i think question is not correct about logging in R80: Log — This option shows all the information used by the Security Gateway to match the connection, and rule matches. If there is a match on a rule that specifies an application, a session log shows the application name (for example, Dropbox), and application information (for example, the URL of the website). If the matched rule specifies a Data Type, the session log shows information about the files, and the contents of the files. • None — Does not generate a log. • More — This option, when selected, displays the Track Settings window. It includes two advanced tracking options; Detailed Log and Extended Log. These log options are only available if one or more Application & URL Filtering, Content Awareness, or Mobile Access Software Blades are enabled on the layer. Administrators can also select to generate logs per connection or per session in the Track Settings window.

This question appears in the real CCSA Exam as B. Content Awareness is not active

its disc space for sure

I'd answer B Discussion: https://www.examtopics.com/discussions/checkpoint/view/18094-exam-156-21580-topic-1-question-27-discussion/#:~:text=You%20have%20enabled%20%22Full%20Log,is%20the%20MOST%20likely%20reason%3F&text=Data%20Awareness%20is%20not%20enabled.