Why are audit logs not a substitute for application traces?
Select an answer to reveal the explanation.
Short Explanation
Audit logs are about what people did in the monitoring platform, not how a request actually ran through your applications. You need traces to see the path, timing, and bottlenecks of the request itself.
Full Explanation
The correct answer is the option stating that audit logs record actions taken within the monitoring platform, not the execution of requests through the monitored applications. The two record different things about different systems. An audit entry says an administrator changed a setting; a trace says a request passed through five services and spent most of its time in one of them. The retention-period answer is incorrect because retention is not the distinction; the content is. The lower-sampling-rate answer is incorrect because they do not record the same data at any rate. The administrator-access answer is incorrect because access control differences do not explain the difference in purpose. For the exam, keep platform audit and application tracing clearly separate.