Google Workspace Professional Administrator — Question 51

A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?

Answer options

• A. Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.
• B. Immediately suspend the user's account, search for all the email messages in question, and forward to the legal team.
• C. Immediately suspend the user's account, assign an archived user license, and export data.
• D. Suspend the user's account, search all associated users data in Google Vault, and export the data.

Correct answer: A

Explanation

Answer A is correct because it outlines a structured approach to managing the investigation by defining the scope and using the Matter and Holds features in Google Vault, which are essential for legal compliance. The other options, while they may involve some data handling, do not follow the necessary legal protocols or best practices for securely sharing sensitive information.