ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 154 - Professional Google Workspace Administrator discussion

Report
Export

A user does not follow their sign-in pattern and signs In from an unusual location As an admin, what should you do in response to this alert for this user during this investigation?

A.
Add Two Factor Authentication to the Domain
Answers
A.
Add Two Factor Authentication to the Domain
B.
First suspend the account and then investigate
Answers
B.
First suspend the account and then investigate
C.
Enhance your security alerts for tracking sign-in patterns
Answers
C.
Enhance your security alerts for tracking sign-in patterns
D.
Investigate the account for unauthorized activity in the Login and Security Audit Log
Answers
D.
Investigate the account for unauthorized activity in the Login and Security Audit Log
Suggested answer: D

Explanation:

Access Admin Console: Go to admin.google.com and sign in with your admin account.

Navigate to Reports: In the Admin console, go to Reports > Audit > Login.

Review Login Activity: Look for any unusual or suspicious login attempts, such as logins from unknown IP addresses or locations.

Investigate Further:

Check the user's activity for any signs of unauthorized access or unusual behavior.

Use the Security Audit Log to find more details about the login attempts and other security events.

Take Appropriate Actions:

If unauthorized activity is confirmed, consider resetting the user's password and enabling two-factor authentication (2FA).

Notify the user and possibly suspend the account if the threat level is high until the issue is resolved.

By investigating the login and security logs, you can identify and mitigate potential security threats effectively.

View and analyze security reports and logs

Audit and investigation page

asked 18/09/2024
Jaimie Korik-Read
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first