Logging and Auditing focuses on recording actions and events for accountability in virtual environments.

• A. Patch Management
• B. Logging and Auditing
• C. Training and Education
• D. Change Control

Answer: (B)

Recording actions and events for accountability is what logging and auditing does, especially in virtual environments where you need an immutable trail of who did what, when, and from where. Logs capture user logins, access to resources, configuration changes, and system events, enabling monitoring, anomaly detection, and compliance reporting. Patch management focuses on applying and verifying security updates to fix vulnerabilities, not on keeping a comprehensive record of every action. Training and education aim to improve security awareness and behavior, not to create audit trails. Change control governs how changes are proposed, approved, and implemented, which involves process controls but not the ongoing recording of events for accountability. Therefore, logging and auditing is the best choice because it directly deals with creating, maintaining, and reviewing those records.