nerdexam
Google

GOOGLE-WORKSPACE-ADMINISTRATOR · Question #68

The CIO ofyour-company.comrecently implemented a new compliance policy that requires creating a daily backup of management data in Google Workspace. You found a good third-party solution that can do…

The correct answer is A. Review third-party app access to API scopes, whitelist trusted apps, and block specific API. A is correct because this limits the scope and allows you to use only the whitelisted apps. B is not correct because the content compliance rules do not support drive content. C is not correct because a Service Account with Domain-wide Delegation is an incomplete D is not…

Security and Compliance

Question

The CIO ofyour-company.comrecently implemented a new compliance policy that requires creating a daily backup of management data in Google Workspace. You found a good third-party solution that can do exactly that, but you need to make sure that it has access only to the management mail and drive data. What should you do?

Options

  • AReview third-party app access to API scopes, whitelist trusted apps, and block specific API
  • BCreate a content compliance and routing rule that forwards mail and Drive data to your backup
  • CCreate a Service Account and enable G Suite Domain-wide Delegation to access management
  • DCreate a whitelist of trusted apps and allow users to access Google Drive with the Drive SDK API.

How the community answered

(54 responses)
  • A
    83% (45)
  • B
    2% (1)
  • C
    9% (5)
  • D
    6% (3)

Explanation

A is correct because this limits the scope and allows you to use only the whitelisted apps. B is not correct because the content compliance rules do not support drive content. C is not correct because a Service Account with Domain-wide Delegation is an incomplete D is not correct because you do not limit the scope of the application/API. https://support.google.com/a/answer/7281227

Topics

#API access control#OAuth scopes#third-party apps#domain-wide delegation

Community Discussion

No community discussion yet for this question.

Full GOOGLE-WORKSPACE-ADMINISTRATOR Practice