What question is not answerable through file access auditing?

What question is not answerable through file access auditing?

• A. Who accessed a file?
• B. When was the file last modified?
• C. Who is trying to audit a file?
• D. How many times was the file accessed?

Answer: (C)

The choice of "Who is trying to audit a file?" is not answerable through file access auditing because file access auditing typically records actions related to the files themselves rather than the attempts made by users to audit them. File access auditing focuses on tracking who accessed a file, when it was accessed, and how many times it was accessed, providing insight into user interactions with the files. Auditing captures data like user identifiers, timestamps of access, and counts of access events. However, the intent or attempts of users to audit those files—essentially their administrative or oversight actions—is outside the scope of what standard file access auditing tools can distinguish or log. Consequently, the auditing mechanism does not provide information about individuals seeking to perform audits, making this choice the correct response.

The choice of "Who is trying to audit a file?" is not answerable through file access auditing because file access auditing typically records actions related to the files themselves rather than the attempts made by users to audit them. File access auditing focuses on tracking who accessed a file, when it was accessed, and how many times it was accessed, providing insight into user interactions with the files.

Auditing captures data like user identifiers, timestamps of access, and counts of access events. However, the intent or attempts of users to audit those files—essentially their administrative or oversight actions—is outside the scope of what standard file access auditing tools can distinguish or log. Consequently, the auditing mechanism does not provide information about individuals seeking to perform audits, making this choice the correct response.