Which of the following questions is less likely to help in assessing controls over audit trails?

A.
Does the audit trail provide a trace of user actions?

B.
Are incidents monitored and tracked until resolved?

C.
Is access to online logs strictly controlled?

D.
Is there separation of duties between security personnel who administer the access control
function and those who administer the audit trail?