Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 5

Access Admin Console:

Sign in to the Google Admin console.

Navigate to Company Profile:

Go to 'Company Profile.'

Enable Scheduled Release:

Click on 'Profile.'

Find the 'New User Features' section.

Enable the 'Scheduled Release' option to ensure new features are released on a scheduled basis rather than immediately.

Inform Users:

Communicate with users about the scheduled release and the timing of new features.

Prepare training materials and sessions based on the upcoming features.

Manage New Features

Google Workspace Release Calendar

Access Admin Console:

Sign in to the Google Admin console.

Navigate to Gmail Settings:

Go to 'Apps' > 'Google Workspace' > 'Gmail.'

Set Up Recipient Address Mapping:

In Gmail settings, click on 'Routing.'

Under 'Recipient address mapping,' click on 'Configure.'

Configure Address Mapping:

Add the generic accounts (e.g., [email protected], [email protected]).

Map these addresses to the manager's mailbox account.

Save and Apply:

Save the configuration.

Ensure the routing rules are applied correctly to forward emails to the manager's account.

Test Configuration:

Send test emails to the generic accounts to verify that they are forwarded correctly to the manager's mailbox.

Gmail Routing Settings

Recipient Address Mapping

Organizational Units (OUs): Ensure that each sales team (Madrid, Tokyo, London, New York) is organized into their own Organizational Units (OUs) within Google Workspace. This helps in applying specific settings to each group individually.

Navigate to Admin Console: Go to the Google Admin console (admin.google.com) and sign in with your administrator account.

Access Gmail Settings: In the Admin console, go to Apps > Google Workspace > Gmail > Compliance.

Configure Append Footer:

Click on ''Add another rule'' under the ''Content compliance'' section.

Name the rule appropriately (e.g., Sales Compliance Footer).

Under the ''Email messages to affect'' section, select ''Outbound'' to ensure the rule applies to emails sent by the sales teams.

In the ''Add setting'' section, select ''Append footer'' and enter the footer content. Ensure the footer text is translated according to each locale.

Footer Content: The footer should include the message: ''Should you no longer wish to receive emails about this offer, please reply with UNSUBSCRIBE.'' Ensure this is translated appropriately for each office's locale.

Enforce Non-removable Footer: By configuring this at the OU level and using the Append Footer setting in compliance rules, users will not be able to remove this footer from their emails.

Save and Apply: Save the rule and ensure it is applied to the specific OUs containing the sales teams.

Google Workspace Admin: Set up compliance rules for Gmail

Google Workspace Admin: Configure email footers

Admin Console: Log into the Google Admin console at admin.google.com.

Security Settings: Navigate to Security > Investigation Tool.

Create an Alert:

Click on 'Create activity rule'.

In the conditions section, select ''Event is'' and choose ''Login''.

Set the condition to ''Suspicious login''.

Alert Details: Configure the alert details, such as who will receive the alert and any additional notification settings.

Save and Activate: Save the rule and activate it to start monitoring for suspicious login attempts.

Google Workspace Admin: Manage Alerts

Google Workspace Security: Investigation Tool

Admin Console: Log into the Google Admin console at admin.google.com.

Security Settings: Navigate to Security > Authentication > 2-step verification.

Enforce 2FA:

Enable ''Enforce 2-step verification''.

Set the option to require ''Security Keys''.

Deployment: Ensure all highly sensitive user accounts are equipped with physical security keys (e.g., YubiKey).

Enrollment: Assist users in enrolling their security keys through the Google Account settings under ''Security''.

Google Workspace Admin: Enforce 2-Step Verification

Google Workspace Security: Security Keys

Step by Step Comprehensive Detailed Explanation

Admin Console: Log into the Google Admin console at admin.google.com.

Roles and Privileges: Navigate to Admin roles > Create new role.

Create Custom Role:

Name the role (e.g., Legal Team Vault Access).

Assign privileges specific to Google Vault, such as ''Manage Holds'' and ''Manage Searches''.

Assign Role:

Add the legal team members to the custom role.

Ensure they have appropriate permissions to access Google Vault.

Google Vault Access:

The legal team can now access Google Vault (vault.google.com) to create and manage searches and holds.

Google Workspace Admin: Create and Assign Roles

Google Vault Help: Managing Roles

Admin Console: Log into the Google Admin console at admin.google.com.

Gmail Settings: Navigate to Apps > Google Workspace > Gmail > Compliance.

Create Rule:

Click on ''Add another rule'' under the ''Content compliance'' section.

Name the rule appropriately (e.g., Reject Sensitive Info).

Conditions:

Select ''Outbound and Internal Sending'' to ensure all outgoing and internal emails are scanned.

In the ''If ANY of the following match'' section, add two expressions:

Simple Content Match: Configure to find ''AccNo''.

Predefined Content Match: Select ''Credit Card Numbers''.

Action:

Choose ''Reject'' as the action for emails that match these conditions.

Save Rule: Save the rule and apply it to ensure it is active.

Google Workspace Admin: Set up Compliance Rules

Google Workspace Admin: Configure Content Compliance

Apps > add SAML apps to your domain:

When switching to Google as the Identity Provider (IDP) for Single Sign-On (SSO), you need to configure Google Workspace to act as the SSO provider for third-party applications. This involves adding the necessary SAML (Security Assertion Markup Language) applications to your domain within Google Workspace.

Navigate to the Admin console, go to Apps > Web and mobile apps, and add SAML apps to your domain. This allows Google to authenticate users for those apps.

Disable SSO with third party IDP:

Since you are switching from an external SSO provider to Google Workspace as your IDP, you must disable the current SSO configuration with the third-party provider.

Go to the Admin console, navigate to Security > Set up single sign-on (SSO) with a third party IdP, and disable the existing SSO setup. This ensures that users will now authenticate directly through Google Workspace instead of the previous SSO provider.

Google Workspace Admin Help: Set up your own custom SAML app

Google Workspace Admin Help: Disable SSO with third party IdP

Chrome OS:

Google Workspace allows administrators to push WiFi configuration settings to managed Chrome OS devices. This ensures that devices automatically connect to specified WiFi networks without manual configuration by the users.

Navigate to the Admin console, go to Devices > Chrome > Settings > Network, and add the WiFi network information.

iOS:

Similarly, WiFi configurations can be pushed to iOS devices using Google Workspace. This helps in managing WiFi connectivity for mobile devices used by employees.

In the Admin console, go to Devices > Mobile & endpoints > Settings > iOS settings and configure WiFi networks to be pushed to iOS devices.

Google Workspace Admin Help: Configure Wi-Fi settings for managed Chrome devices

Google Workspace Admin Help: Set up Wi-Fi configurations for iOS devices