OCI Audit logs track API operations for security and compliance.
Invalid statement: Audit Logs are disabled by default (B): Audit Logs are enabled by default across all compartments in a tenancy-no manual activation is required. They automatically record all API activities.
Why A and C are valid:
Security-related events (A): Audit Logs capture user actions, making them critical for security monitoring.
Compartment-level display (C): Logs can be filtered and viewed by compartment or tenancy level via the Console or API.
Audit Logs are always active, with a 90-day retention period by default.