Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCFR Exam - Topic 12 Question 53 Discussion

Posted by Elmer on Mar 09, 2026 at 01:06 AM

An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message?

Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non-administrative user accounts: 74 Last tenant administration change: December 4,2021

Suggested Answer: D

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
26 comments · newest first
AR
Arlen 1 month ago
True, but with no changes since 2021, D seems more likely.
TR
Truman 1 month ago
But what if it was A? An admin could have disabled it.
IR
Ira 2 months ago
I agree, D makes sense. Default settings often get overlooked.
EU
Eun 2 months ago
I think it's D. The service was never enabled.
TE
Temeka 2 months ago
B could be a factor too. Downgrading licenses can affect features.
MI
Mira 2 months ago
I lean towards A. Maybe an admin disabled it by mistake.
SI
Silvana 2 months ago
Agreed, D makes sense. Default settings often get overlooked.
WI
Willow 2 months ago
I think it's D. The service was never enabled.
HE
Herminia 3 months ago
True, but with no changes since 2021, D seems more likely.
CU
Curt 3 months ago
But what about A? An admin could have disabled it.
JA
Jacquelyne 3 months ago
I agree, D makes sense. Default settings often get overlooked.
DE
Dean 3 months ago
I think it's D. The service was never enabled.
SH
Sharmaine 3 months ago
I think it’s C, forwarding logs could mess things up.
HO
Hobert 4 months ago
Definitely A, an admin probably turned it off.
BO
Bong 5 months ago
Surprised to see that logs aren't enabled by default!
AN
Anjelica 5 months ago
I disagree, it could be B if they downgraded the license.
LU
Luther 5 months ago
Sounds like it was never enabled, so D makes sense.
CA
Cathern 6 months ago
C seems unlikely, most tenants keep logs internally.
AR
Arthur 6 months ago
Definitely not B, they have enough users for E5.
HU
Hubert 6 months ago
Surprised to see this! I thought it was on by default.
CH
Chanel 6 months ago
I disagree, it could be A if someone turned it off.
IN
Inocencia 6 months ago
Sounds like it was never enabled, so D makes sense.
AM
Ammie 6 months ago
I’m not completely sure, but I feel like forwarding logs externally might not be the issue here since it usually doesn't affect the audit logs directly.
GL
Glendora 7 months ago
The last admin change was on the same day as the subscription creation. Maybe it was just never enabled by default?
KA
Katheryn 7 months ago
I think I saw a similar question where the licensing affected features. Could it be related to the E5 license downgrade?
NI
Nichelle 7 months ago
I remember reading that sometimes the audit logs can be disabled by an admin, but I'm not sure if that's the only reason.
0/2000 characters

Save Cancel