QuestionQ15

Managing security policies and access controls

Your company sends an internal newsletter containing sensitive information to every employee by email. You have observed unauthorized forwarding of this newsletter to external addresses, which could cause data leaks. To prevent this, you need a solution that automatically detects and blocks this forwarding while still permitting legitimate internal sharing. What should you do?

  • A Add a banner to the newsletter that warns users that external sharing is prohibited.
  • B Create a Gmail content compliance rule that targets the internal newsletter, identifying instances of external forwarding. Configure the rule to reject the message when such forwarding is detected
  • C Develop an Apps Script project by using the Gmail API to scan sent emails for the newsletter content and external recipients. Automatically revoke access for violating users.
  • D Create a content compliance rule to modify the newsletter subject line, adding a warning against external forwarding.
Explanation

Gmail content compliance rules can identify messages by matching newsletter content and apply to outbound mail with external recipients. Configuring the matching rule to reject the message blocks delivery before it reaches the external recipient, while internal sharing is unaffected by the external-recipient scope.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!