CompTIA Cloud+ (CV0-004) CV0-004 — Question 136

A bank was recently hacked. The bank reviews the logs to see how the attack occurred. The security administrator suspects the logs were manipulated because no traces of the attack can be found in them. Which of the following should have been enabled before the attack occurred?