When revoking a user’s access, why should audit trails be updated?

• A. To ensure traceability of access changes for security and compliance.
• B. To improve UI aesthetics.
• C. To reduce server load.
• D. To increase data redundancy.

Answer: (A)

Updating audit trails when a user’s access is revoked maintains traceability of who changed permissions, when it happened, and what was changed. This creates a complete record that security teams can rely on to verify that revocation occurred promptly and correctly, hold approvers and administrators accountable, and investigate any incidents. It also satisfies compliance and governance requirements that require auditable evidence of access control changes, making audits and reporting straightforward. Without updating the trail, there can be ambiguity about whether and when access was removed, which weakens security posture and oversight. The other options don’t support traceability or governance in the same essential way.