A compliance review asks who granted an elevated permission in Instana three months ago. Which source answers this?
Select an answer to reveal the explanation.
Short Explanation
Only the audit log records the act of granting, and it answers the question if its retention period reaches back three months. The current permission configuration just shows who holds the permission now, not who caused the change.
Full Explanation
The audit log is the correct source because audit entries capture the action, the actor, and the time, which is what a historical attribution question requires; it is answerable only if the retention period reaches back far enough to cover the date three months ago. The current permission configuration is incorrect because it is a snapshot: it shows the state of who holds the permission now, not who created or granted it. The application traces from that period are incorrect because traces describe application requests, not platform administration. The alert history for the affected services is incorrect because alert history records conditions that fired rather than permission changes. For the exam, note that audit value depends on both the record and its retention period.