An auditor asks who has been able to read a regulated table over the past quarter. Which combination answers the question?
Select an answer to reveal the explanation.
Short Explanation
You'll need both halves: access policies show who was entitled to read the table, and query activity shows who actually looked. An auditor usually wants both, and neither one alone gives you a complete answer.
Full Explanation
The combination that answers the question is the access policies that applied to the table over that period, together with the recorded query activity against it. Entitlement over a period comes from the access policies in force, and actual use comes from the recorded query activity. Together they distinguish who could have read the table from who did.
The storage bucket's size history is incorrect because storage metrics describe capacity, not identity. Size history cannot attribute a read to anyone.
The list of dashboards that reference the table is incorrect because a dashboard inventory shows one consumption path and says nothing about direct query access.
The engine's configuration, which records the users assigned to it, is incorrect because engine configuration concerns compute resources; users are not enumerated there as a record of data access.
For the exam, audit answers combine policy - what was permitted - with activity records - what happened.