Your-company.com finance departments want to create an internal application that needs to read data from spreadsheets. As the collaboration engineer, you suggest using App Maker. The Finance team is concerned about data security when creating applications with App Maker.What security measures should you implement to secure data?
Answer(s): A
When developing the application in App Maker, define roles that correspond to the different levels of access needed by users.Use scripts to control access to data based on user roles. This ensures that only authorized users can perform certain operations.Set the owner access permissions appropriately to ensure that data can only be accessed or modified by those with the necessary permissions.Regularly review and update roles and permissions to adapt to any changes in the organization or the application's usage.Implementing these security measures ensures that data in your internal application is accessed and managed securely, mitigating risks associated with unauthorized access.
Google Workspace Admin Help - App Maker Security
Your company is in the process of deploying Google Drive Enterprise for your sales organization. You have discovered that there are many unmanaged accounts across your domain. Your security team wants to manage these accounts moving forward.What should you do?
Answer(s): B
Identify Unmanaged Accounts: First, you need to identify the unmanaged accounts in your domain. These are accounts created by users with their company email address but are not managed by your Google Workspace.Use the Transfer Tool for Unmanaged Accounts: Google provides a specific tool called the "Transfer tool for unmanaged users". This tool allows administrators to invite users with unmanaged accounts to join the organization's managed Google Workspace account. Send Invitations: Using this tool, you can send invitations to these users to join your Google Workspace domain.Accept Invitations: The users need to accept the invitation to migrate their unmanaged account into your managed domain.Monitor and Verify: After the invitation is accepted, monitor the process to ensure that all accounts are successfully migrated and are now managed under your Google Workspace domain.ReferenceGoogle Support: Transfer tool for unmanaged users
Your chief compliance officer is concerned about API access to organization data across different cloud vendors. He has tasked you with compiling a list of applications that have API access to Google Workspace data, the data they have access to, and the number of users who are using the applications.How should you compile the data being requested?
Answer(s): C
Access Admin Console: Log into your Google Workspace Admin Console. Navigate to Reports: Go to the Reports section in the Admin Console. Token Audit Log: Within the Reports, access the "Token Audit" log. This log provides details on OAuth tokens issued to applications by your users.Review Applications: Review the list of applications that have been granted access to your Google Workspace data. This will include information about the scopes (types of data) that each application can access.Compile List: Compile a list of all the applications from the token audit log. Include details about the data they have access to and the number of users using each application.Export Data: You can export this data to a spreadsheet for further analysis and reporting to your chief compliance officer.ReferenceGoogle Support: Token audit log
Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user's data.What two actions should you take? (Choose two.)
Answer(s): D,E
Update Active Directory: Since your organization syncs directory data from Active Directory to Google Workspace, any changes to user data need to be made in Active Directory first. Change Primary Email in AD: Change the user's primary email address in Active Directory. This will ensure that the new email address is synchronized with Google Workspace. Change Last Name in AD: Similarly, change the user's last name in Active Directory. This ensures the updated name is synchronized correctly.Sync Changes: Wait for the next synchronization cycle of Google Cloud Directory Sync (GCDS) to update the changes in Google Workspace.Verify Changes in Google Workspace: After the sync is complete, verify that the changes to the user's email address and last name have been successfully updated in Google Workspace.ReferenceGoogle Support: Google Cloud Directory Sync
Your CISO is concerned about third party applications becoming compromised and exposing Google Workspace data you have made available to them. How could you provide granular insight into what data third party applications are accessing?What should you do?
Access Admin Console: Log into your Google Workspace Admin Console.Navigate to Reports: Go to the Reports section within the Admin Console. OAuth Token Audit Log: Access the OAuth Token Audit Activity logs. This log provides detailed information about third-party applications that have been granted access to your Google Workspace data.Review Data Access: Review the logs to see which applications have accessed what type of data. This includes details on the scopes of access requested by the applications. Generate Report: Create a report from these logs to provide granular insight into the data accessed by third-party applications. This report can be used to assess and mitigate any potential risks.ReferenceGoogle Support: Token audit log
Post your Comments and Discuss Google GOOGLE-WORKSPACE-ADMINISTRATOR exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the GOOGLE-WORKSPACE-ADMINISTRATOR content, but please register or login to continue.