QuestionQ61

Managing security policies and access controls

An increase in phishing emails includes links to malicious files hosted on external Google Drives. These files often impersonate legitimate documents and deceive users into granting access to their accounts.

You need to stop users from accessing these malicious external Drive files while still allowing access to legitimate external files. What should you do?

Choose two
  • A Enforce stricter password policies.
  • B Conduct regular security awareness training to educate users.
  • C Create a Drive trust rule that blocks all external domains except for a pre-approved list of trusted partners.
  • D Deploy advanced malware detection software on all user devices to scan and block malicious files.
  • E Implement two-factor authentication for all users.
Explanation

Drive trust rules can restrict which external users or domains may share files with internal users, allowing collaboration with approved partners while blocking untrusted sources. Regular security-awareness training helps users identify phishing links, impersonated documents, and deceptive access-consent requests before they grant account access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!