1.YourorganizationisonGoogleWorkspaceEnterpriseandallowsforexternalsharingofGoogleDrive filestofacilitatecollaborationwithotherGoogleWorkspacecustomersRecentlyyouhavehadseveral incidentsoffilesandfoldersbeingbroadlysharedwithexternalusersandgroupsYourchiefsecurity officerneedsdataonthescopeofexternalsharingandongoingalertingsothatexternalaccessdoesnot havetobedisabled
Whattwoactionsshouldyoutaketosupportthechiefsecurityofficer'srequest?(Choosetwo)
AReviewwhohasviewedfilesusingtheGoogleDriveActivityDashboard
BCreateanalertfromDriveAuditreportstonotifyofexternalfilesharing
CReviewtotalexternalsharingintheAggregateReportssection
D.CreateacustomDashboardforexternalsharingintheSecurityInvestigationTool.
EAutomaticallyblockexternalsharingusingDLPrules
Answer:B,D
Explanation:
https://support.google.com/a/answer/7584076?hl=en&reftopic=7563358
2.YouaretheWorkspaceadministratorforaninternationalorganizationwithEnterprisePlusWorkspace licensingAthirdofyouremployeesarelocatedintheUnitedStates,anotherthirdinEurope,andthe otherthirdgeographicallydispersedaroundtheworldEuropeanemployeesarerequiredtohavetheir datastoredinEuropeThecurrentOUstructureforyourorganizationisorganizedbybusinessunit,with noattentiontouserlocation
HowdoyouconfigureWorkspaceforthefastestenduserexperiencewhilealsoensuringthatEuropean userdataiscontainedinEurope?
AConfigureadataregionatthetoplevelOUofyourorganization,andsetthevalueto“Europe”
BAddthreeadditionalOUstructurestodesignatelocationwithinthecurrentOUstructure Assignthecorrespondingdataregiontoeach
CConfigureaconfigurationgroupforEuropeanusers,andsetthedataregionto“Europe”
D.Configurethreeconfigurationgroupswithinyourdomain.Assigntheappropriatedataregionstoeach correspondinggroup,butassignnopreferencetotheusersoutsideoftheUnitedStatesandEurope Answer:C
Explanation:
https://support.google.com/a/answer/7630496?hl=en#zippy=%2Cstep-set-the-organizational-structure "puttheminaconfigurationgroup(tosetforusersacrossorwithindepartments)"
3YourcompanyhasacquiredanewcompanyinJapanandwantstoaddallemployeesoftheacquisition toyourexistingGoogleWorkspacedomainThenewcompanywillretainitsoriginaldomainforemail addressesand,duetotheverysensitivenatureofitswork,thenewemployeesshouldnotbevisiblein theglobaldirectoryHowever,theyshouldbevisiblewithineachcompany'sseparatedirectory Whatshouldyoudotomeettheserequirements?
ACreateanewGoogleWorkspacedomainisolatedfromtheexistingone,andcreateusersinthenew domaininstead
BUnderDirectorySettings>Contactsharing,disablethecontactsharingoptionandwaitfor24hoursto allowthesettingstopropagatebeforecreatingthenewemployeeaccounts
C.RedesignyourOUorganizationtohave2childOUsforeachcompanydirectlyundertheroot.In DirectorySettings>VisibilitySettings,definecustomdirectoriesforeachcompany,andsetupVisibility accordingtotheOU.
DCreateonedynamicgroupforeachcompanybasedonacustomattributedefiningthecompanyIn DirectorySettings>VisibilitySettings,definecustomdirectoriesforeachcompany,andsetupVisibility accordingtothedynamicgroup
Answer:C
Explanation:
https://supportgooglecom/a/answer/7566446?hl=en&reftopic=9832541
4AstheWorkspaceAdministrator,youhavebeenaskedtoconfigureGoogleCloudDirectorySync (GCDS)inordertomanageGoogleGroupmembershipsfromaninternalLDAPserver.However,multiple GoogleGroupsmusthavetheirmembershipsmanagedmanuallyWhenyouruntheGCDSsync,you noticethatthesemanuallymanagedgroupsarebeingdeleted. Whatshouldyoudotopreventthesegroupsfrombeingdeleted?
A.IntheGCDSconfigurationmanager,updatethegroupdeletionpolicysettingto“don'tdeleteGoogle groupsnotfoundinLDAP”
B.UsetheDirectoryAPItocheckandupdatethegroup’smembershipaftertheGCDSsynciscompleted. CConfirmthatthebaseDNforthegroupemailaddressattributematchesthebaseDNfortheuseremail addressattribute
DIntheuserattributesettingsoftheGCDSconfigurationmanageroptions,settheGoogledomainusers deletion/suspensionpolicyto“deleteonlyactiveGoogledomainusersnotfoundinLDAP”
Answer:A
Explanation:
https://supportgooglecom/a/answer/6258071?hl=en#zippy=%2Cgoogle-group-deletion-policy Don’tdeleteGoogleGroupsnotfoundinLDAPIfchecked,GoogleGroupdeletionsinyourGoogle domainaredisabled,evenwhentheGroupsaren'tinyourLDAPserver
5.Yourcompanyworksregularlywithapartner.Youremployeesregularlysendemailstoyourpartner's employeesYouwanttoensurethatthePartnercontactinformationavailabletoyouremployeeswillallow themtoeasilyselectPartnernamesandreducesendingerrors.
Whatshouldyoudo?
A.EducateusersoncreatingpersonalcontactsforthePartnerEmployees.
BAddasecondarydomainforthePartnerCompanyandcreateuserentriesforeachPartneruser
C.CreatesharedcontactsintheDirectoryusingtheDirectoryAPI. DCreatesharedcontactsintheDirectoryusingtheDomainSharedContactsAPI
Answer:D
Explanation:
https://developersgooglecom/admin-sdk/domain-shared-contacts
6YourChiefInformationSecurityOfficerisconcernedaboutphishingYouimplemented2Factor AuthenticationandforcedhardwarekeysasabestpracticetopreventsuchattacksTheCISOiscurious astohowmanysuchemailphishingattemptsyou'veavoidedsinceputtingthe2FA+HardwareKeysin placelastmonth
WheredoyoufindtheinformationyourCISOisinterestedinseeing?
ASecurity>AdvancedSecuritySettings>PhishingAttempts
B.Apps>GoogleWorkspace>Gmail>PhishingAttempts
CSecurity>Dashboard>SpamFilter:Phishing
DReporting>Reports>Phishing
Answer:C Explanation: https://supportgooglecom/a/answer/7491892?hl=en
7AdisgruntledemployeehasleftyourcompanyanddeletedalltheiremailmessagesandfilesinGoogle DriveThesecurityteamisawarethatsomeintellectualpropertymayhavesurfacedonapublicsocial mediasite.
Whatisthefirststeptostartaninvestigationintothisleak?
A.Deletetheuser'saccountintheAdminConsole.
BTransferdatabetweenenduserWorkspaceaccounts
C.InstructaGoogleVaultadmintocreateamatter,andplacealltheuserdataon‘hold.’
DUseGoogleVaulttoexportalltheuserdataandshareamongthesecurityteam Answer:C
8Theexecutiveteamforyourcompanyhasanextendedretentionpolicyoftwoyearsinplacesothat theyhaveaccesstoemailforalongerperiodoftimeYourCOOhasfoundthisusefulinthepastbutwhen theywenttofindanemailfromlastyeartoprovedetailsofacontractindispute,theywereunabletofind ititisnolongerintheTrashTheyhaverequestedthatyourecoverit
Whatshouldyoudo?
AUsingVault,performasearchfortheemailandexportthecontenttoastandardformattoprovidefor investigation
BUsingtheMessageID,contactGoogleGoogleWorkspacesupporttorecovertheemail,thenimport withGoogleWorkspaceMigrationforMicrosoftOutlook
C.UsingtheVaultAuditlog,performasearchfortheemail,exporttheresults.thenimportwithGoogle WorkspaceMigrationforMicrosoftOutlook
Answer:A
Explanation: https://support.google.com/vault/answer/6161352?hl=en
9.TheorganizationhasconductedandcompletedSecurityAwarenessTraining(SAT)forallemployees. Aspartofanewsecuritypolicy,employeeswhodidnotcompletetheSAThavehadtheiraccounts suspendedTheCTOhasrequestedtobeinformedofanyaccountsthathavebeenre-enabledtoensure nooneisinviolationofthenewsecuritypolicy
Whatshouldyoudo?
AEnable“Suspiciouslogin”rule-OtherRecipients:CTO
BEnable“Suspendedusermadeactive”rule-OtherRecipients:CTO
CEnable“Emailsettingschanged”rule--OtherRecipients:CTO
DEnable“Suspendedusermadeactive”ruleandselect“Deliverto”SuperAdministrator(s)
Answer:B
Explanation:
CTOmustbeinformedwhencreatingtheSuspendedusermadeactiveAsuspendeduserismade activebyanadminAlert.Ref: https://supportgooglecom/a/answer/3230421?hl=en#zippy=%2Cuser-activity-alerts
10YouactastheGoogleWorkspaceAdministratorforacompanythathasjustacquiredanother organizationTheacquiredcompanywillbemigratedintoyourWorkspaceenvironmentin6months ManagementhasaskedyoutoensurethattheGoogleWorkspaceusersyoucurrentlymanagecan efficientlyaccessrichcontactinformationinWorkspaceforallusersThisneedstooccurbeforethe migration,andoptimallywithoutadditionalexpenditure
Whatstepdoyoutaketopopulatecontactinformationforallusers?
A.Bulk-uploadthecontactinformationfortheseusersviaCSVintotheGoogleDirectory.
BUsetheDomainSharedContactsAPItouploadcontactinformationfortheacquiredcompany'susers
C.ProvisionandlicenseGoogleWorkspaceaccountsfortheacquiredcompany'susersbecausetheywill needaccountsinthefuture
D.Prepareanuploadablefiletobedistributedtoyourendusersthatallowsthemtoaddtheacquired company’susercontactinformationtotheirpersonalcontacts
Answer:B
Explanation:
TheDomainSharedContactsAPIletsyourapplicationsgetandupdateexternalcontactsthatareshared withallusersinaGoogleWorkspacedomainSharedcontactsarevisibletoallusersofaGoogle WorkspacedomainandallGoogleserviceshaveaccesstothecontactlist https://developersgooglecom/admin-sdk/domain-shared-contacts/overview
11Yourcompany'sChiefInformationSecurityOfficerhasmadeanewpolicywherethird-partyapps shouldnothaveOAuthpermissionstoGoogleDriveYouneedtoreconfigurecurrentsettingstoadhere tothispolicy
Whatshouldyoudo?
A.AccesstheSecurityMenu>APIReference>disableallAPIAccess.
BAccesstheSecurityMenu>APIPermissions>chooseDriveandDisableAllAccess
C.AccesstheSecurityMenu>APIPermissions>chooseDriveandDisableHighRiskAccess.
DAccessApps>GoogleWorkspace>DriveandDocs>SharingSettingsanddisablesharingoutsideof yourdomain
Answer:C Explanation: Reference:https://supportgooglecom/a/answer/60781?hl=en
12YouareinchargeofautomatingandconfiguringGoogleCloudDirectorySyncforyourorganization
Withintheconfigmanager,howcanyouproactivelypreventapplyingwidespreaddeletionswithinyour Workspaceenvironmentifyourcompany’sLDAPundergoesasubstantialmodification?
AManuallyrunGoogleCloudDirectorySynconlyafterperformingasimulatedsync
BSpecifytheminimumandmaximumnumberofobjectstosynchronizeineachconfigurationitem
CConfigurethetooltodeleteusersonlywhenrunfromtheconfigmanager
DConfigurelimitsforthemaximumnumberofdeletionsoneachsynchronization
Answer:D
Explanation:
YoucanuselimitswithGoogleCloudDirectorySync(GCDS)tosetthemaximumnumberofdeletions permittedoneachsimulationorsynchronizationIfitreachesthislimit,GCDSstopsanddoesnotsync anychangeshttps://supportgooglecom/a/answer/9520714?fl=1
13AstheWorkspaceAdministrator,youhavebeenaskedtodeleteatemporaryGoogleWorkspaceuser accountinthemarketingdepartmentThisuserhascreatedDrivedocumentsinMyDocumentsthatthe marketingmanagerwantstokeepaftertheuserisgoneandremovedfromWorkspaceThedatashould bevisibleonlytothemarketingmanagerAstheWorkspaceAdministrator,whatshouldyoudoto preservethisuser'sDrivedata?
A.Intheuserdeletionprocess,select“Transfer”inthedatainotherappssectionandaddthemanager's emailaddress
B.UseGoogleVaulttosetaretentionperiodontheOUwheretheusersreside.
CBeforedeletingtheuser,addtheusertothemarketingshareddriveasacontributorandmovethe documentsintothenewlocation.
DAsktheusertocreateafolderunderMyDrive,movethedocumentstobeshared,andthensharethat folderwiththemarketingteammanager.
Answer:A
Explanation:
https://supportgooglecom/a/answer/6223444?hl=en#zippy=%2Ctransfer-user-drive-or-google-data:~:te xt=You%20can%20transfer,Tap%20Transfer
14TheCEOofyourcompanyhasindicatedthatmessagesfromtrustedcontactsarebeingdeliveredto spam,anditissignificantlyaffectingtheirworkThemessagesfromthesecontactshavenotalwaysbeen classifiedasspamAdditionally,yourecentlyconfiguredSPF,DKIM,andDMARCforyourdomain Youhavebeentaskedwithtroubleshootingtheissue
Whattwoactionsshouldyoutake?(Choosetwo)
A.ObtainthemessageheaderandanalyzeusingGoogleWorkspaceToolbox.
BReviewthecontentsofthemessagesinGoogleVault
C.SetupaGmailroutingruletowhitelistthesender.
DConductanEmaillogsearchtotracethemessageroute
E.ValidatethatyourdomainisnotontheSpamhausblacklist. Answer:A,C
15SecurityandCompliancehasidentifiedsecurethird-partyapplicationsthatshouldhaveaccessto GoogleWorkspacedataYouneedtorestrictthird-partyaccesstoonlyapprovedapplications
Whattwoactionsshouldyoutake?(Choosetwo)
AWhitelistTrustedApps
BDisabletheDriveSDK
CRestrictAPIscopes
DDisableadd-onsforGmail
EWhitelistGoogleWorkspaceMarketplaceapps
Answer:AC