An organisation proposes disabling audit logs to reduce storage consumption. What is the main objection?
Select an answer to reveal the explanation.
Short Explanation
You're trading a small storage saving for the ability to answer who did what. That trade goes badly the first time you need to investigate a change or prove compliance.
Full Explanation
The correct objection is that administrative activity would then be unrecorded, leaving no way to investigate who changed what and no evidence for compliance requirements. Without an audit record, configuration changes and permission grants become untraceable, and compliance obligations requiring demonstrable oversight cannot be met.
Saying audit logs cannot be disabled in any Instana deployment is incorrect because the argument is about consequence, not technical impossibility.
Saying disabling audit logs also disables alert notifications is incorrect because alerting is independent of audit logging.
Saying audit logs consume more storage than telemetry, so disabling them has the largest effect, is incorrect because audit records are low volume next to continuous telemetry, so the saving is small while the loss is significant.
For the exam, weigh audit logging as low cost against high investigative and compliance value.