Google PROFESSIONAL-COLLABORATION-ENGINEER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-COLLABORATION-ENGINEER Online Questions & Answers

• Question 41:

  HR informs you that a user has been terminated and their account has been suspended. The user is part of a current legal investigation, and HR requires the user's email data to remain on hold. The terminated user's team is actively working on a critical project with files owned by the user. You need to ensure that the terminated user's content is appropriately kept before provisioning their license to a new user.

  What two actions should you take? (Choose two.)

  A. Extend the legal hold on the user's email data.
  B. Move project files to a Team Drive or transfer ownership.
  C. Rename the account to the new user starting next week.
  D. Delete the account, freeing up a G Suite License.
  E. Assign the terminated user account an Archive User license.
  C. Rename the account to the new user starting next week.
  D. Delete the account, freeing up a G Suite License.

• Question 42:

  Your organization is part of a highly regulated industry with a very high turnover. In order to recycle licenses for new employees and comply with data retention regulations, it has been determined that certain G Suite data should be stored in a separate backup environment.

  How should you store data for this situation?

  A. Use routing rules to dual-deliver mail to an on-premises SMTP server and G Suite.
  B. Write a script and use G Suite APIs to access and download user data.
  C. Use a third-party tool to configure secure backup of G Suite data.
  D. Train users to use Google Takeout and store their archives locally.
  C. Use a third-party tool to configure secure backup of G Suite data.

• Question 43:

  Several customers have reported receiving fake collection notices from your company. The emails were received from [email protected], which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.

  What two actions should you take? (Choose two.)

  A. Change the password for suspected compromised account [email protected].
  B. Configure a Sender Policy Framework (SPF) record for your domain.
  C. Configure Domain Keys Identified Mail (DKIM) to authenticate email.
  D. Disable mail delegation for the [email protected] account.
  E. Disable "Allow users to automatically forward incoming email to another address."
  A. Change the password for suspected compromised account [email protected].
  C. Configure Domain Keys Identified Mail (DKIM) to authenticate email.

• Question 44:

  Your organization has implemented Single Sign-On (SSO) for the multiple cloud-based services it utilizes. During authentication, one service indicates that access to the SSO provider cannot be accessed due to invalid information. What should you do?

  A. Verify the NameID Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
  B. Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
  C. Verify the Subject attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.
  D. Verify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.
  B. Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.

• Question 45:

  Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.

  What action should you take to meet these requirements?

  A. Use the login audit report to export all suspicious login details for analysis.
  B. Create a custom dashboard with the security investigation tool showing suspicious logins.
  C. Use the account activity report to export all suspicious login details for analysis.
  D. Create a custom query in BigQuery showing all suspicious login details.
  A. Use the login audit report to export all suspicious login details for analysis.

• Question 46:

  Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy. What should you do?

  A. Access the Security Menu> API Reference > disable all API Access.
  B. Access the Security Menu > API Permissions > choose Drive and Disable All Access.
  C. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.
  D. Access Apps > G Suite > Drive and Docs > Sharing Settings and disable sharing outside of your domain
  D. Access Apps > G Suite > Drive and Docs > Sharing Settings and disable sharing outside of your domain

• Question 47:

  Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy. What should you do?

  A. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable third-party apps sharing
  B. Access the Security Menu > API Permissions > choose Drive and Disable All Access.
  C. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.
  D. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain
  D. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain

• Question 48:

  Your company has decided to change SSO providers. Instead of authenticating into G Suite and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.

  What two features are essential to reconfigure in G Suite? (Choose two.)

  A. Apps > add SAML apps to your domain.
  B. Reconfigure user provisioning via Google Cloud Directory Sync.
  C. Replace the third-party IDP verification certificate.
  D. Disable SSO with third party IDP.
  E. Enable API Permissions for Google Cloud Platform.
  A. Apps > add SAML apps to your domain.
  C. Replace the third-party IDP verification certificate.

• Question 49:

  Your organization is concerned with the increasing threat of phishing attacks that may impact users. Leadership has declined to force-enable 2-Step verification. You need to apply a security measure to prevent unauthorized access to user accounts.

  What should you do?

  A. Enable Enforce Strong Password policy.
  B. Enable Employee ID Login Challenge.
  C. Decrease the Maximum User Session Length.
  D. Revoke token authorizations to external applications.
  D. Revoke token authorizations to external applications.

• Question 50:

  A user does not follow their usual sign-in pattern and signs in from an unusual location. What type of alert is triggered by this event?

  A. Suspicious mobile activity alert.
  B. Suspicious login activity alert.
  C. Leaked password alert.
  D. User sign-in alert.
  B. Suspicious login activity alert.