Which Google app did it specifically identify? If you look at the 'domain' property on the info tab of that app, you will see the specific URL patterns that it would have matched. Once you have that info, you must contact Pearson VUE to get an answer, as they control which cloud services their testing app will communicate with.
Thanks for the reply. I contacted Pearson VUE back in June and they were not really helpful providing me with any information about that. I eventually gave up as following up with them was pretty time-consuming.
Since then we've received more alerts in DFCA (previously known as MCAS) after our users took Microsoft exams through Pearson VUE. Hence, the video (and audio?) of the online exam is uploaded to storage in Pearson VUE's Google Cloud.
We also came across the same thing with MCAS with a few users. Anyone taking an exam with PV would get an alert the next day about data exfiltration to Google. I imagine it's hosted in google cloud as you say.