Question 1

You need to ensure that all new employees receive their Google Workspace accounts with minimal manual intervention. You want to automatically create user accounts and populate them into an organizational unit (OU) based on their department. Additionally, you need to ensure users' profile information is updated based on their department's directory in a separate HR system. What steps should you take to automate this process effectively? (Choose 2)

Options :

A : Integrate Google Workspace with an identity provider (IdP) that supports SCIM for automated user provisioning.

B : Use the Google Workspace Admin Console to manually create user accounts for each department.

C : Use the Admin Console to create a default OU for all employees and manually update OUs for specific departments.

D : Configure the Google Cloud Directory Sync (GCDS) tool to sync user accounts and OUs from the HR system to Google Workspace.

E : Enable API access and develop a custom script to programmatically create accounts and organize them into OUs.

Answer: A,D

Question 2

You suspect a specific set of users in your organization has been using YouTube against company policy. You need to audit their activity and generate a report. Which method would provide the most accurate and detailed information?

Options :

A : Run a BigQuery analysis on all organizational traffic to find YouTube-related activities.

B : Review the Google Workspace Admin console Audit Log for YouTube access events.

C : Check individual user profiles for YouTube activity directly in their Google accounts.

D : Generate a report in the Admin console’s Reports section for user activity on YouTube.

Answer: D

Question 3

Your organization collects credit card information in customer files. You need to implement a policy for your organizations Google Drive data that prevents the accidental sharing of files that contain credit card numbers with external users. You also need to record any sharing incidents for reporting. What should you do?

Options :

A :

Create a data loss prevention (DLP) rule that uses the predefined credit card number detector, sets the action to œblock external sharing , and enables the œLog event option

B :

Enable Gmail content compliance, and create a rule to block email attachments containing credit card numbers from being sent to external recipients.

C :

Implement a third-party data loss prevention solution to integrate with Drive and provide advanced content detection capabilities.

D :

Configure a data retention policy to automatically delete files containing credit card numbers after a specified period.

Answer: A

Question 4

Your manager has asked you to enforce a context-aware access policy to restrict access to sensitive apps based on users' location and device compliance status. What is the correct sequence of steps to achieve this in the Google Workspace Admin console?

Options :

A : Turn on data loss prevention (DLP) policies, configure mobile device management (MDM), and apply the policy to sensitive apps.

B : Enable two-factor authentication, configure mobile device management (MDM), and apply context-aware access to individual user accounts.

C : Enable context-aware access in the Admin console, create an access level in the Security section, assign users to the access level, and apply the access level to a group or organizational unit.

D : Create a new access level in the Admin console, assign IP restrictions directly to users, and enforce two-step verification for all users.

Answer: C

Question 5

A team in your organization requires specific users to have "Make changes and manage sharing" access to their calendars, while others should only have "See all event details" access. How can you configure the access permissions appropriately using the Admin Console? (Choose 2)

Options :

A : Manually configure calendar sharing settings at the individual user level.

B : Set "Internal Sharing Options for Primary Calendars" to "See all event details."

C : Use "Access permissions" in Google Calendar to manually assign "Make changes and manage sharing" to specific users.

D : Enable "Share this calendar with everyone in the organization" in the Admin Console.

E : Use the Admin Console to create a group, assign appropriate permissions, and add users to the group.

Answer: C,E