Google Workspace Professional Admin part 2

Your organization has confidential internal content for which only authorized employees are allowed to access. Access to this content is managed

by using Google Groups. Only administrators can create and manage membership. You need to provide only the necessary functionality and follow

the principle of least privilege. What should you do?

• A. Make a moderated group so all incoming communications can be monitored.

• B. Make a security group to apply access policies.

• C. Make a dynamic group so security team members are automatically added.

• D. Use a group as a collaborative inbox that allows easier sharing.

An employee at your organization is resigning. They are in charge of organizing and maintaining recurring team events. You want to preserve the

existing meetings and transfer ownership to the resigning employee's manager. What should you do?

• A. Transfer both the events and the resources owned by the resigning employee to their manager by using the Admin console.

• B. Delete the existing calendar events and instruct the manager to create new events as the owner.

• C. Assign an Archived User (AU) license for the resigning employee.

• D. Instruct the resigning employee to share free/busy details for their calendar with their manager.

A team of field technicians at your organization has been misusing their corporate email account. You need to enforce the corporate policy that

prohibits the field technicians from sending emails externally. What should you do?

• A. Place the field technicians in a separate organizational unit (OU) and disable the Gmail mobile app.

• B. Disable automatic forwarding for all field technicians.

• C. Place the Field Technicians in a Group. Create and apply a domain wide ‘Reject message’ rule to the entire group.

• D. Create a routing rule by using the Reject message option for the organization's domain, and apply the rule to the field technician

  organizational unit (OU).

An employee in your organization is reporting that they cannot access a non-Google file in the Google Drive web interface even though other

documents in Google Drive are working. You want to identify why they can't access the file and fix the problem. What should you do? (Choose

two.)

• A. Instruct the employee to make a copy of the document by using the Google Drive user interface, then work from the copy.

• B. Reset the sign-in cookies of the employee.

• C. Instruct the employee to check the size of the document and divide the information into smaller parts if it is close to the limit.

• D. Disable Context-Aware Access policies.

• E. Instruct the employee to clear the browser cache.

In the years before your organization moved to Google Workspace, it was relatively common practice for users to create unmanaged Google

Accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners

who were on Google Workspace).

How do we provision users who previously owned unmanaged Google Accounts without having to lose access to their data?

• A. Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google

  Workspace and other Google services disabled.

• B. Contact Google Enterprise Support to provide a list of all accounts on your domains that access Google services outside Workspace, and

  have them converted to managed accounts.

• C. Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed

  account.

• D. Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts.

You work for an international organization and your CEO frequently travels to other countries. You need to enable email access and configure the

account for multiple administrative assistants. What should you do?

• A. Provide the executive administrative assistants with the account password of the CEO.

• B. Enable users to specify what sender information is included in delegated messages sent from their account.

• C. Create a group of administrative assistants. Enable delegated access to the mailbox of the CEO for that group.

• D. Log into the Gmail account of the CEO. Set up and share two separate email aliases.

Your team uses Google Drive for collaborating with external companies and partners. A sensitive project with an external organization is about to

begin. You are creating the new labels for the project. You must ensure that all labeled documents have the label visible to everyone who has

access to the project files. What should you do?

• A. Create Drive labels and a separate Shared Drive for the project.

• B. Create Drive labels and add the users from the external organization to your domain.

• C. Create Drive labels and add the permissions for all users in the project, including the external users, to view these labels.

• D. Create Drive labels and apply data protection rules to all project file.

Your executive team has asked you to export all available data for 1,200 of your 1,500 Google Workspace Domain users. How should you proceed

to export the data with the least amount of effort?

• A. Perform a search in Google Vault for the 500 users and export all of the results.

• B. Create a shared drive for the exports. Instruct end users to manually use Google Takeout to export the data and place the exported files in

  the shared drive.

• C. Contact Google Cloud support to perform the export for you.

• D. Contact Google Cloud Support to enable the Data Export tool for your organization, because you have more than 1,000 users, then use the

  tool to export data for the domain, and remove any unnecessary user data.

Your organization is engaging with an external marketing vendor on a new promotion. The vendor's employees need access to internal

documents. Some employees do not have Google consumer or Workspace accounts. You need to securely enable sharing with these external

collaborators. What should you do?

• A. Enable external sharing for the specific child organizational units or configuration groups.

• B. Enable visitor sharing for the Google Workspace domain.

• C. Create a trust rule for a shared drive to allow sharing with the external vendor.

• D. Add the external domain of the vendor to the allowlist.

Samantha, an employee from your engineering department, has submitted a help desk ticket. She is unable to share a Google Doc file with Jason,

her coworker in the marketing department. However, Samantha is able to share the same file with her colleagues in the engineering department.

You must troubleshoot the issue. What should you do?

• A. Confirm if a trust rule is preventing sharing with Jason or someone that belongs to the marketing department.

• B. Verify that Samantha's Drive sharing settings in the Admin console allow sharing content outside her organization.

• C. Confirm if there is a data protection rule that is preventing the sharing of this particular Google Doc.

• D. Instruct Samantha to export a PDF copy of the document and email it to Jason.