Instructions and covered skills
Read each scenario and select the response that best protects shared information while supporting the stated work need. Stay focused on the details provided, including audience, permissions, duration, and file sensitivity. Turn off notifications and avoid switching between unrelated tasks while completing the test. Choose the answer based on sound organizational access-control practices rather than personal convenience. Do not assume that a recipient should receive access beyond what the scenario requires. Review each selected response before submitting your work.
Key Areas
This test covers secure sharing decisions for documents stored in cloud collaboration platforms used by distributed teams. Candidates should be able to distinguish between named-user sharing, organization-wide sharing, guest access, and public links. They should understand how permission choices such as viewer, commenter, editor, uploader, and owner affect a recipient's ability to view, copy, revise, move, delete, or reshare information.
It also evaluates practical use of link restrictions. This includes setting expiration dates, requiring sign-in, limiting downloads where supported, preventing resharing, and selecting a narrow audience for sensitive content. Candidates should recognize when a file should be shared through an approved workspace rather than sent as an attachment or exposed through an unrestricted link.
Another focus is lifecycle management. Secure handling requires periodic review of shared folders, removal of access when a project ends, prompt offboarding of departing users, and reassignment of ownership when responsibilities change. Candidates should be able to apply least-privilege principles without preventing legitimate collaboration.
The test also addresses audit and incident-response practices related to file sharing. Useful records can include file views, downloads, edits, permission changes, link creation, external invitations, device or network details where available, and timestamps. Candidates should know when to preserve evidence, revoke access, notify the appropriate security contact, and avoid altering records during a review.
Recommended Preparation
Review the sharing and permission features of a commonly used cloud storage platform, including shared drives, team sites, guest collaboration, and link settings. Practice translating business needs into access choices: identify the intended audience, decide what actions are required, set a suitable access duration, and determine whether external sharing is authorized.
Study your organization's data-classification, retention, acceptable-use, and incident-reporting policies. Pay particular attention to rules for customer data, financial documents, personnel records, source files, and contract materials. Familiarity with audit-log terminology and offboarding workflows will help candidates assess realistic remote-sharing scenarios accurately.