right actors responsible. This enables auditors to see how a request moved through the system, where delays or failures occurred, and whether policies were followed.

Encryption of logs is valuable for protecting data, but it doesn’t by itself enable reconstructing the flow or providing the full context needed for audits. Removing metadata to reduce log volume eliminates the information that links events together, breaking traceability. Adding log complexity without adding meaningful, navigable context only makes it harder to trace what happened.