Google Workspace Professional Admin part 3

Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to

analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as “view

data for all teams” to the HR group, but it is reporting an error when accessing the application. What should you do?

• A. Allocate the “view data for all teams” permission to all employees of the company.

• B. Confirm that the Work Insights app is turned ON for all employees.

• C. Confirm in Security > API controls > App Access Controls that Work Insights API is set to “unrestricted.”

• D. Confirm in Reports > BigQuery Export that the job is enabled.

You received this email from the head of marketing:

Hello Workspace Admin:

Next week, a new consultant will be starting on the “massive marketing mailing” project. We want to ensure that they can view contact details of

the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that

you can help with?

What are two of the steps you need to perform to fulfill this request? (Choose two.)

• A. Create an isolated OU for the consultants who need the restricted contacts access.

• B. Create a group that includes the contacts that the consultant is allowed to view.

• C. Apply the role of owner to the consultant in the group settings.

• D. Create the consultant inside under the marketing OU.

• E. Ensure that you have the Administrator Privilege of Services > Services settings and that Services >

  Contacts > Contacts Settings Message is set.

A disgruntled employee has left your company and deleted all their email messages and files in Google Drive. The security team is aware that

some intellectual property may have surfaced on a public social media site. What is the first step to start an investigation into this leak?

• A. Delete the user's account in the Admin Console.

• B. Transfer data between end user Workspace accounts.

• C. Instruct a Google Vault admin to create a matter, and place all the user data on ‘hold.’

• D. Use Google Vault to export all the user data and share among the security team.

Users in your organization are routinely complaining that they receive messages containing words of profanity they find inappropriate in a

professional setting. As the administrator, what steps should you take to prevent the messages from being delivered to users’ mailboxes?

• A. Configure an objectionable content rule.

• B. Configure an attachment compliance rule.

• C. Enable optical character recognition (OCR).

• D. Set up a Gmail DLP policy.

A user joined your organization and is reporting that every time they start their computer they are asked to sign in. This behavior differs from what

other users within the organization experience. Others are prompted to sign in biweekly. What is the first step you should take to troubleshoot this

issue for the individual user?

• A. Reset the user’s sign-in cookies.

• B. Confirm that this user has their employee ID populated as a sign-in challenge.

• C. Check the session length duration for the organizational unit the user is provisioned in.

• D. Verify that 2-Step Verification is enforced for this user.

Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying

content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party

app. What steps should you take from the admin panel to prevent users from copying data from work to personal apps on iOS devices? (Choose

two.)

• A. Clear the “allow users to copy data to personal apps” checkbox.

• B. Turn on “Advanced Mobile Management.”

• C. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection.

• D. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Open Docs in Unmanaged Apps.

• E. Clear the “allow items created with managed apps to open in unmanaged apps” checkbox.

You have been asked to set up a new Google Group for your Human Resources department as they onboard staff. The membership of the group

will change often. The HR team and all group members need to be able to send messages to and receive messages from all members of the

group. They are worried that new staff may accidentally post personal information to the group. How do you configure the Google Group to

prevent onboarded staff from sharing sensitive information to all group members?

• A. When provisioning the group, configure it as DLP enabled and select PII from the list of “Content Detectors”.

• B. Configure the group so that members cannot view group conversations.

• C. Configure the group with new member post moderation.

• D. Configure the group so only Owners or Managers can post to the group.

You are the administrator for a 30,000-user organization. You have multiple Workspace licensing options available to end users in your domain,

according to their work responsibilities. A user may be transitioned to a different license type multiple times in a given year. Your organization has

a high turnover rate for employees. What is the most efficient way to manage your organization’s licensing?

• A. Use the Directory API to create a custom batch script that modifies the users license on a daily basis.

• B. Create a license assignment rule in the Google Admin console to set user licensing based on directory attributes.

• C. Use Google Cloud Directory Sync to modify user licensing with each sync, according to information available in the organization’s LDAP.

• D. Update user licensing in the user portion of the Admin console on an as-needed basis.

Your company has numerous locations throughout the world. Each of these locations has multiple office managers that field questions from

employees through an email alias. Some questions have not been answered by an office manager. How can you create a system to assign

conversations to different receptionists using Workspace?

• A. Create a Google Groups Collaborative Inbox.

• B. Use App Script to design a ticketing system that marks conversation ownership.

• C. Contract with a third-party solution, such as ServiceNow.

• D. Create Google Tasks and assign them to receptionists to address unanswered questions.

The security team for your organization is concerned about phishing attacks against your end user base. What two actions should you take to

configure the strongest possible preventative measure against phishing attacks? (Choose two.)

• A. Train end users to mark messages as spam when they see something suspicious.

• B. Configure spoofing and authentication controls to warn end users about messages that are perceived as threats.

• C. Configure spoofing and authentication controls to quarantine messages that are perceived as threats.

• D. Enforce confidential mode for all messages sent and received from your Workspace domain.

• E. Force encryption on all inbound and outbound emails from your Workspace domain.