Your cyber security team has requested that all email destined for external domains be scanned for credit card numbers, and if found, the email must be encrypted using your cloud-based third-party encryption provider. You are responsible for configuring to meet this request.What should you do?
Answer(s): A
Sign in to the Google Admin console.From the Admin console Home page, go to "Apps" and then "Google Workspace" and "Gmail." Select "Compliance" and then "Content compliance."Click on "Add another rule" to create a new content compliance rule.In the new rule setup, specify conditions:For "Email messages to affect," choose "Outbound" and "Internal - sending." Under "Add expressions," select "If ANY of the following match the message" and choose "Predefined content match," then select "Credit Card Numbers." In the "Actions" section, select "Add more recipients" and specify the custom header your encryption provider uses.Save the rule.This ensures that emails containing credit card numbers are flagged and encrypted by your third- party encryption provider, fulfilling the security requirements set by your cyber security team.
Google Workspace Admin Help - Set up rules for content compliance
Your organization is concerned with the increasing threat of phishing attacks that may impact users.Leadership has declined to force-enable 2-Step verification. You need to apply a security measure to prevent unauthorized access to user accounts.What should you do?
Answer(s): B
Sign in to the Google Admin console.From the Admin console Home page, go to "Security" and then "Login challenges." Enable the "Employee ID login challenge" setting.Configure the challenge by defining the employee IDs that users need to provide during the login process.Enabling Employee ID login challenges adds an additional layer of security without requiring 2-Step verification. This helps prevent unauthorized access by ensuring that users provide an additional piece of information known only to them.
Google Workspace Admin Help - Configure login challenges "?>>?b GF\]\rom the Admin console Home page, go to "Security." Under "Security," select "API controls."In the "API controls" section, click on "Manage Third-Party App Access." Find the Google Drive API in the list.Choose "Disable All Access" for Google Drive to ensure that no third-party apps have OAuth permissions to Google Drive.This configuration adheres to the policy set by the Chief Information Security Officer by preventing third-party apps from accessing Google Drive via OAuth.Google Workspace Admin Help - Manage API client access
How can you monitor increases in user reported Spam as identified by Google?
Answer(s): C
Sign in to the Google Admin console.From the Admin console Home page, go to "Security" and then to "Alert center." In the Alert center, look for alerts related to user-reported spam. You can review details of these alerts to monitor any spikes in user-reported spam activity. The Alert center provides a centralized location to review and manage alerts, making it easier to identify trends and spikes in spam reports.
Google Workspace Admin Help - Alert Center Overview BFbC
With the help of a partner, you deployed Google Workspace last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things Google Workspace so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform.What should you do?
Schedule regular meetings with your Google Workspace partner. During these meetings, review the Google Workspace roadmap and upcoming features. Discuss how new features can be leveraged to benefit your organization. Plan business reviews to ensure that you are making the most of the platform's capabilities and staying up-to-date with developments.Establishing a regular cadence of roadmap and business reviews ensures continuous alignment with the latest Google Workspace innovations and allows your organization to take full advantage of new features.
Google Workspace Admin Help - Google Workspace Partners
The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.What two actions should you take? (Choose two.)
Answer(s): B,E
Verify DMARC, DKIM, and SPF records:Sign in to your domain host and navigate to the DNS settings. Ensure that SPF (Sender Policy Framework) is set up correctly to prevent email spoofing. Configure DKIM (DomainKeys Identified Mail) to add a digital signature to emails sent from your domain.Set up DMARC (Domain-based Message Authentication, Reporting & Conformance) to provide instructions to receiving mail servers on how to handle emails that fail SPF or DKIM checks.Enable Gmail spoofing and authentication settings:Sign in to the Google Admin console.From the Admin console Home page, go to "Apps" > "Google Workspace" > "Gmail" > "Safety." Enable settings related to spoofing and authentication to add additional layers of protection against phishing attempts.By verifying these email security settings and enabling spoofing protections, you can help prevent unauthorized or fraudulent emails from being sent, thus reducing the risk of wire transfer fraud.
Google Workspace Admin Help - Set up SPF recordsGoogle Workspace Admin Help - Set up DKIMGoogle Workspace Admin Help - Set up DMARC
Post your Comments and Discuss Google GOOGLE-WORKSPACE-ADMINISTRATOR exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the GOOGLE-WORKSPACE-ADMINISTRATOR content, but please register or login to continue.