Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.What action should you take to meet these requirements?

Use the login audit report to export all suspicious login details for analysis.

Create a custom dashboard with the security investigation tool showing suspicious logins.

Use the account activity report to export all suspicious login details for analysis.

Create a custom query in BigQuery showing all suspicious login details.

In the years prior to your organization moving to Google Workspace, it was relatively common practice for users to create consumer Google accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners who were on Google Workspace.) You were able to address active employees' use of consumer accounts during the rollout, and you are now concerned about blocking former employees who could potentially still have access to those services even though they don't have access to their corporate email account.What should you do?

Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts, so they can clean up the respective access control lists.

Contact Google Enterprise Support to provide a list of all accounts on your domain(s) that access non-Google Workspace Google services and have them blocked.

Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed account.

Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts, so they can clean up the respective access control lists.

Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google Workspace and Other Google Services disabled.

Your organization has implemented Single Sign-On (SSO) for the multiple cloud-based services it utilizes. During authentication, one service indicates that access to the SSO provider cannot be accessed due to invalid information.What should you do?

Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Verify the NameID Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Verify the Subject attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Verify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.

The CEO of your company heard about new security and collaboration features and wants to know how to stay up to date. You are responsible for testing and staying up to date with new features, and have been asked to prepare a presentation for management.What should you do?

Subscribe to the Google Workspace release calendar, and Join the Google Cloud Connect Community.

Download the Google Workspace roadmap, and work together with a deployment specialist for new features.

Create a support ticket for the Google Workspace roadmap, and ask to enable the latest release of Google Workspace.

Subscribe to the Google Workspace release calendar, and Join the Google Cloud Connect Community.

Change Google Workspace release track to: Rapid Release for faster access to new features.

Your company (your-company.com) just acquired a new business (new-company.com) that is running their email on-premises. It is close to their peak season, so any major changes need to be postponed. However, you need to ensure that the users at the new business can receive email addressed to them using your-company.com into their on-premises email server. You need to set up an email routing policy to accomplish this.What steps should you take?

Set up an Inbound Mail Gateway to reroute all inbound email to the on-premises server.

Set up an Outbound Mail Gateway to route all outbound email to the on-premises server.

Set up accounts for the new employees, and use mail forwarding rules to send to the on-premises server.

Set up an Inbound Mail Gateway to reroute all inbound email to the on-premises server.

Set up a Default route with split delivery to route email to the on-premises server.

A user does not follow their usual sign-in pattern and signs in from an unusual location.What type of alert is triggered by this event?

Suspicious login activity alert.

Suspicious mobile activity alert.

Suspicious login activity alert.

Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new "G-Team." A "G-Team' is composed of a Google Group and a Team Drive/Secondary Calendar that is shared using that Google Group. What two design decisions are required to implement this workflow securely? (Choose two.)

The Google Form will need to be limited to internal users only.

The Apps Script will need to run on a timed interval to process new entries.

The Apps Script will need to run as a Google Workspace admin.

You will need a Cloud SQL instance to store "G-Team' data.

The Google Form will need to be limited to internal users only.

The Apps Script will need to run on a timed interval to process new entries.

The Google Form will need to enforce Group naming conventions.

The application development team has come to you requesting that a new, internal, domain-owned Google Workspace app be allowed to access Google Drive APIs. You are currently restricting access to all APIs using approved whitelists, per security policy. You need to grant access for this app.What should you do?

Add OAuth Client ID to Google Drive Trusted List.

Enable all API access for Google Drive.

Enable "trust domain owned apps" setting.

Add OAuth Client ID to Google Drive Trusted List.

Whitelist the app in the Google Workspace Marketplace.

Several customers have reported receiving fake collection notices from your company. The emails were received from accounts.receivable@yourcompany.com, which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.What two actions should you take? (Choose two.)

Change the password for suspected compromised account accounts.receivable@yourcompany.com.

Configure Domain Keys Identified Mail (DKIM) to authenticate email.

Change the password for suspected compromised account accounts.receivable@yourcompany.com.

Configure a Sender Policy Framework (SPF) record for your domain.

Configure Domain Keys Identified Mail (DKIM) to authenticate email.

Disable mail delegation for the accounts.receivable@yourcompany.com account.

Disable "Allow users to automatically forward incoming email to another address."

Your cyber security team has requested that all email destined for external domains be scanned for credit card numbers, and if found, the email must be encrypted using your cloud-based third-party encryption provider. You are responsible for configuring to meet this request.What should you do?

Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check "Change route" to send to your third-party encryption provider to encrypt.

Create a content compliance rule on outbound mail and internal-sending mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.

Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check "Encrypt message if not encrypted".

Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.

Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check "Change route" to send to your third-party encryption provider to encrypt.

Your organization is concerned with the increasing threat of phishing attacks that may impact users. Leadership has declined to force-enable 2-Step verification.You need to apply a security measure to prevent unauthorized access to user accounts.What should you do?

Revoke token authorizations to external applications.

Enable Enforce Strong Password policy.

Enable Employee ID Login Challenge.

Decrease the Maximum User Session Length.

Revoke token authorizations to external applications.

Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.What should you do?

Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain.

Access the Security Menu> API Reference > disable all API Access.

Access the Security Menu > API Permissions > choose Drive and Disable All Access.

Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.

Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain.

How can you monitor increases in user reported Spam as identified by Google?

Review spike in user-reported spam in the Alert center.

Review post-delivery activity in the Email logs.

Review user-reported spam in the Investigation Tool.

Review spike in user-reported spam in the Alert center.

Review post-delivery activity in the BigQuery Export.

With the help of a partner, you deployed Google Workspace last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things Google Workspace so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform.What should you do?

Create a Feature Release alert in the Alert Center to be alerted to new functionality.

Develop a cadence of regular roadmap and business reviews with your partner.

Regularly scan the admin console and keep track of any new features you identify.

Create a Feature Release alert in the Alert Center to be alerted to new functionality.

Put half of your organization on the Rapid Release Schedule to highlight differences.

The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.What two actions should you take? (Choose two.)

Verify that DMARC, DKIM, and SPF records are configured correctly for your domain.

Add the sender of the wire transfer email to the blocked senders list.

Configure objectionable content to reject messages with the words "wire transfer."

Verify that DMARC, DKIM, and SPF records are configured correctly for your domain.

Create a rule requiring secure transport for all messages regarding wire transfers.

Add the sender of the wire transfer email to the blocked senders list.

Enable all admin settings in Gmail's safety > spoofing and authentication.

Your-company.com finance departments want to create an internal application that needs to read data from spreadsheets. As the collaboration engineer, you suggest using App Maker. The Finance team is concerned about data security when creating applications with App Maker.What security measures should you implement to secure data?

Use Roles, Script, and Owner access permissions for operations on records and data relations.

Enable App Maker access only for the Finance department Organization Unit.

Use a service account with limited permissions to access each data source.

Change owner access permissions to allow internal usage only.

Your company is in the process of deploying Google Drive Enterprise for your sales organization. You have discovered that there are many unmanaged accounts across your domain. Your security team wants to manage these accounts moving forward.What should you do?

Use the Data Migration Service to transfer the data to a managed account.

Disable access to all "Other Services" in the Google Workspace Admin Console.

Use the Transfer Tool for unmanaged accounts to invite users into the domain.

Use the Data Migration Service to transfer the data to a managed account.

Open a support ticket to have Google transfer unmanaged accounts into your domain.

Your chief compliance officer is concerned about API access to organization data across different cloud vendors. He has tasked you with compiling a list of applications that have API access to Google Workspace data, the data they have access to, and the number of users who are using the applications.How should you compile the data being requested?

Review the authorized applications for each user via the Google Workspace Admin panel.

Create a survey via Google forms, and collect the application data from users.

Review the token audit log, and compile a list of all the applications and their scopes.

Review the API permissions installed apps list, and export the list.

Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from ActiveDirectory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user's data.What two actions should you take? (Choose two.)

Add the user's old email address to their account in the Google Workspace Admin panel.

Change the user's last name in the Google Workspace Admin panel.

Add the user's old email address to their account in the Google Workspace Admin panel.

Change the user's primary email address in the Google Workspace Admin panel.

Change the user's last name in the Google Workspace Admin panel.

Change the user's primary email in Active Directory.

Change the user's last name in Active Directory.

Your CISO is concerned about third party applications becoming compromised and exposing Google Workspace data you have made available to them. How could you provide granular insight into what data third party applications are accessing?What should you do?

Create a report using the OAuth Token Audit Activity logs.

Create a report using the Calendar Audit Activity logs.

Create a report using the Drive Audit Activity logs.

Create a reporting using the API Permissions logs for Installed Apps.

The Director of your Finance department has asked to be alerted if two financial auditors share any files outside the domain. You need to set an Admin Alert on Drive Sharing.What should you do?

Check the Admin Console Dashboard Insights page periodically for external shares, and notify the Director of any changes.

Create a Google Group that has the two auditors as members, and then create a Drive DLP Rule that is assigned to that Group.

Create a Content Compliance rule that looks for outbound share notifications from those two users, and Bcc the Director on those emails.

Create two Drive Audit Alerts, one for each user, where the Visibility is "Shared Externally," and email them to the Director.

Check the Admin Console Dashboard Insights page periodically for external shares, and notify the Director of any changes.

Your company has been engaged in a lawsuit, and the legal department has been asked to discover and hold all email for two specific users. Additionally, they have been asked to discover and hold any email referencing "Secret Project 123."What steps should you take to satisfy this request?

Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: user1@your-company.com, user2@your-company. Set the search terms to: (secret project 123). Save.

Create a Matter and a Hold. Set the Hold to Gmail, set it to the top level Organization, and set the search terms to "secret project 123." Create a second Hold.Set the second Hold to Gmail, set it to Accounts, and enter: user1 @your-company.com, user2@your-company.com. Save.

Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: user1@your-company.com, user2@your-company. Set the search terms to: (secret project 123). Save.

Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and enter: user1@your-company.com AND user2@your-company.com. Set the search terms to: secret AND project AND 123. Save.

Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: user1@your-company.com, user2@your-company. Set the search terms to secret OR project OR 123. Save.

Your Security Officer ran the Security Health Check and found the alert that "Installation of mobile applications from unknown sources" was occurring. They have asked you to find a way to prevent that from happening.Using Mobile Device Management (MDM), you need to configure a policy that will not allow mobile applications to be installed from unknown sources.What MDM configuration is needed to meet this requirement?

In Android Settings, ensure that "Allow non-Play Store apps from unknown sources installation" is unchecked.

In the Application Management menu, configure the whitelist of apps that Android and iOS devices are allowed to install.

In the Application Management menu, configure the whitelist of apps that Android, iOS devices, and Active Sync devices are allowed to install.

In Android Settings, ensure that "Allow non-Play Store apps from unknown sources installation" is unchecked.

In Device Management > Setup > Device Approvals menu, configure the "Requires Admin approval" option.

After a recent transition to Google Workspace, helpdesk has received a high volume of password reset requests and cannot respond in a timely manner. Your manager has asked you to determine how to resolve these requests without relying on additional staff.What should you do?

Enable non-admin password recovery.

Create a custom Apps Script to reset passwords.

Use a third-party tool for password recovery.

Enable non-admin password recovery.

Create a Google form to submit reset requests.

Your organization deployed Google Workspace Enterprise within the last year, with the support of a partner. The deployment was conducted in three stages:Core IT, Google Guides, and full organization. You have been tasked with developing a targeted ongoing adoption plan for your Google Workspace organization.What should you do?

Use Google Guides to deliver ad-hoc training to all of their co-workers and reports.

Use Work Insights to gather adoption metrics and target your training exercises.

Use Reports APIs to gather adoption metrics and Gmail APIs to deliver training content directly.

Use a script to monitor Email attachment types and target users that aren't using Drive sharing.

Your company recently decided to use a cloud-based ticketing system for your customer care needs. You are tasked with rerouting email coming into your customer care address, customercare@your-company.com to the cloud platform's email address, your-company@cloudprovider.com. As a security measure, you have mail forwarding disabled at the domain level.What should you do?

Create a rule to forward mail in the customercare@your-company.com mailbox to your-company@cloudprovider.com

Create a mail contact in the Google Workspace directory that has an email address of your-company@cloudprovider.com

Create a rule to forward mail in the customercare@your-company.com mailbox to your-company@cloudprovider.com

Create a recipient map in the Google Workspace Admin console that maps customercare@your-company.com to your-company@cloudprovider.com

Create a content compliance rule in the Google Workspace Admin console to change route to your-company@cloudprovider.com

Your organization has recently gone Google, but you are not syncing Groups yet. You plan to sync all of your Active Directory group objects to Google Groups with a single GCDS configuration.Which scenario could require an alternative deployment strategy?

Some of the Active Directory groups have members external to organization.

Some of your Active Directory groups have sensitive group membership.

Some of the Active Directory groups do not have owners.

Some of the Active Directory groups have members external to organization.

Some of the Active Directory groups do not have email addresses.

Your company has just received a shipment of ten Chromebooks to be deployed across the company, four of which will be used by remote employees. In order to prepare them for use, you need to register them in Google Workspace.What should you do?

Turn on the Chromebook and press Ctrl+Alt+E at the login screen to begin enterprise enrollment.

In Chrome Management | Device Settings, enable Forced Re-enrollment for all devices.

Turn on the chromebook and log in as a Chrome Device admin. Press Ctrl+Alt+E to begin enterprise enrollment.

Instruct the employees to log in to the Chromebook. Upon login, the auto enrollment process will begin.

All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.What should you do?

Use the Drive API to modify the permissions of the individual files contained within the subfolder.

Use the Drive API to modify the permissions of the Employee Compensation subfolder.

Use the Drive API to modify the permissions of the individual files contained within the subfolder.

Move the contents of the subfolder to a new Team Drive with only the relevant team members.

Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.

Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales & Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company's Information Security policy empowers you, as a Google Workspace admin, to grant provisional access immediately if all of the following conditions are met:Access to the app is restricted to specific individuals by request only.The app does not have the ability to read or manage emails.Immediate notice is given to the Infosec team, followed by the submission of a security risk analysis report within 14 days.Which actions should you take first to ensure that you are compliant with Infosec policy?

Move the Senior VP to a sub-OU before enabling Marketplace Settings > "Allow Users to Install Any App from Google Workspace Marketplace."

Confirm that the Senior VP's OU has the following Gmail setting disabled before whitelisting the app: "Let users delegate access to their mailbox."

Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.

Search the Google Workspace support forum for feedback about the app to include in the risk analysis report.

User A is a Basic License holder. User B is a Business License holder. These two users, along with many additional users, are in the same organizational unit at the same company. When User A attempts to access Drive, they receive the following error: "We are sorry, but you do not have access to Google Docs Editors.Please contact your Organization Administrator for access." User B is not presented with the same error and accesses the service without issues.How do you provide access to Drive for User A?

Select User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.

Select User A in the Directory, and under the Apps section, check whether Drive and Docs is disabled. If so, enable it in the User record.

In Apps > Google Workspace > Drive and Docs, select the organizational unit the users are in and enable Drive for the organizational unit.

In Apps > Google Workspace, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.

Select User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.

Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else. What two things should you do? (Choose two.)

Enable a Device Policy of Sign In Screen and add the employee email address.

Enroll a 2-Factor hardware key on the device using the employee email address.

Disable Guest Mode and Public Sessions.

Enable a Device Policy of Sign In Screen and add the employee email address.

Enroll a 2-Factor hardware key on the device using the employee email address.

Enable a User Policy of Multiple Sign In Access and add just the employee email address.

Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.

Your company policy requires that managers be provided access to Drive data once an employee leaves the company.How should you grant this access?

Transfer ownership of all Drive data using the file transfer ownership tool in the Google Workspace Admin console.

Make the manager a delegate to the former employee's account.

Copy the data from the former employee's My Drive to the manager's My Drive.

Transfer ownership of all Drive data using the file transfer ownership tool in the Google Workspace Admin console.

Login as the user and add the manager to the file permissions using the "Is owner' privilege for all Drive files.

After making a recent migration to Google Workspace, you updated your Google Cloud Directory Sync configuration to synchronize the global address list. Users are now seeing duplicate contacts in their global directory in Google Workspace. You need to resolve this issue.What should you do?

Train users to use Google Workspace's merge contacts feature.

Enable directory contact deduplication in the Google Workspace Admin panel.

Update shared contact search rules to exclude internal users.

Create a new global directory, and delete the original.

The organization has conducted and completed Security Awareness Training (SAT) for all employees. As part of a new security policy, employees who did not complete the SAT have had their accounts suspended. The CTO has requested to be informed of any accounts that have been re-enabled to ensure no one is in violation of the new security policy.What should you do?

Enable "Suspended user made active" rule and select "Deliver to" Super Administrator(s)

Enable "Suspicious login" rule - Other Recipients: CTO

Enable "Suspended user made active" rule - Other Recipients: CTO

Enable "Email settings changed" rule - -Other Recipients: CTO

Enable "Suspended user made active" rule and select "Deliver to" Super Administrator(s)

You have just deployed DMARC to the your-company.com domain. The next day, you start receiving reports that some automated mail from one of your vendors, sending as you, is not being delivered to its recipients. You need to maintain secure email best practices.You received the following SPF, DKIM and DMARC records: v=spf1 a mx ip4 64.233.167.99 include:_spf.google.com -allv=DKIM1;p=MIGfMA0GCSqGSlb3DQEBAQUAA4GNADCBiQKBgQDelhtCv3vUinyhKiKtZ8efjHGGo8gE1T+o7gLrvo6yRtdz9lCe6Fz5sgz0WYFW5nCV4DmaTcS v=DMARC1;p=rekect;rua=mailto:dmarc_rua@pm.dmarcdomain.comruf=mailto:dmarc_ruf@pm.dmarcdomain.com; fo=1 You need to enable your vendor to resume sending mail on your behalf.What should you do?

Change your DMARC record from p=reject to p=none.

Change your SPF record from -all to ~all.

Add the vendors mail servers to your SPF record.

Instruct your vendor to set up your DKIM signature on their systems.

Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.What should you do?

Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain

Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable third-party apps sharing

Access the Security Menu > API Permissions > choose Drive and Disable All Access.

Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.

Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain

Google Professional Collaboration Engineer Practice Test 2

Question 1 / 39

The executive team for your company has an extended retention policy of two years in place so that they have access to email for a longer period of time. Your COO has found this useful in the past but when they went to find an email from last year to prove details of a contract in dispute, they were unable to find it. It is no longer in the Trash. They have requested that you recover it.

What should you do?

Using Vault, perform a search for the email and export the content to a standard format to provide for investigation.

Using the Gmail Audit log, perform a search for the email, export the results, then import with Google Workspace Migration for Microsoft Outlook.

Using the Message ID, contact Google Google Workspace support to recover the email, then import with Google Workspace Migration for Microsoft Outlook.

Using the Vault Audit log, perform a search for the email, export the results. then import with Google Workspace Migration for Microsoft Outlook.

Comment (0)

Google Professional Collaboration Engineer Practice Test 2

Question

Google Professional Collaboration Engineer Practice Tests

Practice Tests