CompTIA Data+ DA0-002 (V2) Practice Question

An audit's core purpose is to establish accountability by providing a verifiable trail of who did what and when. A database transaction or access log that automatically records the executed SQL statement (event type), the authenticated user or service account (user ID), and the precise timestamp meets this need because it allows reviewers to reconstruct each access to sensitive data.

The other artifacts support compliance in different ways but do not demonstrate actual access events:

• A data dictionary explains schema and business meaning, not user activity.
• An encryption-key rotation policy shows that cryptographic controls exist but says nothing about who queried the data.
• A data-retention schedule lists how long data is stored, not who touched it.

Therefore, the transaction log is the only option that directly provides the audit trail required for evidence of data-access monitoring.