Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.
What action should you take to meet these requirements?
A. Use the login audit report to export all suspicious login details for analysis.
B. Create a custom dashboard with the security investigation tool showing suspicious logins.
C. Use the account activity report to export all suspicious login details for analysis.
D. Create a custom query in BigQuery showing all suspicious login details.
Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user's data.
What two actions should you take? (Choose two.)
A. Add the user's old email address to their account in the Google Workspace Admin panel.
B. Change the user's primary email address in the Google Workspace Admin panel.
C. Change the user's last name in the Google Workspace Admin panel.
D. Change the user's primary email in Active Directory.
E. Change the user's last name in Active Directory.
A company wants to distribute iOS devices to only the employees in the Sales OU. They want to be able to do the following on these devices:
Control password policies.
Make corporate apps available to the users.
Remotely wipe the device if it's lost or compromised
What two steps are required before configuring the device policies? (Choose two.)
A. Turn on Advanced Mobile Management for the domain.
B. Turn on Advanced Mobile Management for Sales OU
C. Set up Device Approvals.
D. Set up an Apple Push Certificate.
E. Deploy Apple Certificate to every device.
You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?
A. Train users to click on Not Spam button for emails.
B. Add all users of your domain to an approved sender list.
C. Force TLS for your domain.
D. Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.
Your organization wants more visibility into actions taken by Google staff related to your data for audit and security reasons. They are specifically interested in understanding the actions performed by Google support staff with regard to the support cases you have opened with Google. What should you do to gain more visibility?
A. From Google Admin Panel, go to Audit, and select Access Transparency Logs. Most Voted
B. From Google Admin Panel, go to Audit, and select Login Audit Log.
C. From Google Admin Panel, go to Audit, and select Rules Audit Log.
D. From Google Admin Panel, go to Audit, and select Admin Audit Log.
Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?
A. Add your partner domains IPs to the Inbound Gateway setting.
B. Change the spoofing protection to deliver the emails to spam instead of quarantining them.
C. Add your partner sending IP addresses to an allowlist.
D. Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.
Your organization has implemented Single Sign-On (SSO) for the multiple cloud-based services it utilizes. During authentication, one service indicates that access to the SSO provider cannot be accessed due to invalid information. What should you do?
A. Verify the NameID Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
B. Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
C. Verify the Subject attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.
D. Verify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.
You are the Workspace administrator for an international organization with Enterprise Plus Workspace licensing. A third of your employees are located in the United States, another third in Europe, and the other third geographically dispersed around the world. European employees are required to have their data stored in Europe. The current OU structure for your organization is organized by business unit, with no attention to user location. How do you configure Workspace for the fastest end user experience while also ensuring that European user data is contained in Europe?
A. Configure a data region at the top level OU of your organization, and set the value to "Europe".
B. Add three additional OU structures to designate location within the current OU structure. Assign the corresponding data region to each.
C. Configure a configuration group for European users, and set the data region to "Europe".
D. Configure three configuration groups within your domain. Assign the appropriate data regions to each corresponding group, but assign no preference to the users outside of the United States and Europe.
You recently started an engagement with an organization that is also using Google Workspace. The engagement will involve highly sensitive data, and the data needs to be protected from being shared with unauthorized parties both internally and externally. You need to ensure that this data is properly secured.
Which configuration should you implement?
A. Turn on external sharing with whitelisted domains, and add the external organization to the whitelist.
B. Provision accounts within your domain for the external users, and turn off external sharing for that Org.
C. Configure the Drive DLP rules to prevent the sharing of PII and PHI outside of your domain.
D. Create a Team Drive for this engagement, and limit the memberships and sharing settings.
A user is reporting that external, inbound messages from known senders are repeatedly being incorrectly classified as spam. What steps should the admin take to prevent this behavior in the future?
A. Modify the SPF record for your internal domain to include the IPs of the external user's mail servers.
B. Update the spam settings in the Admin Console to be less aggressive.
C. Add the sender's domain to an allowlist via approved senders in the Admin Console.
D. Instruct the user to add the senders to their contacts.
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Google exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your GOOGLE-WORKSPACE-ADMINISTRATOR exam preparations and Google certification application, do not hesitate to visit our Vcedump.com to find your solutions here.