Your organization recently implemented context-aware access policies for Google Drive to allow users to access Drive only from corporate managed desktops. Unfortunately, some users can still access Drive from non-corporate managed machines. What preliminary checks should you perform to find out why the Context-Aware Access policy is not working as intended? (Choose two.)
Answer(s): A,E
To ensure that the Context-Aware Access policy is working correctly, perform the following checks:Confirm Google Workspace License:Verify that the user has a Google Workspace Enterprise Plus license. Context-Aware Access is a feature available only to Enterprise Plus customers.In the Admin console, navigate to Billing > Subscriptions and confirm the license type assigned to the user.Check Endpoint Verification:Ensure that Endpoint Verification is installed and active on users' desktops. Go to the Admin console, navigate to Devices > Endpoint Verification. Check the list of devices to confirm that Endpoint Verification is installed and reporting the status of users' devices.Additional Steps:Ensure that policies are correctly configured and applied to the relevant Organizational Units (OUs). Verify that the Context-Aware Access policies are correctly set up in Security > Context-Aware Access. By confirming the correct license and ensuring Endpoint Verification is installed, you can troubleshoot and resolve issues related to Context-Aware Access policy enforcement.
Set up Context-Aware AccessEndpoint Verification overview
Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?
Answer(s): D
Access Admin Console: Log into your Google Workspace Admin Console. Navigate to Security Settings: Go to Security > Gmail > Safety. Modify Spoofing Protection: Locate the spoofing protection settings. Change Delivery Method: Change the setting from quarantining emails to delivering them to inboxes with a custom warning. This way, users can review the emails and determine if they are legitimate while still being alerted to potential issues.Save Settings: Save the changes to apply the new delivery method.ReferenceGoogle Support: Protect against spoofing & identity deception
As the Workspace Administrator, you have been asked to delete a temporary Google Workspace user account in the marketing department. This user has created Drive documents in My Documents that the marketing manager wants to keep after the user is gone and removed from Workspace. The data should be visible only to the marketing manager. As the Workspace Administrator, what should you do to preserve this user's Drive data?
Answer(s): A
Access Admin Console: Log into your Google Workspace Admin Console. Navigate to User Management: Go to Directory > Users. Select the User: Find and select the temporary user account you need to delete. Initiate Deletion Process: Click on the user to open the account details and select the option to delete the user.Transfer Data: During the deletion process, you will see an option to transfer data. Select "Transfer" in the data in other apps section and enter the marketing manager's email address. Complete Deletion: Complete the user deletion process. The user's Drive documents will be transferred to the marketing manager's account.ReferenceGoogle Support: Delete a user from your organization
As a Google Workspace administrator for your organization, you are tasked with controlling which third-party apps can access Google Workspace dat
Access Admin Console: Log into your Google Workspace Admin Console. Navigate to Security Settings: Go to Security > API Controls. Manage Third-Party App Access: Select "App Access Control" and then click on "Manage Third Party App Access".Review Authorized Apps: Here you will find a list of third-party apps that have been authorized to access your Google Workspace data.Evaluate Access: Review the permissions and access scopes of each third-party app to determine if they should continue to have access or need to be restricted.ReferenceGoogle Support: Control which third-party & internal apps access Google Workspace data
Your organization wants more visibility into actions taken by Google staff related to your data for audit and security reasons. They are specifically interested in understanding the actions performed by Google support staff with regard to the support cases you have opened with Google. What should you do to gain more visibility?
Access Admin Console: Log into your Google Workspace Admin Console. Navigate to Audit Logs: Go to Reports > Audit > Access Transparency Logs. View Logs: In the Access Transparency Logs, you can see the actions performed by Google staff on your data.Monitor Actions: Review the logs to understand the actions taken by Google support staff in relation to your support cases.ReferenceGoogle Support: Access Transparency
Post your Comments and Discuss Google GOOGLE-WORKSPACE-ADMINISTRATOR exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the GOOGLE-WORKSPACE-ADMINISTRATOR content, but please register or login to continue.