Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCFR Exam - Topic 12 Question 53 Discussion

Actual exam question for GIAC's GCFR exam
Question #: 53
Topic #: 12
[All GCFR Questions]

An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message?

Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non-administrative user accounts: 74 Last tenant administration change: December 4,2021

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Anjelica
2 days ago
I disagree, it could be B if they downgraded the license.
upvoted 0 times
...
Luther
8 days ago
Sounds like it was never enabled, so D makes sense.
upvoted 0 times
...
Cathern
13 days ago
C seems unlikely, most tenants keep logs internally.
upvoted 0 times
...
Arthur
18 days ago
Definitely not B, they have enough users for E5.
upvoted 0 times
...
Hubert
23 days ago
Surprised to see this! I thought it was on by default.
upvoted 0 times
...
Chanel
28 days ago
I disagree, it could be A if someone turned it off.
upvoted 0 times
...
Inocencia
1 month ago
Sounds like it was never enabled, so D makes sense.
upvoted 0 times
...
Ammie
1 month ago
I’m not completely sure, but I feel like forwarding logs externally might not be the issue here since it usually doesn't affect the audit logs directly.
upvoted 0 times
...
Glendora
1 month ago
The last admin change was on the same day as the subscription creation. Maybe it was just never enabled by default?
upvoted 0 times
...
Katheryn
2 months ago
I think I saw a similar question where the licensing affected features. Could it be related to the E5 license downgrade?
upvoted 0 times
...
Nichelle
2 months ago
I remember reading that sometimes the audit logs can be disabled by an admin, but I'm not sure if that's the only reason.
upvoted 0 times
...

Save Cancel