What is the role of the 'source' and 'destination' fields in an audit log entry?

• A. They indicate where data came from and where it went to, enabling traceability.
• B. They store patient age and gender.
• C. They track file size.
• D. They are optional metadata with little use.

Answer: (A)

The key idea here is data provenance: the source and destination fields identify where data came from and where it went. These fields anchor the movement of information, so you can trace exactly which system initiated the transfer and which system received it. That traceability is crucial for accountability, security monitoring, and regulatory compliance because it lets investigators reconstruct events, verify who had access, and detect any unauthorized or unexpected data flows. For example, if a patient record moves from one clinic’s EHR to a partner organization, the log will show the clinic as the source and the partner system as the destination, along with when and by whom the transfer occurred. Other attributes like patient age, gender, or file size describe different aspects of the data but don’t establish the path the data took, so they don’t serve the same purpose as source and destination.