Google Cloud Professional Collaboration Engineer — Question 7

You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.
What two actions should you take? (Choose two.)

Answer options

• A. Move the user to their own Organization Unit, and set a custom retention policy
• B. Create a matter using Google Vault, and share the matter with the litigation team members.
• C. Create a hold on the user's mailbox in Google Vault
• D. Reset the user's password, and share the new password with the litigation team.
• E. Copy the user's data to a secondary account.

Correct answer: B, C

Explanation

The correct actions are to create a matter in Google Vault and apply a hold on the user's mailbox, ensuring that all relevant email data is preserved for the investigation. Moving the user to a different Organization Unit or resetting their password may alert the user, which is contrary to the goal of conducting the investigation without their knowledge. Copying the user's data to another account does not preserve the original context or integrity of the data needed for legal purposes.