An investigator his successfully installed the ExchangeOnlineManagement module on their investigation system and is attempting...

Vendor: GIAC
Product: GCFR
Update on: Feb 7, 2026
Questions: 82

GIAC GCFR Question Answer

An investigator his successfully installed the ExchangeOnlineManagement module on their investigation system and is attempting to search a client's Microsoft 365 Unified Audit Log using PowerShell. PowerShell returns a "command not found" error each time they try to execute the Search-UnifiedAuditLog cmdlet. How should the investigator troubleshoot this issue?

Ensure their system has .NFT version 4.b or later Installed

Ensure that MFA has been disabled for The account used

Check that they are using PowerShell Core

Check the permissions of the account used in Microsoft 365