It preserves the integrity of records used in security investigations is correct.

Protecting audit logs from alteration and unauthorized access ensures that the records investigators rely on remain accurate and trustworthy. Reliable logs support a clear chain of custody and allow analysts to reconstruct events without concern that evidence was changed or deleted, and that is essential for both internal incident response and legal or regulatory reviews.

Cloud Logging is incorrect because it names a logging service rather than giving a reason why safeguarding logs matters. The question asks for the purpose of protecting logs during investigations and compliance activities, not for a product name.

It boosts overall system performance is incorrect because log protection does not improve runtime performance. Securing logs is about integrity, confidentiality, and availability of audit data, and it is separate from efforts to optimize system throughput or latency.

It reduces the burden of long retention policies is incorrect because safeguarding logs does not change retention requirements. Retention policies are determined by legal and business rules and securing logs typically complements retention by ensuring stored records remain trustworthy while they are kept.

Full AWS Practitioner Certification Question