Your organization recently had a sophisticated malware attack that was propagated through embedded macros in email attachments. As a Workspace administrator, you want to provide an additional layer of anti-malware protection over the conventional malware protection that is built into Gmail. What should you do to protect your users from future unknown malware in email attachments?
Answer(s): C
Access Admin Console: Log into your Google Workspace Admin Console. Navigate to Security Settings: Go to Security > Gmail > Safety. Enable Security Sandbox: Locate the "Security Sandbox" setting and enable it. Security Sandbox provides an additional layer of protection by analyzing attachments for malware in a controlled environment before they reach users.Save Settings: Save the changes to ensure the new protection layer is active.ReferenceGoogle Support: Gmail security sandbox
Your organization's information security team has asked you to determine and remediate if a user (user1@example.com) has shared any sensitive documents outside of your organization. How would you audit access to documents that the user shared inappropriately?
Answer(s): A
To audit if user1@example.com has shared any sensitive documents outside the organization, use the Security Investigation Tool in the Google Admin console. This tool allows administrators to investigate and take action on security issues within the organization.Open Security Investigation Tool:Go to the Google Admin console.Navigate to Security > Investigation tool.Set Conditions in Drive Log Events:In the Investigation Tool, select the data source as "Drive Log Events".Add the following conditions:Visibility Is External: This filters the events to show only documents that have been shared externally. Actor Is user1@example.com: This specifies that the actions performed by the user1@example.com should be displayed.Run the Investigation:Click on "Search" to run the investigation with the specified conditions. Review the results to identify any documents that have been shared externally by the user.Remediate:For any documents that were shared inappropriately, you can take corrective actions such as changing permissions or removing external sharing.
Security Investigation ToolAudit Drive log events
A user is reporting that external, inbound messages from known senders are repeatedly being incorrectly classified as spam. What steps should the admin take to prevent this behavior in the future?
To prevent external, inbound messages from known senders from being incorrectly classified as spam, add the sender's domain to an allowlist in the Admin console.Access Gmail Settings in Admin Console:Go to the Google Admin console.Navigate to Apps > Google Workspace > Gmail > Spam, Phishing, and Malware.Add Approved Senders:In the Spam settings, find the section for "Email whitelist" or "Approved senders".Click on "Configure" to add a new entry.Specify the Sender's Domain:Enter the domain of the external sender that needs to be allowed.Save the changes to update the whitelist.Verify and Monitor:Ensure that the settings are applied and monitor the spam filter to confirm that the known sender's emails are no longer being flagged as spam.By adding the sender's domain to an allowlist, you instruct the spam filter to accept emails from this domain, reducing false positives.
Prevent mail from being marked as spamApproved sender list in Gmail
You are the Workspace administrator for an international organization with Enterprise Plus Workspace licensing. A third of your employees are located in the United States, another third in Europe, and the other third geographically dispersed around the world. European employees are required to have their data stored in Europe. The current OU structure for your organization is organized by business unit, with no attention to user location. How do you configure Workspace for the fastest end user experience while also ensuring that European user data is contained in Europe?
Answer(s): B
Assess Current OU Structure: Begin by evaluating the current organizational unit (OU) structure, which is organized by business unit.Create Location-Based OUs: Add three additional OUs under the existing structure to categorize users based on their geographical location: United States, Europe, and Other Regions. Assign Users to New OUs: Move users into the newly created location-based OUs according to their physical location.Set Data Regions: Assign the appropriate data region for each new OU. For the European OU, set the data region to "Europe" to ensure compliance with data residency requirements. Validate Configuration: Ensure that the configuration is correctly implemented and verify thatEuropean user data is being stored in Europe.Monitor Performance: Regularly monitor and optimize the system to ensure the fastest end-user experience globally.
Google Workspace Admin Help - Manage Data RegionsGoogle Workspace Admin Help - Organizational Units
As a team manager, you need to create a vacation calendar that your team members can use to share their time off. You want to use the calendar to visualize online status for team members,especially if multiple individuals are on vacation What should you do to create this calendar?
Create Secondary Calendar: As the team manager, create a new calendar under your Google account specifically for tracking team vacations.Access Settings: Go to the calendar settings and navigate to "Share with specific people". Grant Access: Add your team members and give them "Make changes to events" access, allowing them to add their vacation times directly to the calendar. Educate Team: Inform team members on how to use this calendar to add their vacation times and check others' schedules.Monitor Usage: Regularly review the calendar to ensure it is being used correctly and effectively by all team members.
Google Workspace Admin Help - Share a CalendarGoogle Workspace Admin Help - Create a Team Calendar
Post your Comments and Discuss Google GOOGLE-WORKSPACE-ADMINISTRATOR exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the GOOGLE-WORKSPACE-ADMINISTRATOR content, but please register or login to continue.