You suspect that Bob, an employee, is leaking gcp video

Full Certification Question

You suspect that Bob, an employee, is leaking confidential documents to a competitor. While awaiting the results of an internal investigation, you need to limit Bob's access to sensitive data immediately without arousing suspicion. What should you do?