Associate Cloud Workspace Administrator · Free Practice Question Medium
Question 9
Allegations have been made against a now-former employee of data theft. You have been tasked with finding all communications and documents related to the employee, particularly those with attachments that may contain sensitive data. What is the most effective search strategy in Google Vault to identify potential data exfiltration?
-
A
Run a search for all emails and Drive files sent to addresses outside your company's domain.
-
B
Execute a search for any content created by the employee without any filters.
-
C
Look up all documents and emails with attachments from the employee's account during their last month of employment.
-
D
Perform a search for communications and documents containing the words "confidential" or "proprietary."
Reveal correct answer
Correct answer: C
A. Running a search for all emails and Drive files sent to addresses outside your company's domain may help identify potential data exfiltration, but it may also include legitimate external communications that are not related to the allegations against the former employee. This search strategy may result in a high volume of false positives and may not be as targeted as looking for attachments specifically during the employee's last month of employment.
B. Executing a search for any content created by the employee without any filters may result in a large volume of irrelevant data, making it less effective in identifying potential data exfiltration. Without specific criteria, this search strategy may not yield the desired results in a timely manner.
C. Looking up all documents and emails with attachments from the employee's account during their last month of employment is the most effective search strategy to identify potential data exfiltration. This targeted approach focuses on a specific time frame and type of content that is likely to contain sensitive data related to the allegations of data theft.
D. Performing a search for communications and documents containing the words "confidential" or "proprietary" may help identify sensitive information, but it may not capture all relevant data related to the allegations of data theft. This search strategy relies on specific keywords and may miss other important documents and communications.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
