Associate Cloud Workspace Administrator · Free Practice Question Medium
Question 32
Your marketing team wants to use a third-party data analytics tool that requires API access to Gmail to analyze the success rate of email campaigns. Considering the sensitive nature of emails, how would you ensure that the tool can access only the required data, while keeping other confidential information secure?
-
A
Setup a new Gmail account, forward campaign-related emails there, and grant the tool access to that account.
-
B
Download all emails, filter campaign-related emails manually, and then upload them to the tool.
-
C
Provide unrestricted API access to Gmail, trusting the tool's privacy policy.
-
D
Use the Google Workspace Admin Console to set up restricted API access, ensuring the tool can only read email metadata and not the content.
Reveal correct answer
Correct answer: D
A. Setting up a new Gmail account, forwarding campaign-related emails to that account, and granting the tool access to that account may not be the most secure option. It introduces additional complexity and potential security vulnerabilities by creating a new account and forwarding emails, which could lead to unauthorized access to sensitive information. Using the Admin Console to restrict API access is a more secure and efficient way to control data access.
B. Downloading all emails, manually filtering campaign-related emails, and then uploading them to the tool is a time-consuming and inefficient process. It also increases the risk of exposing confidential information during the manual filtering process, making it a less secure option for ensuring data security.
C. Providing unrestricted API access to Gmail poses a significant security risk, as it allows the tool to access all email content, not just the data related to email campaigns. Trusting the tool's privacy policy may not be sufficient to protect sensitive information, making this choice inappropriate for ensuring data security.
D. Using the Google Workspace Admin Console to set up restricted API access allows you to control and limit the tool's access to only the necessary data, such as email metadata. By restricting access to email content, you can ensure that sensitive information remains secure while still enabling the tool to analyze the success rate of email campaigns.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
