You are investigating a potential data breach. You need to see which devices are accessing corporate data and the applications used. What should you do?

Question

Options

• AAnalyze the audit log in the Admin console for device and application activity.
• BAnalyze the security investigation tool to access device log data.
• CAnalyze the Google Workspace reporting section of the Admin console.
• DAnalyze the User Accounts section in the Google Admin console.

• A
  78% (31)
• B
  8% (3)
• C
  13% (5)
• D
  3% (1)

Explanation

The Audit log in the Google Admin console provides detailed, event-level records of device access and application activity across the organization-making it the right tool for investigating which devices accessed corporate data and which applications were used. The Security Investigation Tool (B) is optimized for email and Drive incident response, not broad device auditing. The Reporting section (C) provides aggregate usage statistics rather than the specific device-level audit trail needed for a breach investigation. The User Accounts section (D) manages user profiles and settings, not device or application access logs.

No community discussion yet for this question.