2023 Google-Workspace-Administrator Premium Files Test pdf - Free Dumps Collection
Get ready to pass the Google-Workspace-Administrator Exam right now using our Workspace Administrator Exam Package
NEW QUESTION 41
Your business partner requests that a new custom cloud application be set up to log in without having separate credentials.
What is your business partner required to provide in order to proceed?
- A. Service provider certificate
- B. Identity Provider URL
- C. Service provider logout URL
- D. Service provider ACS URL
Answer: D
Explanation:
Reference:
we need ACS URL for adding custom SAML App , using Google as the Idp
NEW QUESTION 42
Your company wants to provide secure access for its employees. The Chief Information Security Officer disabled peripheral access to devices, but wants to enable 2-Step verification. You need to provide secure access to the applications using Google Workspace.
What should you do?
- A. Enable authentication via the Google Authenticator.
- B. Enable additional security verification via email.
- C. Configure USB Yubikeys for all users.
- D. Deploy browser or device certificates via Google Workspace.
Answer: A
Explanation:
Enable authentication via the Google Authenticator is the only secure option since USB device aren't usable. Google Authenticator is the most secure option after physical key.
NEW QUESTION 43
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. SAML audit log
- B. OAuth Token audit log
- C. Admin audit log
- D. Drive usage audit log
Answer: B
NEW QUESTION 44
Your organization is on Google Workspace Enterprise and allows for external sharing of Google Drive files to facilitate collaboration with other Google Workspace customers. Recently you have had several incidents of files and folders being broadly shared with external users and groups. Your chief security officer needs data on the scope of external sharing and ongoing alerting so that external access does not have to be disabled.
What two actions should you take to support the chief security officer's request? (Choose two.)
- A. Review who has viewed files using the Google Drive Activity Dashboard.
- B. Create an alert from Drive Audit reports to notify of external file sharing.
- C. Automatically block external sharing using DLP rules.
- D. Create a custom Dashboard for external sharing in the Security Investigation Tool.
- E. Review total external sharing in the Aggregate Reports section.
Answer: B,D
Explanation:
https://support.google.com/a/answer/7584076?hl=en&ref_topic=7563358
NEW QUESTION 45
You recently started an engagement with an organization that is also using Google Workspace. The engagement will involve highly sensitive data, and the data needs to be protected from being shared with unauthorized parties both internally and externally. You need to ensure that this data is properly secured.
Which configuration should you implement?
- A. Provision accounts within your domain for the external users, and turn off external sharing for that Org.
- B. Turn on external sharing with whitelisted domains, and add the external organization to the whitelist.
- C. Create a Team Drive for this engagement, and limit the memberships and sharing settings.
- D. Configure the Drive DLP rules to prevent the sharing of PII and PHI outside of your domain.
Answer: C
Explanation:
https://support.google.com/a/users/answer/9310352#1.1
NEW QUESTION 46
A subset of users from the finance and human resources (HR) teams need to share documents with an external vendor. However, external content sharing is prohibited for the entire finance team. What would be the most secure method to enable external sharing for this set of users?
- A. Move all users from the finance org unit to the HR org unit.
- B. Download and attach the documents to a Gmail message, and send them to the external vendor.
- C. Create a group with the finance and HR users who need to share externally.
- D. Enable 'Visitor Sharing' for the entire finance org unit.
Answer: C
NEW QUESTION 47
A user is reporting that external, inbound messages from known senders are repeatedly being incorrectly classified as spam. What steps should the admin take to prevent this behavior in the future?
- A. Instruct the user to add the senders to their contacts.
- B. Modify the SPF record for your internal domain to include the IPs of the external user's mail servers.
- C. Update the spam settings in the Admin Console to be less aggressive.
- D. Add the sender's domain to an allowlist via approved senders in the Admin Console.
Answer: D
Explanation:
https://support.google.com/a/answer/60752?hl=en#:~:text=Approved%20senders%20list%E2%80%94,settings%20in%20Google%20Workspace.
NEW QUESTION 48
Your company recently migrated to Google Workspace and wants to deploy a commonly used third-party app to all of finance. Your OU structure in Google Workspace is broken down by department. You need to ensure that the correct users get this app.
What should you do?
- A. For the Finance OU, enable the third-party app in Marketplace Apps.
- B. At the root level, disable the third-party app. For the Finance OU, allow users to install only whitelisted apps from the Google Workspace Marketplace.
- C. For the Finance OU, enable the third-party app in SAML apps.
- D. At the root level, disable the third-party app. For the Finance OU, allow users to install any application from the Google Workspace Marketplace.
Answer: A
NEW QUESTION 49
An end user informs you that they are having issues receiving mail from a specific sender that is external to your organization. You believe the issue may be caused by the external entity's SPF record being incorrectly configured. Which troubleshooting step allows you to examine the full message headers for the offending message to determine why the messages are not being delivered?
- A. Use the Email Log Search to directly review the message headers.
- B. Use the Security Investigation Tool to review the message headers.
- C. Use the Postmaster Tools API to pull the message headers.
- D. Perform an SPF record check on the domain to determine whether their SPF record is valid.
Answer: B
Explanation:
https://support.google.com/a/answer/9300435?hl=en#zippy=%2Cstep-view-the-email-message-and-take-action%2Cstep-provide-justification-to-view-messages%2Cstep-get-started-with-your-investigation
NEW QUESTION 50
The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in. What else can you do to increase your organization's defense-in-depth strategy?
- A. Use Mobile device management geo-fencing to prevent malicious actors from using these stolen credentials.
- B. Implement an IP block on the malicious user's IPs under Security Settings in the Admin Console.
- C. Enforce higher complexity passwords by rolling it out to the affected users.
- D. Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.
Answer: D
Explanation:
https://support.google.com/a/answer/9262032?hl=en#zippy=%2Cdefine-access-levelsbasic-mode:~:text=This%20example%20shows%20an%20access%20level%20called%20%E2%80%9Ccorp_access.%E2%80%9D%20If%20%E2%80%9Ccorp_access%E2%80%9D%20is%20applied%20to%20Gmail%2C%20users%20can%20access%20Gmail%20only%20from%20an%20encrypted%20and%20company%2Downed%20device%2C%20and%20only%20from%20the%20US%20or%20Canada.
NEW QUESTION 51
Your company has been engaged in a lawsuit, and the legal department has been asked to discover and hold all email for two specific users. Additionally, they have been asked to discover and hold any email referencing "Secret Project 123." What steps should you take to satisfy this request?
- A. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and enter: user1@your- company.com AND [email protected]. Set the search terms to: secret AND project AND 123. Save.
- B. Create a Matter and a Hold. Set the Hold to Gmail, set it to the top level Organization, and set the search terms to "secret project 123." Create a second Hold. Set the second Hold to Gmail, set it to Accounts, and enter: user1 @your-company.com, [email protected]. Save.
- C. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to secret OR project OR 123. Save.
- D. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to: (secret project 123). Save.
Answer: B
Explanation:
The correct way to search for the esact term is in quotes ("project 123" and not (project 123)). Ref: https://support.google.com/vault/answer/2474474?hl=en. Also, afeter doing this ytou must create the retention rule using comas to separate user from user.
NEW QUESTION 52
After migrating to Google Workspace, your legal team requests access to search all email and create litigation holds for employees who are involved with active litigation. You need to help the legal team meet this request.
What should you do?
- A. Create a matter in Google Vault, and share with the legal team.
- B. Create a custom role with Google Vault access, and add the legal team.
- C. Add the legal team to the User Management Admin system role.
- D. Add the legal team to the Google Vault Google Group.
Answer: B
NEW QUESTION 53
You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?
- A. Force TLS for your domain.
- B. Train users to click on Not Spam button for emails.
- C. Add all users of your domain to an approved sender list.
- D. Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.
Answer: C
Explanation:
Approved senders list-Approved senders are trusted users that send email to your organization. Create an address list of approved senders so messages from these users bypass Gmail's spam filters, and recipients can decide whether they are spam or not. Create the list with individual email addresses, or by adding an entire domain.
https://support.google.com/a/answer/60752?hl=en#:~:text=Approved%20senders%20list%E2%80%94,settings%20in%20Google%20Workspace.
NEW QUESTION 54
Your organization recently implemented context-aware access policies for Google Drive to allow users to access Drive only from corporate managed desktops. Unfortunately, some users can still access Drive from non-corporate managed machines. What preliminary checks should you perform to find out why the Context-Aware Access policy is not working as intended? (Choose two.)
- A. Confirm that the user has at least a Google Workspace Business license.
- B. Confirm that the user has a Google Workspace Enterprise Plus license.
- C. Delete and recreate a new Context-Aware Access device policy.
- D. Check whether Endpoint Verification is installed on users' desktops.
- E. Check whether device policy application is installed on users' devices.
Answer: B,D
Explanation:
https://support.google.com/a/answer/9275380#licenses:~:text=Context%2DAware%20Access-,Control%20access%20to%20apps%20based%20on%20user%20%26%20device%20context,context%2C%20such%20as%20whether%20their%20device%20complies%20with%20your%20IT%20policy.,-Context%2DAware%20Access
https://support.google.com/a/answer/9275380?hl=en&fl=1
https://support.google.com/a/answer/9007320?hl=en&fl=1
NEW QUESTION 55
As a Workspace Administrator, you want to keep an inventory of the computers and mobile devices your company owns in order to track details such as device type and who the device is assigned to. How should you add the devices to the company-owned inventory?
- A. Download the company owned inventory template CSV file from the admin panel, enter the Device OS, serial number and upload it back to the company owned inventory in the admin panel.
- B. Download the company owned inventory template CSV file from the admin panel, enter the asset tag of the devices, and upload it back to the company owned inventory in the admin panel.
- C. Download the company owned inventory template CSV file from the admin panel, enter the serial number of the devices, and upload it back to the company owned inventory in the admin panel.
- D. Download the company owned inventory template CSV file from the admin panel, enter the Device OS, asset tag and upload it back to the company owned inventory in the admin panel.
Answer: C
Explanation:
https://support.google.com/a/answer/7129612?hl=en#zippy=%2Cassigning-devices%2Cadd-android-devices-for-the-most-management-features:~:text=Add%20devices%20to,and%20upload%20status.
NEW QUESTION 56
Your company is in the process of deploying Google Drive Enterprise for your sales organization. You have discovered that there are many unmanaged accounts across your domain. Your security team wants to manage these accounts moving forward.
What should you do?
- A. Disable access to all "Other Services" in the Google Workspace Admin Console.
- B. Use the Transfer Tool for unmanaged accounts to invite users into the domain.
- C. Open a support ticket to have Google transfer unmanaged accounts into your domain.
- D. Use the Data Migration Service to transfer the data to a managed account.
Answer: B
NEW QUESTION 57
The CEO of your company heard about new security and collaboration features and wants to know how to stay up to date. You are responsible for testing and staying up to date with new features, and have been asked to prepare a presentation for management.
What should you do?
- A. Subscribe to the Google Workspace release calendar, and Join the Google Cloud Connect Community.
- B. Change Google Workspace release track to: Rapid Release for faster access to new features.
- C. Create a support ticket for the Google Workspace roadmap, and ask to enable the latest release of Google Workspace.
- D. Download the Google Workspace roadmap, and work together with a deployment specialist for new features.
Answer: A
NEW QUESTION 58
The Director of your Finance department has asked to be alerted if two financial auditors share any files outside the domain. You need to set an Admin Alert on Drive Sharing.
What should you do?
- A. Check the Admin Console Dashboard Insights page periodically for external shares, and notify the Director of any changes.
- B. Create a Content Compliance rule that looks for outbound share notifications from those two users, and Bcc the Director on those emails.
- C. Create a Google Group that has the two auditors as members, and then create a Drive DLP Rule that is assigned to that Group.
- D. Create two Drive Audit Alerts, one for each user, where the Visibility is "Shared Externally," and email them to the Director.
Answer: D
Explanation:
https://support.google.com/a/answer/4579696?hl=en
https://support.google.com/a/answer/9725685
NEW QUESTION 59
On which two platforms can you push WiFi connection information with Google Workspace? (Choose two.)
- A. Windows
- B. Linux
- C. Chrome OS
- D. Mac OS
- E. iOS
Answer: C,E
NEW QUESTION 60
What action should be taken to configure alerting related to phishing attacks?
- A. Set up an email settings changed alert.
- B. Set up a Token audit log event alert.
- C. Set up an Admin audit log event alert.
- D. Set up a suspicious login event alert.
Answer: D
NEW QUESTION 61
Your organization has noticed several incidents of accidental oversharing inside the organization. Specifically, several users have shared sensitive Google Drive items with the entire organization by clicking 'anyone in this group with this link can view'. You have been asked by senior management to help users share more appropriately and also to prevent accidental oversharing to the entire organization. How would you best accomplish this?
- A. Determine sharing boundaries for users that work with sensitive information, and then implement target audiences.
- B. Create groups, add users accordingly, and educate users on how to share to specific groups of people.
- C. Disable sharing to the entire organization so that users must consciously add every person who needs access.
- D. Temporarily disable the Google Drive service for individuals who continually overshare.
Answer: A
Explanation:
https://support.google.com/a/answer/9934697?hl=en#zippy=:~:text=Why%20use%20target,for%20broad%20sharing.
NEW QUESTION 62
Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.
What should you do?
- A. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain
- B. Access the Security Menu> API Reference > disable all API Access.
- C. Access the Security Menu > API Permissions > choose Drive and Disable All Access.
- D. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.
Answer: D
NEW QUESTION 63
You have configured your Google Workspace account on the scheduled release track to provide additional time to prepare for new product releases and determine how they will impact your users. There are some new features on the latest roadmap that your director needs you to test as soon as they become generally available without changing the release track for the entire organization.
What should you do?
- A. Establish a separate Dev environment, and set it to rapid release.
- B. Ask Google for a demo account with beta access to the new features.
- C. Create a new Google Group with test users and enable the rapid release track.
- D. Create a new OU and tum on the rapid release track just for this OU.
Answer: A
Explanation:
Tip for large organizations: Select the Scheduled Release track for your production account. Then set up Rapid Release on a test account to try new features before they're available to your users. https://support.google.com/a/answer/172177
NEW QUESTION 64
What steps does an administrator need to take to enforce TLS with a particular domain?
- A. Enable email safety features with the receiving domain.
- B. Set up DKIM authentication with the receiving domain.
- C. Set up secure transport compliance with the receiving domain.
- D. Configure an alternate secure route with the receiving domain.
Answer: C
Explanation:
https://support.google.com/a/answer/2520500?hl=en#:~:text=Add%C2%A0the%20Secure%20transport%20(TLS)%20compliance%C2%A0setting%C2%A0to%20always%20use%20TLS%20for%20email%20sent%20to%20and%20from%20domains%20and%20addresses%20that%20you%20specify.
NEW QUESTION 65
You are in charge of automating and configuring Google Cloud Directory Sync for your organization. Within the config manager, how can you proactively prevent applying widespread deletions within your Workspace environment if your company's LDAP undergoes a substantial modification?
- A. Configure limits for the maximum number of deletions on each synchronization.
- B. Specify the minimum and maximum number of objects to synchronize in each configuration item.
- C. Manually run Google Cloud Directory Sync only after performing a simulated sync.
- D. Configure the tool to delete users only when run from the config manager.
Answer: A
Explanation:
You can use limits with Google Cloud Directory Sync (GCDS) to set the maximum number of deletions permitted on each simulation or synchronization. If it reaches this limit, GCDS stops and does not sync any changes. https://support.google.com/a/answer/9520714?fl=1
NEW QUESTION 66
......
Google Google-Workspace-Administrator Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
| Topic 12 |
|
| Topic 13 |
|
| Topic 14 |
|
Master 2023 Latest The Questions Workspace Administrator and Pass Google-Workspace-Administrator Real Exam!: https://www.trainingdumps.com/Google-Workspace-Administrator_exam-valid-dumps.html
A fully updated 2023 Google-Workspace-Administrator Exam Dumps exam guide from training expert TrainingDumps: https://drive.google.com/open?id=1Ydk16kgpnovtWDda02XscHOPAu1Wbknq
