Google Workspace Associate Administrator — Question 24

You are investigating a potential data breach. You need to see which devices are accessing corporate data and the applications used. What should you do?

Answer options

• A. Analyze the audit log in the Admin console for device and application activity.
• B. Analyze the security investigation tool to access device log data.
• C. Analyze the Google Workspace reporting section of the Admin console.
• D. Analyze the User Accounts section in the Google Admin console.

Correct answer: A

Explanation

The correct answer is A because the audit log in the Admin console provides detailed information on device and application activity, which is essential for investigating a data breach. Options B and C, while useful, do not focus specifically on the audit log, and D is not relevant as it pertains to user accounts rather than device and application access.