Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.
What should you do?
A. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable third-party apps sharing
B. Access the Security Menu > API Permissions > choose Drive and Disable All Access.
C. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.
D. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain
You have just deployed DMARC to the your-company.com domain. The next day, you start receiving reports that some automated mail from one of your vendors, sending as you, is not being delivered to its recipients. You need to maintain secure email best practices.
You received the following SPF, DKIM and DMARC records:
v=spf1 a mx ip4 64.233.167.99 include:_spf.google.com –all
v=DKIM1;p=MIGfMA0GCSqGSlb3DQEBAQUAA4GNADCBiQKBgQDelhtCv3vUinyhKiKtZ8efjHGGo8gE1T +o7gLrvo6yRtdz9lCe6Fz5sgz0WYFW5nCV4DmaTcS
v=DMARC1;p=rekect;rua=mailto:[email protected] ruf=mailto:[email protected]; fo=1
You need to enable your vendor to resume sending mail on your behalf.
What should you do?
A. Change your DMARC record from p=reject to p=none.
B. Change your SPF record from –all to ~all.
C. Add the vendors mail servers to your SPF record.
D. Instruct your vendor to set up your DKIM signature on their systems.
The organization has conducted and completed Security Awareness Training (SAT) for all employees. As part of a new security policy, employees who did not complete the SAT have had their accounts suspended. The CTO has requested to be informed of any accounts that have been re-enabled to ensure no one is in violation of the new security policy.
What should you do?
A. Enable "Suspicious login" rule - Other Recipients: CTO
B. Enable "Suspended user made active" rule - Other Recipients: CTO
C. Enable "Email settings changed" rule - -Other Recipients: CTO
D. Enable "Suspended user made active" rule and select "Deliver to" Super Administrator(s)
Your company policy requires that managers be provided access to Drive data once an employee leaves the company.
How should you grant this access?
A. Make the manager a delegate to the former employee's account.
B. Copy the data from the former employee's My Drive to the manager's My Drive.
C. Transfer ownership of all Drive data using the file transfer ownership tool in the G Suite Admin console.
D. Login as the user and add the manager to the file permissions using the "Is owner' privilege for all Drive files.
After making a recent migration to G Suite, you updated your Google Cloud Directory Sync configuration to synchronize the global address list. Users are now seeing duplicate contacts in their global directory in G Suite. You need to resolve this issue.
What should you do?
A. Train users to use G Suite's merge contacts feature.
B. Enable directory contact deduplication in the G Suite Admin panel.
C. Update shared contact search rules to exclude internal users.
D. Create a new global directory, and delete the original.
Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.
What two things should you do? (Choose two.)
A. Disable Guest Mode and Public Sessions.
B. Enable a Device Policy of Sign In Screen and add the employee email address.
C. Enroll a 2-Factor hardware key on the device using the employee email address.
D. Enable a User Policy of Multiple Sign In Access and add just the employee email address.
E. Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.
User A is a Basic License holder. User B is a Business License holder. These two users, along with many additional users, are in the same organizational unit at the same company. When User A attempts to access Drive, they receive the following error: "We are sorry, but you do not have access to Google Docs Editors. Please contact your Organization Administrator for access." User B is not presented with the same error and accesses the service without issues.
How do you provide access to Drive for User A?
A. Select User A in the Directory, and under the Apps section, check whether Drive and Docs is disabled. If so, enable it in the User record.
B. In Apps > G Suite > Drive and Docs, select the organizational unit the users are in and enable Drive for the organizational unit.
C. In Apps > G Suite, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.
D. Select User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.
Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of
Sales and Marketing has urgently requested access to a new Marketplace app that has not previously been
vetted. The company's Information Security policy empowers you, as a G Suite admin, to grant provisional
access immediately if all of the following conditions are met:
Access to the app is restricted to specific individuals by request only.
The app does not have the ability to read or manage emails.
Immediate notice is given to the Infosec team, followed by the submission of a security risk analysis report
within 14 days.
Which actions should you take first to ensure that you are compliant with Infosec policy?
A. Move the Senior VP to a sub-OU before enabling Marketplace Settings > "Allow Users to Install Any App from G Suite Marketplace."
B. Confirm that the Senior VP's OU has the following Gmail setting disabled before whitelisting the app: "Let users delegate access to their mailbox."
C. Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.
D. Search the G Suite support forum for feedback about the app to include in the risk analysis report.
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?
A. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
B. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
C. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
D. Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.
Your company has just received a shipment of ten Chromebooks to be deployed across the company, four of which will be used by remote employees. In order to prepare them for use, you need to register them in G Suite.
What should you do?
A. Turn on the Chromebook and press Ctrl+Alt+E at the login screen to begin enterprise enrollment.
B. In Chrome Management | Device Settings, enable Forced Re-enrollment for all devices.
C. Turn on the chromebook and log in as a Chrome Device admin. Press Ctrl+Alt+E to begin enterprise enrollment.
D. Instruct the employees to log in to the Chromebook. Upon login, the auto enrollment process will begin.
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Google exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your PROFESSIONAL-COLLABORATION-ENGINEER exam preparations and Google certification application, do not hesitate to visit our Vcedump.com to find your solutions here.