In addition to providing an audit trail required by auditors, logging can be used to

A.
provide backout and recovery information

B.
prevent security violations

C.
provide system performance statistics

D.
identify fields changed on master files.

Explanation:
Auditing tools are technical controls that track activity within a network on a network
device or on a specific computer. Even though auditing is not an activity that will deny an entity
access to a network or computer, it will track activities so a network administrator can understand
the types of access that took place, identify a security breach, or warn the administrator of
suspicious activity. This can be used to point out weakness of their technical controls and help
administrators understand where changes need to be made to preserve the necessary security
level within the environment. . – Shon Harris All-in-one CISSP Certification Guide pg 179-180