FPolicy is the correct ONTAP feature because the requirement is to track file access activity for a particular folder from the storage layer. Vscan is an antivirus integration and is not designed to audit user access. A cron job would only collect logs after the fact and would not provide policy-driven, file-operation monitoring. Role-based access control controls administrator privileges, not end-user file access events inside a NAS namespace. FPolicy allows ONTAP to monitor file operations such as opens, creates, reads, writes, renames, and deletes, and it can send those events to an external FPolicy server or enforce a policy response. For a support engineer, the key decision point is whether the task is access control, virus scanning, or file activity notification. This scenario is explicitly about tracking access to files in a folder; therefore, FPolicy aligns directly with ONTAP NAS auditing and file notification architecture. References/topics: ONTAP NAS services, FPolicy policy scope, file-operation event monitoring, and security-side access tracing.