GIAC Exam GCFR Topic 10 Question 39 Discussion

Actual exam question for GIAC's GCFR exam

Question #: 39
Topic #: 10

[All GCFR Questions]

An investigator his successfully installed the ExchangeOnlineManagement module on their investigation system and is attempting to search a client's Microsoft 365 Unified Audit Log using PowerShell. PowerShell returns a "command not found" error each time they try to execute the Search-UnifiedAuditLog cmdlet. How should the investigator troubleshoot this issue?

AEnsure their system has .NFT version 4.b or later Installed

BEnsure that MFA has been disabled for The account used

CCheck that they are using PowerShell Core

DCheck the permissions of the account used in Microsoft 365

Show Suggested Answer

Suggested Answer: C

by Agustin at Mar 08, 2025, 07:58 AM

Limited Time Offer

25%

Off

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Paola

4 days ago

I think the investigator should check the permissions of the account used in Microsoft 365.

upvoted 0 times

...