A company has reports of users sharing sensitive Google Drive content outside their domain through third-party add-ons. You need to control which third-party apps are allowed to access users' Google…

The correct answer is A. OAuth Whitelisting. A is correct because, when using OAuth Whitelisting, admins specifically select which third-party apps are allowed to access users' G Suite data. B is not correct because DLP is used to scan and protect sensitive files and not to prevent granting access to third-party apps. C…

Security and Compliance

Question

A company has reports of users sharing sensitive Google Drive content outside their domain through third-party add-ons. You need to control which third-party apps are allowed to access users' Google Workspace data. Which security feature should you use to achieve this?

Options

AOAuth Whitelisting
BConfigure DLP policies to prevent sharing of sensitive content with external parties.
CIn the Drive SDK section, clear 'Allow users to access Google Drive with the Drive SDK API.'
DBlock specific API scopes for each user.

How the community answered

(15 responses)

A
80% (12)
B
7% (1)
D
13% (2)

Explanation

A is correct because, when using OAuth Whitelisting, admins specifically select which third-party apps are allowed to access users' G Suite data. B is not correct because DLP is used to scan and protect sensitive files and not to prevent granting access to third-party apps. C is not correct because this setting does not affect apps from the G Suite Marketplace. D is not correct because API Scopes cannot be specified on a per user

Topics

#OAuth whitelisting#third-party app access#API controls#Drive security

Community Discussion

No community discussion yet for this question.

Full GOOGLE-WORKSPACE-ADMINISTRATOR Practice