Security needs evidence of supported administrative and data access activity. Which capability should be configured and reviewed?

1. Only a monthly cost total
2. A chart color convention
3. Appropriate audit logging and controlled log retention
4. Only the notebook's last successful cell output