Your company has an OU that contains your sales team and an OU that contains your market research team. The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties. The market research team also receives that email content, but they want it because it often contains interesting market analysis or competitive intelligence. Constant Contact is often used as the source of these messages. Your company also uses Constant Contact for your own mass email marketing. You need to set email controls at the Sales OU without affecting your own outgoing email or the market research OU.What should you do?

Create a blocked senders list as the Sales OU that contains the mass email sender addresses, but bypass this setting for Constant Contact emails.

Create a blocked senders list at the root level, and then an approved senders list at the Market Research OU, both containing the mass email sender addresses.

Create a blocked senders list at the Sales OU that contains the mass email sender addresses.

Create an approved senders list at the Market Research OU that contains the mass email sender addresses.

Your organization is part of a highly regulated industry with a very high turnover. In order to recycle licenses for new employees and comply with data retention regulations, it has been determined that certain Google Workspace data should be stored in a separate backup environment.How should you store data for this situation?

Use a third-party tool to configure secure backup of Google Workspace data.

Use routing rules to dual-deliver mail to an on-premises SMTP server and Google Workspace.

Write a script and use Google Workspace APIs to access and download user data.

Use a third-party tool to configure secure backup of Google Workspace data.

Train users to use Google Takeout and store their archives locally.

Your organization is on Google Workspace Enterprise and allows for external sharing of Google Drive files to facilitate collaboration with other Google Workspace customers. Recently you have had several incidents of files and folders being broadly shared with external users and groups. Your chief security officer needs data on the scope of external sharing and ongoing alerting so that external access does not have to be disabled.What two actions should you take to support the chief security officer's request? (Choose two.)

Create an alert from Drive Audit reports to notify of external file sharing.

Automatically block external sharing using DLP rules.

Review who has viewed files using the Google Drive Activity Dashboard.

Create an alert from Drive Audit reports to notify of external file sharing.

Review total external sharing in the Aggregate Reports section.

Create a custom Dashboard for external sharing in the Security Investigation Tool.

Automatically block external sharing using DLP rules.

Your organization's Sales Department uses a generic user account (sales@company.com) to manage requests. With only one employee responsible for managing the departmental account, you are tasked with providing the department with the most efficient means to allow multiple employees various levels of access and manage requests from a common email address.What should you do?

Configure a Google Group, and set the Access Level to Announcement Only.

Configure a Google Group as an email list.

Delegate email access to department employees.

Configure a Google Group as a collaborative inbox.

Configure a Google Group, and set the Access Level to Announcement Only.

Your employer, a media and entertainment company, wants to provision Google Workspace Enterprise accounts on your domain for several world-famous celebrities. Leadership is concerned with ensuring that these VIPs are afforded a high degree of privacy. Only a small group of senior employees must be able to look up contact information and initiate collaboration with the VIPs using Google Workspace services such as Docs, Chat, and Calendar. You are responsible for configuring to meet these requirements.What should you do?

Create a Group for the VIPs and their handlers, and set the Group Access Level to Restricted.

In the Users list, find the VIPs and turn off the User setting "Directory Sharing."

Create a Group for the VIPs and their handlers, and set the Group Access Level to Restricted.

In Directory Settings, disable Contact Sharing.

Create separate Custom Directories for the VIPs and regular employees.

Your Chief Information Security Officer is concerned about phishing. You implemented 2 Factor Authentication and forced hardware keys as a best practice to prevent such attacks. The CISO is curious as to how many such email phishing attempts you've avoided since putting the 2FA+Hardware Keys in place last month.Where do you find the information your CISO is interested in seeing?

Security > Advanced Security Settings > Phishing Attempts

Apps > Google Workspace > Gmail > Phishing Attempts

Security > Dashboard > Spam Filter: Phishing

Your company has received help desk calls from users about a new interface in Gmail that they had not seen before. They determined that it was a new feature that Google released recently. In the future, you'll need time to review the new features so you can properly train employees before they see changes.What action should you take?

Company Profile > Profile > New User Features > Enable "Scheduled Release"

Apps > Google Workspace > Gmail > Uncheck "Enable Gmail Labs for my users"

Company Profile > Profile > New User Features > Enable "Rapid Release"

Device Management > Chrome > Device Settings > Stop auto-updates

Your company frequently hires from five to ten interns for short contract engagements and makes use of the same generically named Google Workspace accounts (e.g., user1@your-company.com, user2@your-company.com, user3@yourcompany.com). The manager of this program wants all email to these accounts routed to the manager's mailbox account also.What should you do?

Configure an Inbound Gateway route.

Setup address forwarding in each account's GMail setting menu.

Set up recipient address mapping in GMail Advanced Settings.

Configure an Inbound Gateway route.

Give the manager delegated access to the mailboxes.

Your company has sales offices in Madrid, Tokyo, London, and New York. The outbound email for those offices needs to include the sales person's signature and a compliance footer. The compliance footer needs to say "Should you no longer wish to receive emails about this offer, please reply with UNSUBSCRIBE."You are responsible for making sure that users cannot remove the footer.What should you do?

Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.

Send an email to each sales person with the instructions on how to add the footer to their Signature.

Ensure that each sales team is in their own OU, and configure the Append Footer with the signature and footer content translated for each locale.

Ensure that each sales team is in their own OU, and configure the Append Footer with footer content.

Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.

What action should be taken to configure alerting related to phishing attacks?

Set up a suspicious login event alert.

Set up a Token audit log event alert.

Set up an Admin audit log event alert.

Set up an email settings changed alert.

Set up a suspicious login event alert.

A company using Google Workspace has reports of cyber criminals trying to steal usernames and passwords to access critical business data. You need to protect the highly sensitive user accounts from unauthorized access.What should you do?

Enforce 2FA with Google Authenticator app.

Enforce 2FA with a physical security key.

Use a third-party identity provider.

Enforce 2FA with Google Authenticator app.

After migrating to Google Workspace, your legal team requests access to search all email and create litigation holds for employees who are involved with active litigation. You need to help the legal team meet this request.What should you do?

Create a custom role with Google Vault access, and add the legal team.

Add the legal team to the User Management Admin system role.

Add the legal team to the Google Vault Google Group.

Create a custom role with Google Vault access, and add the legal team.

Create a matter in Google Vault, and share with the legal team.

Your company's compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company's account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.Which combination of attributes will meet this objective?

Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > chooseReject.

Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers >choose Reject.

Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject

Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit CardNumbers > choose Reject.

Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > chooseReject.

Your company has decided to change SSO providers. Instead of authenticating into Google Workspace and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.What two features are essential to reconfigure in Google Workspace? (Choose two.)

Apps > add SAML apps to your domain.

Replace the third-party IDP verification certificate.

Apps > add SAML apps to your domain.

Reconfigure user provisioning via Google Cloud Directory Sync.

Replace the third-party IDP verification certificate.

Disable SSO with third party IDP.

Enable API Permissions for Google Cloud Platform.

Your-company.com recently bought 2500 Chrome devices and wants to distribute them to various teams globally. You decided that enterprise enrollment would be the best way to enforce company policies for managed Chrome devices. You discovered that Chrome devices currently end up in the top-level organization unit, and this needs to change to the organizational unit of the device administrator.What should you do?

Change Enrollment Permissions to only allow users in this organization to re-enroll existing devices.

Change Enrollment Controls to Place Chrome device in user organization.

Change Enrollment Controls to Keep Chrome device in current location.

Change Enrolment Permissions to not allow users in this organization to enroll new devices.

A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user's busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs. What two actions should be taken on this call with the user? (Choose two.)

Take screenshots of the user's screen when composing an email.

Check the Users > App Users Activity report.

Ask the user to send an email to you so you can check the headers.

Record a HAR file of the user composing a new email.

Take screenshots of the user's screen when composing an email.

Use the Email log search in the Admin panel.

Check the Users > App Users Activity report.

Your company recently migrated to Google Workspace and wants to deploy a commonly used third-party app to all of finance. Your OU structure in Google Workspace is broken down by department. You need to ensure that the correct users get this app.What should you do?

For the Finance OU, enable the third-party app in Marketplace Apps.

For the Finance OU, enable the third-party app in SAML apps.

For the Finance OU, enable the third-party app in Marketplace Apps.

At the root level, disable the third-party app. For the Finance OU, allow users to install any application from the Google Workspace Marketplace.

At the root level, disable the third-party app. For the Finance OU, allow users to install only whitelisted apps from the Google Workspace Marketplace.

The CEO of your company has indicated that messages from trusted contacts are being delivered to spam, and it is significantly affecting their work. The messages from these contacts have not always been classified as spam. Additionally, you recently configured SPF, DKIM, and DMARC for your domain. You have been tasked with troubleshooting the issue.What two actions should you take? (Choose two.)

Obtain the message header and analyze using Google Workspace Toolbox.

Set up a Gmail routing rule to whitelist the sender.

Obtain the message header and analyze using Google Workspace Toolbox.

Review the contents of the messages in Google Vault.

Set up a Gmail routing rule to whitelist the sender.

Conduct an Email log search to trace the message route.

Validate that your domain is not on the Spamhaus blacklist.

Your company wants to provide secure access for its employees. The Chief Information Security Officer disabled peripheral access to devices, but wants to enable 2-Step verification. You need to provide secure access to the applications using Google Workspace.What should you do?

Enable authentication via the Google Authenticator.

Enable additional security verification via email.

Enable authentication via the Google Authenticator.

Deploy browser or device certificates via Google Workspace.

Configure USB Yubikeys for all users.

A company wants to distribute iOS devices to only the employees in the Sales OU. They want to be able to do the following on these devices:Control password policies.Make corporate apps available to the users.Remotely wipe the device if it's lost or compromisedWhat two steps are required before configuring the device policies? (Choose two.)

Turn on Advanced Mobile Management for the domain.

Turn on Advanced Mobile Management for Sales OU

Set up an Apple Push Certificate.

Deploy Apple Certificate to every device.

Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.What should you do?

Install Google Cloud Directory Sync on all Domain Controllers.

Install Google Workspace Sync for Microsoft Outlook on all employees' computers.

Install Google Cloud Directory Sync on a supported server.

Install Google Apps Manager to automate add-user scripts.

Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.How should you accomplish this?

Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.

In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.

Room participants will need to start the meeting from the remote in the room.

By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.

Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.

Your corporate LDAP contains the email addresses of several hundred non-employee business partners. You want to sync these contacts to Google Workspace so they appear in Gmail's address autocomplete for all users in the domain. What are two options to meet this requirement? (Choose two.)

Use the Directory API to upload a .csv file containing the contacts.

Develop a custom application to call the Domain Shared Contacts API.

Use the Directory API to upload a .csv file containing the contacts.

Configure GCDS to populate a Group with external members.

Use the People API to upload a .csv file containing the contacts.

Develop a custom application to call the Domain Shared Contacts API.

Configure GCDS to synchronize shared contacts.

You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.What two actions should you take? (Choose two.)

Reset the user's password, and share the new password with the litigation team.

Copy the user's data to a secondary account.

Move the user to their own Organization Unit, and set a custom retention policy

Create a matter using Google Vault, and share the matter with the litigation team members.

Create a hold on the user's mailbox in Google Vault

Reset the user's password, and share the new password with the litigation team.

Copy the user's data to a secondary account.

Your Accounts Payable department is auditing software license contracts companywide and has asked you to provide a report that shows the number of active and suspended users by organization unit, which has been set up to match the Regions and Departments within your company. You need to produce a Google Sheet that shows a count of all active user accounts and suspended user accounts by Org unit.What should you do?

From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.

From the Admin Console Billing Menu, turn off auto-assign, and then click into Assigned Users and export the data to Sheets.

From the Admin Console Users Menu, download a list of all Users to Google Sheets, and join that with a list of ORGIDs pulled from the Reports API.

From the Google Workspace Reports Menu, run and download the Accounts Aggregate report, and export the data to Google Sheets.

From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.

You recently started an engagement with an organization that is also using Google Workspace. The engagement will involve highly sensitive data, and the data needs to be protected from being shared with unauthorized parties both internally and externally. You need to ensure that this data is properly secured.Which configuration should you implement?

Turn on external sharing with whitelisted domains, and add the external organization to the whitelist.

Provision accounts within your domain for the external users, and turn off external sharing for that Org.

Configure the Drive DLP rules to prevent the sharing of PII and PHI outside of your domain.

Create a Team Drive for this engagement, and limit the memberships and sharing settings.

You have configured your Google Workspace account on the scheduled release track to provide additional time to prepare for new product releases and determine how they will impact your users. There are some new features on the latest roadmap that your director needs you to test as soon as they become generally available without changing the release track for the entire organization.What should you do?

Create a new OU and tum on the rapid release track just for this OU.

Create a new Google Group with test users and enable the rapid release track.

Establish a separate Dev environment, and set it to rapid release.

Ask Google for a demo account with beta access to the new features.

You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.What should you do?

Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups.

Update your configuration file and resync mailing lists with Google Cloud Directory Sync.

Create and assign a custom admin role for all group owners so they can update settings.

Use the Groups Settings API to update Google Groups with desired settings.

Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.What should you do?

Create an OU for each country. Create an admin role and assign an admin with that role per OU.

Establish a new GSuite tenant with their own admin for each region.

Create an OU for each country. Create an admin role and assign an admin with that role per OU.

Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.

Create a Team Drive per OU, and allow only country-specific administration of each folder.

In your organization, users have been provisioned with either Google Workspace Enterprise, Google Workspace Business, or no license, depending on their job duties, and the cost of user licenses is paid out of each division's budget. In order to effectively manage the license disposition, team leaders require the ability to look up the type of license that is currently assigned, along with the last logon date, for their direct reports. You have been tasked with recommending a solution to the Director of IT, and have gathered the following requirements:Team leaders must be able to retrieve this data on their own (i.e., self-service).Team leaders are not permitted to have any level of administrative access to the Google Workspace Admin panel. Team leaders must only be able to look up data for their direct reports.The data must always be current to within 1 week. Costs must be mitigated.What approach should you recommend?

Use App Script and filter views within a Google Sheet.

Export log data to BigQuery with custom scopes.

Use App Script and filter views within a Google Sheet.

Create an app using AppMaker and App Script.

Your organization has been on Google Workspace Enterprise for one year. Recently, an admin turned on public link sharing for Drive files without permission from security. Your CTO wants to get better insight into changes that are made to the Google Workspace environment. The chief security officer wants that data brought into your existing SIEM system.What are two ways you should accomplish this? (Choose two.)

Use Apps Script and the Reports API to export drive audit data to the existing SIEM system

Use the BigQuery export to send drive audit data to the existing SIEM system via custom code.

Use the Data Export Tool to export admin audit data to your existing SIEM system

Use Apps Script and the Reports API to export admin audit data to your existing SIEM system.

Use Apps Script and the Reports API to export drive audit data to the existing SIEM system

Use the BigQuery export to send admin audit data to the existing SIEM system via custom code

Use the BigQuery export to send drive audit data to the existing SIEM system via custom code.

The company's ten most senior executives are to have their offices outfitted with dedicated, standardized video conference cameras, microphones, and screens.The goal is to reduce the amount of technical support they require due to frequent, habitual switching between various mobile and PC devices throughout their busy days. You must ensure that it is easier for the executives to join Meet video conferences with the dedicated equipment instead of whatever device they happen to have available.What should you do?

Provision managed Chromeboxes and set the executives' Chrome homepage to meet. google.com via device policy.

Set up unmanaged Chromeboxes and set the executives' homepage to meet.google.com via Chrome settings.

Set up the executive offices as reservable Calendar Resources, deploy Hangouts Meet Hardware Kits, and associate the Meet hardware with the room calendars.

Deploy Hangouts Meet Hardware Kits to each executive office, and associate the Meet hardware with the executives' calendars.

Provision managed Chromeboxes and set the executives' Chrome homepage to meet. google.com via device policy.

Your company works regularly with a partner. Your employees regularly send emails to your partner's employees. You want to ensure that the Partner contact information available to your employees will allow them to easily select Partner names and reduce sending errors.What should you do?

Create shared contacts in the Directory using the Domain Shared Contacts API.

Educate users on creating personal contacts for the Partner Employees.

Add a secondary domain for the Partner Company and create user entries for each Partner user.

Create shared contacts in the Directory using the Directory API.

Create shared contacts in the Directory using the Domain Shared Contacts API.

Security and Compliance has identified secure third-party applications that should have access to Google Workspace data. You need to restrict third-party access to only approved applicationsWhat two actions should you take? (Choose two.)

Whitelist Google Workspace Marketplace apps

Your-company.com recently started using Google Workspace. The CIO is happy with the deployment, but received notifications that some employees have issues with consumer Google accounts (conflict accounts). You want to put a plan in place to address this concern. What should you do?

Use the conflict account remove tool to remove the accounts from Google Workspace.

Rename the accounts to temp@your-company.com, and recreate the accounts.

Ask users to request a new Google Workspace account from your local admin.

Use the Transfer tool for unmanaged users to find the conflict accounts.

HR informs you that a user has been terminated and their account has been suspended. The user is part of a current legal investigation, and HR requires the user's email data to remain on hold. The terminated user's team is actively working on a critical project with files owned by the user. You need to ensure that the terminated user's content is appropriately kept before provisioning their license to a new user. What two actions should you take? (Choose two.)

Extend the legal hold on the user's email data.

Assign the terminated user account an Archive User license.

Extend the legal hold on the user's email data.

Move project files to a Shared Drive or transfer ownership.

Rename the account to the new user starting next week.

Delete the account, freeing up a Google Workspace License.

Assign the terminated user account an Archive User license.

Google Professional Collaboration Engineer Practice Test 1

Question 1 / 40

Madeupcorp.com is in the process of migrating from a third-party email system to Google Workspace. The VP of Marketing is concerned that her team already administers the corporate AdSense, AdWords, and YouTube channels using their @madeupcorp.com email addresses, but has not tracked which users have access to which service. You need to ensure that there is no disruption.

What should you do?

Run the Transfer Tool for Unmanaged users.

Use a Google Form to survey the Marketing department users.

Assure the VP that there is no action required to configure Google Workspace.

Contact Google Enterprise Support to identify affected users.

Comment (0)

Google Professional Collaboration Engineer Practice Test 1

Question

Google Professional Collaboration Engineer Practice Tests

Practice Tests