The correct answer is D. To display the status of data scanning and any errors . In Forcepoint DSPM, the File Audit Log is tied to scan processing and file-level scan events. Forcepoint’s GQL reference defines the File Audit Log as “events associated with scanning of files,” and lists fields such as source , eventType , functionalityName , moduleName , createdAt , message , path , fileId , scanId , and configurationId . Those fields are designed to explain what happened to a file during the scan/classification process, including the relevant scan, module, event, and message detail.
This aligns with the scan analytics workflow. Forcepoint documents that when files are not classified, the interface can show the event indicating the classification failure, the file path, and the reason for the failure. It then allows the user to view the file audit log filtered by not-classified events, scan, and reason.
The other options describe different DSPM views. File access permissions are handled through access governance, discovered-file totals appear in scan analytics summaries, and last access information is a separate file activity or metadata concept. References/topics: Scan Analytics, File Audit Log, GQL File Audit Log Dataset, Scan Events, Classification Errors .