Your Chief Compliance Officer Is Concerned About API Access to Organization

Your chief compliance officer is concerned about API access to organization data across different cloud vendors. He has tasked you with compiling a list of applications that have API access to G Suite data, the data they have access to, and the number of users who are using the applications. How should you compile the data being requested?

A) Review the authorized applications for each user via the G Suite Admin panel.
B) Create a survey via Google forms, and collect the application data from users.
C) Review the token audit log, and compile a list of all the applications and their scopes.
D) Review the API permissions installed apps list, and export the list.