Question 1

Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your companys human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?

Options :

A :

Search the senders email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.

B :

Search for the senders email address by using the security investigation tool. Mark the messages as phishing. Add the senders email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.

C :

Collect a list of users who received the messages. Search the recipients email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the senders email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.

D :

Search for the senders email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.

Answer: B

Question 2

The IT security team has asked you to configure a policy that prevents external sharing of files containing sensitive keywords, such as "confidential" or "SSN." What is the best way to implement this policy?

Options :

A : Create a DLP (Data Loss Prevention) rule in the Google Workspace Admin console to detect and block external sharing of files with sensitive content.

B : Use the "Sharing permissions" setting in Google Drive to block all file sharing.

C : Use the Google Vault to search and delete files containing sensitive keywords.

D : Enable "External Sharing" restriction in Google Drive for all users.

Answer: A

Question 3

Your organization uses a third-party identity provider (IdP) to manage user authentication and authorization. You need to enable single sign-on (SSO) for Google Workspace and ensure users are authenticated via the IdP. Which two steps must you complete to successfully configure SSO in Google Workspace? (Choose 2)

Options :

A : Disable API access for Google Workspace to ensure all authentication is routed through the IdP.

B : Configure the Google Workspace SAML settings to match the attributes sent by the IdP, such as NameID and email.

C : Enable "Allow users to change their passwords" in the Security settings of the Google Admin console.

D : Upload the IdP-s metadata file or provide the IdP-s SSO URL to the Google Workspace Admin console.

Answer: B,D

Question 4

A user reports that they accidentally deleted a shared folder from their Google Drive containing important project files. They need the folder and its contents restored immediately, including all sharing permissions and comments. The deletion occurred 20 days ago. How should you proceed?

Options :

A : Guide the user to their Drive Trash and ask them to restore the folder manually.

B : Search for the user in the Google Workspace Admin console. Use the Restore Data option, specify the date range, select Drive, and restore the files.

C : Open a ticket with Google Support to request a full recovery of the deleted folder.

D : Enable Drive File Stream for the user, allowing them to sync their data and recover the folder from their local device.

Answer: B

Question 5

Your IT department maintains a shared drive for internal training materials. A contractor is hired to update these materials and requires Editor access to some files in the shared drive. The organization’s external sharing policy is set to "Restricted." What action should you take?

Options :

A : Enable external sharing for the shared drive and grant the contractor Editor access only to the required files.

B : Change the organization-s external sharing setting to "Anyone with the link" temporarily for the contractor.

C : Add the contractor to the IT department’s shared drive with the Editor role.

D : Move the files the contractor needs to edit to their personal Google Drive and grant them Editor access there.

Answer: A