How would you audit access to documents that the user shared inappropriately?

Your organization’s information security team has asked you to determine and remediate if a user ([email protected]) has shared any sensitive documents outside of your organization.

How would you audit access to documents that the user shared inappropriately?
A . Open Security Investigation Tool-> Drive Log Events. Add two conditions: Visibility Is External, and Actor Is [email protected].
B . Have the super administrator use the Security API to audit Drive access.
C . As a super administrator, change the access on externally shared Drive files manually under [email protected].
D . Open Security Dashboard-> File Exposure Report-> Export to Sheet, and filter for [email protected].

Answer: A

Explanation:

https://support.google.com/a/answer/11480192?hl=en&ref_topic=11479095#:~:text=View%20files%20shared,Click%20Search.