GOOGLE-WORKSPACE-ADMINISTRATOR · Question #79
A member of your security team is in the Google Admin Console examining the Security Dashboards. In the 揥hat does external file sharing look like for the domain??chart, they notice a large spike in…
The correct answer is A. In the Report, unclick all file visibility except 揈xternal,?click on the New Investigation icon, and. A is correct because it will display all externally shared files and allow for immediate actioning. B is not correct because it will show all files that have been changed to external sharing, but you cannot action them. C is not correct because you will be able to see users…
Question
A member of your security team is in the Google Admin Console examining the Security Dashboards. In the 揥hat does external file sharing look like for the domain??chart, they notice a large spike in 揊ile Share Events.?When they click into 揤iew Report,?they notice that the spike can be attributed to 揈xternal Sharing,?and they want to understand more and be able to quickly take action in case this is a malicious exposure. What should you do?
Options
- AIn the Report, unclick all file visibility except 揈xternal,?click on the New Investigation icon, and
- BGo to Reports>Audit>Drive, select 揑tem Visibility Change,?change it to 揑nternal to
- CIn Reports, go to Security and create a filter to find users with External Shares greater than 1.
- DIn Apps>GSuite>Drive and Docs>Sharing Settings, change Sharing Options to 揙ff?for outside
How the community answered
(43 responses)- A74% (32)
- B14% (6)
- C7% (3)
- D5% (2)
Explanation
A is correct because it will display all externally shared files and allow for immediate actioning. B is not correct because it will show all files that have been changed to external sharing, but you cannot action them. C is not correct because you will be able to see users with external shares, but that won't provide helpful information for the investigation. D is not correct because this will turn off sharing for everyone instead of investigating the spike https://support.google.com/a/answer/7491249?hl=en
Topics
Community Discussion
No community discussion yet for this question.