Google Cloud Professional Collaboration Engineer — Question 35

Security and Compliance has identified that data is being leaked through a third-party application connected to G SuiteÑŽ You want to investigate using an audit log.
What log should you use?

Answer options

• A. Admin audit log
• B. SAML audit log
• C. Drive usage audit log
• D. OAuth Token audit log

Correct answer: D

Explanation

The OAuth Token audit log is the appropriate choice because it provides details about the tokens issued to third-party applications, which can help uncover how data is being leaked. The other logs, such as the Admin audit log and SAML audit log, do not specifically track third-party application access, and the Drive usage audit log focuses on file access rather than application-level interactions.