QUESTION: 13

After migrating to Google Workspace, your legal team requests access to search all email and create litigation holds for employees who are involved with active litigation. You need to help the legal team meet this request.

What should you do?

Add the legal team to the User Management Admin system role.
Add the legal team to the Google Vault Google Group.
Create a custom role with Google Vault access, and add the legal team.
Create a matter in Google Vault, and share with the legal team.

Answer(s): C

Explanation:

Step by Step Comprehensive Detailed Explanation

Admin Console: Log into the Google Admin console at admin.google.com. Roles and Privileges: Navigate to Admin roles > Create new role.
Create Custom Role:
Name the role (e.g., Legal Team Vault Access).
Assign privileges specific to Google Vault, such as "Manage Holds" and "Manage Searches".
Assign Role:
Add the legal team members to the custom role.
Ensure they have appropriate permissions to access Google Vault.
Google Vault Access:
The legal team can now access Google Vault (vault.google.com) to create and manage searches and holds.

Reference:

Google Workspace Admin: Create and Assign Roles
Google Vault Help: Managing Roles

Reveal Solution Next Question

QUESTION: 14

Your company's compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company's account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.

Which combination of attributes will meet this objective?

Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.
Name the rule > select Outbound > select If ANY of the following match > add two expressions:
one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers
> choose Reject
Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

Answer(s): A

Explanation:

Admin Console: Log into the Google Admin console at admin.google.com. Gmail Settings: Navigate to Apps > Google Workspace > Gmail > Compliance.
Create Rule:
Click on "Add another rule" under the "Content compliance" section. Name the rule appropriately (e.g., Reject Sensitive Info).
Conditions:

Select "Outbound and Internal Sending" to ensure all outgoing and internal emails are scanned. In the "If ANY of the following match" section, add two expressions:
Simple Content Match: Configure to find "AccNo".
Predefined Content Match: Select "Credit Card Numbers".
Action:
Choose "Reject" as the action for emails that match these conditions. Save Rule: Save the rule and apply it to ensure it is active.

Reference:

Google Workspace Admin: Set up Compliance Rules
Google Workspace Admin: Configure Content Compliance

Reveal Solution Next Question

QUESTION: 15

Your company has decided to change SSO providers. Instead of authenticating into Google Workspace and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.

What two features are essential to reconfigure in Google Workspace? (Choose two.)

Apps > add SAML apps to your domain.
Reconfigure user provisioning via Google Cloud Directory Sync.
Replace the third-party IDP verification certificate.
Disable SSO with third party IDP.
Enable API Permissions for Google Cloud Platform.

Answer(s): A,D

Explanation:

Apps > add SAML apps to your domain:
When switching to Google as the Identity Provider (IDP) for Single Sign-On (SSO), you need to configure Google Workspace to act as the SSO provider for third-party applications. This involves adding the necessary SAML (Security Assertion Markup Language) applications to your domain within Google Workspace.
Navigate to the Admin console, go to Apps > Web and mobile apps, and add SAML apps to your domain. This allows Google to authenticate users for those apps.
Disable SSO with third party IDP:
Since you are switching from an external SSO provider to Google Workspace as your IDP, you must disable the current SSO configuration with the third-party provider. Go to the Admin console, navigate to Security > Set up single sign-on (SSO) with a third party IdP, and disable the existing SSO setup. This ensures that users will now authenticate directly through Google Workspace instead of the previous SSO provider.

Reference:

Google Workspace Admin Help: Set up your own custom SAML app Google Workspace Admin Help: Disable SSO with third party IdP

Reveal Solution Next Question

QUESTION: 16

On which two platforms can you push WiFi connection information with Google Workspace? (Choose two.)

Mac OS
Windows
Chrome OS
iOS
Linux

Answer(s): C,D

Explanation:

Chrome OS:
Google Workspace allows administrators to push WiFi configuration settings to managed Chrome OS devices. This ensures that devices automatically connect to specified WiFi networks without manual configuration by the users.
Navigate to the Admin console, go to Devices > Chrome > Settings > Network, and add the WiFi network information.
iOS:
Similarly, WiFi configurations can be pushed to iOS devices using Google Workspace. This helps in managing WiFi connectivity for mobile devices used by employees. In the Admin console, go to Devices > Mobile & endpoints > Settings > iOS settings and configure WiFi networks to be pushed to iOS devices.

Reference:

Google Workspace Admin Help: Configure Wi-Fi settings for managed Chrome devices Google Workspace Admin Help: Set up Wi-Fi configurations for iOS devices

Reveal Solution Next Question

Free Professional Google Workspace Administrator Exam Braindumps (page: 5)

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Explanation:

Reference:

QUESTION: 16

Explanation:

Reference:

Professional Google Workspace Administrator Exam Discussions & Posts