You implemented a DLP policy for the finance organizational unit. You want to apply the same policy to a Shared Drive owned by finance in the most efficient way. What should you do?

Question

Options

• AChange the scope of the policy to apply to all in the domain.
• BCreate a new DLP policy for the users in the Shared Drive.
• CAssign the Shared Drive to the finance organizational unit.
• DUnder Sharing Settings in the Admin console, select the finance organizational unit and uncheck

• A
  4% (1)
• B
  9% (2)
• C
  83% (19)
• D
  4% (1)

Explanation

In Google Workspace, DLP policies are scoped to organizational units (OUs). Shared Drives can be explicitly assigned to an OU in the Admin console, which causes them to inherit all policies-including DLP-applied to that OU. Assigning the finance Shared Drive to the finance OU means the existing DLP policy automatically applies without creating any new rules. This is the most efficient approach. Option A (applying to all in domain) is overly broad and applies the finance-specific policy to the entire organization. Option B (creating a new DLP policy for Shared Drive users) duplicates work unnecessarily. Option D (modifying Sharing Settings) relates to external sharing permissions, not DLP policy application.

No community discussion yet for this question.