QuestionQ69
Procedures and MethodologyDuring a corporate investigation of suspected data theft from Google Workspace accounts, a forensic examiner must analyze email communications to collect evidence.
Which approach best aligns with Google Workspace Forensics principles?
- A The examiner follows proper legal procedures to obtain a warrant or subpoena for accessing the suspect’s Google Workspace account, ensuring compliance with privacy laws and Google’s Terms of Service.
- B The examiner requests access to the suspect’s Google Workspace account directly from the company’s IT department, aiming to quickly retrieve relevant emails without considering legal implications.
- C The examiner consults with Google Workspace experts to explore alternative methods for accessing email communications without directly accessing the suspect’s account, maintaining privacy and integrity.
- D The examiner decides to bypass legal procedures and uses unauthorized means to access the suspect’s Google Workspace account, believing it necessary to expedite the investigation process.
Community Discussion