How would you audit access to documents that the user shared inappropriately?

Your organization’s information security team has asked you to determine and remediate if a user (user1@example.com) has shared any sensitive documents outside of your organization.

How would you audit access to documents that the user shared inappropriately?
A . Open Security Investigation Tool-> Drive Log Events. Add two conditions: Visibility Is External, and Actor Is user1@example.com.
B . Have the super administrator use the Security API to audit Drive access.
C . As a super administrator, change the access on externally shared Drive files manually under user1@example.com.
D . Open Security Dashboard-> File Exposure Report-> Export to Sheet, and filter for user1@example.com.

View Answer

Answer: A

Explanation:

https://support.google.com/a/answer/11480192?hl=en&ref_topic=11479095#:~:text=View%20files%20shared,Click%20Search.