During a design review, an architect asks which choice best matches the IBM guidance. What is the best way to handle audit logs while staying aligned with the certification objectives?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal: think of audit logs like labeling the cables before you close the rack door. If you skip that discipline, troubleshooting gets ugly fast. In this scenario, answer B is the practical move because it keeps the implementation tied to the real IBM capability instead of chasing a shortcut.
Full explanation below image
Full Explanation
Here's the deal: think of audit logs like labeling the cables before you close the rack door. If you skip that discipline, troubleshooting gets ugly fast. In this scenario, answer B is the practical move because it keeps the implementation tied to the real IBM capability instead of chasing a shortcut. The other choices sound tempting, but they either skip governance, ignore operational reality, or solve the wrong problem.
The correct answer is B. Use audit logs to review administrative activity and support compliance investigations. That aligns with the Domain 7: Security/Compliance objective because it applies the feature or practice in the context where IBM expects a practitioner to use it. It also keeps the design reviewable, supportable, and realistic for a production environment.
Let's examine why the other options are incorrect: - Option A is incorrect because it removes visibility or governance at the exact point where the team needs it most. - Option C is incorrect because it sounds related, but it does not solve the audit logs requirement described in the scenario. - Option D is incorrect because it sounds related, but it does not solve the audit logs requirement described in the scenario. For the exam, connect the feature to the operational outcome: the right answer is the one that preserves control, accuracy, and maintainability instead of relying on a brittle shortcut. The correct answer is 'Use audit logs to review administrative activity and support compliance investigations.'. The incorrect options — 'Disable audit logs to save storage', 'Use audit logs as application traces', 'Let users edit audit history' — are wrong because they do not align with IBM Instana's architecture or recommended practices for this scenario. Understanding this concept is essential for the Domain 7: Security/Compliance domain of the IBM Instana Observability certification.