Your company has an OU that contains your sales team and an OU that contains your market research team. The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties. The market research team also receives that email content, but they want it because it often contains interesting market analysis or competitive intelligence. Constant Contact is often used as the source of these messages. Your company also uses Constant
Contact for your own mass email marketing. You need to set email controls at the Sales OU without affecting your own outgoing email or the market research OU.
What should you do?
ACreate a blocked senders list as the Sales OU that contains the mass email sender addresses, but bypass this setting for Constant Contact emails.
BCreate a blocked senders list at the root level, and then an approved senders list at the Market Research OU, both containing the mass email sender addresses.
CCreate a blocked senders list at the Sales OU that contains the mass email sender addresses.
DCreate an approved senders list at the Market Research OU that contains the mass email sender addresses.
Your organization's Sales Department uses a generic user account ([email protected]) to manage requests. With only one employee responsible for managing the departmental account, you are tasked with providing the department with the most efficient means to allow multiple employees various levels of access and manage requests from a common email address.
What should you do?
AConfigure a Google Group as an email list.
BDelegate email access to department employees.
CConfigure a Google Group as a collaborative inbox.
DConfigure a Google Group, and set the Access Level to Announcement Only.
Your employer, a media and entertainment company, wants to provision G Suite Enterprise accounts on your domain for several world-famous celebrities.
Leadership is concerned with ensuring that these VIPs are afforded a high degree of privacy. Only a small group of senior employees must be able to look up contact information and initiate collaboration with the VIPs using G Suite services such as Docs, Chat, and Calendar. You are responsible for configuring to meet these requirements.
What should you do?
AIn the Users list, find the VIPs and turn off the User setting "Directory Sharing."
BCreate a Group for the VIPs and their handlers, and set the Group Access Level to Restricted.
CIn Directory Settings, disable Contact Sharing.
DCreate separate Custom Directories for the VIPs and regular employees.
Your company frequently hires from five to ten interns for short contract engagements and makes use of the same generically named G Suite accounts (e.g., [email protected], [email protected], [email protected]). The manager of this program wants all email to these accounts routed to the manager's mailbox account also.
What should you do?
ASetup address forwarding in each account's GMail setting menu.
BSet up recipient address mapping in GMail Advanced Settings.
CConfigure an Inbound Gateway route.
DGive the manager delegated access to the mailboxes.
A company wants to distribute iOS devices to only the employees in the Sales OU. They want to be able to do the following on these devices:
✑ Control password policies.
✑ Make corporate apps available to the users.
✑ Remotely wipe the device if it's lost or compromised
What two steps are required before configuring the device policies? (Choose two.)
ATurn on Advanced Mobile Management for the domain.
BTurn on Advanced Mobile Management for Sales OU
CSet up Device Approvals.
DSet up an Apple Push Certificate.
EDeploy Apple Certificate to every device.
Question 6
Configuring services
0
Question 7
Configuring services
Question 8
Configuring services
Question 9
Configuring services
Question 10
Data access and authentication
Question 11
Managing objects
Question 12
Data access and authentication
Question 13
Configuring services
Question 14
Configuring services
Question 15
Data access and authentication
Question 16
Data access and authentication
Question 18
Supporting business initiatives
Question 19
Data access and authentication
Question 20
Data access and authentication
Question 21
Configuring services
Question 22
Configuring services
Question 23
Supporting business initiatives
Question 24
Managing objects
Question 25
Configuring services
Question 26
Data access and authentication
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ad
Want a break from the ads?
Become a Supporter and enjoy a completely ad-free experience, plus unlock Learn Mode, Exam Mode, AstroTutor AI, and more.
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Your corporate LDAP contains the email addresses of several hundred non-employee business partners. You want to sync these contacts to G Suite so they appear in Gmail's address autocomplete for all users in the domain.
What are two options to meet this requirement? (Choose two.)
AUse the Directory API to upload a .csv file containing the contacts.
BConfigure GCDS to populate a Group with external members.
CUse the People API to upload a .csv file containing the contacts.
DDevelop a custom application to call the Domain Shared Contacts API.
EConfigure GCDS to synchronize shared contacts.
You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.
What two actions should you take? (Choose two.)
AMove the user to their own Organization Unit, and set a custom retention policy
BCreate a matter using Google Vault, and share the matter with the litigation team members.
CCreate a hold on the user's mailbox in Google Vault
DReset the user's password, and share the new password with the litigation team.
ECopy the user's data to a secondary account.
You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud
Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.
What should you do?
AUse the bulk upload with CSV feature in the G Suite Admin panel to update all Groups.
BUpdate your configuration file and resync mailing lists with Google Cloud Directory Sync.
CCreate and assign a custom admin role for all group owners so they can update settings.
DUse the Groups Settings API to update Google Groups with desired settings.
Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.
What should you do?
AEstablish a new GSuite tenant with their own admin for each region.
BCreate an OU for each country. Create an admin role and assign an admin with that role per OU.
CCreate Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.
DCreate a Team Drive per OU, and allow only country-specific administration of each folder.
Your-company.com recently started using G Suite. The CIO is happy with the deployment, but received notifications that some employees have issues with consumer Google accounts (conflict accounts). You want to put a plan in place to address this concern.
What should you do?
AUse the conflict account remove tool to remove the accounts from G Suite.
BRename the accounts to [email protected], and recreate the accounts.
CAsk users to request a new G Suite account from your local admin.
DUse the Transfer tool for unmanaged users to find the conflict accounts.
HR informs you that a user has been terminated and their account has been suspended. The user is part of a current legal investigation, and HR requires the user's email data to remain on hold. The terminated user's team is actively working on a critical project with files owned by the user. You need to ensure that the terminated user's content is appropriately kept before provisioning their license to a new user.
What two actions should you take? (Choose two.)
AExtend the legal hold on the user's email data.
BMove project files to a Team Drive or transfer ownership.
CRename the account to the new user starting next week.
DDelete the account, freeing up a G Suite License.
EAssign the terminated user account an Archive User license.
Your organization has implemented Single Sign-On (SSO) for the multiple cloud-based services it utilizes. During authentication, one service indicates that access to the SSO provider cannot be accessed due to invalid information.
What should you do?
AVerify the NameID Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
BVerify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
CVerify the Subject attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.
DVerify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.
Your company (your-company.com) just acquired a new business (new-company.com) that is running their email on-premises. It is close to their peak season, so any major changes need to be postponed. However, you need to ensure that the users at the new business can receive email addressed to them using your- company.com into their on-premises email server. You need to set up an email routing policy to accomplish this.
What steps should you take?
ASet up an Outbound Mail Gateway to route all outbound email to the on-premises server.
BSet up accounts for the new employees, and use mail forwarding rules to send to the on-premises server.
CSet up an Inbound Mail Gateway to reroute all inbound email to the on-premises server.
DSet up a Default route with split delivery to route email to the on-premises server.
The application development team has come to you requesting that a new, internal, domain-owned G Suite app be allowed to access Google Drive APIs. You are currently restricting access to all APIs using approved whitelists, per security policy. You need to grant access for this app.
What should you do?
AEnable all API access for Google Drive.
BEnable "trust domain owned apps" setting.
CAdd OAuth Client ID to Google Drive Trusted List.
DWhitelist the app in the G Suite Marketplace.
Several customers have reported receiving fake collection notices from your company. The emails were received from [email protected], which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.
What two actions should you take? (Choose two.)
AChange the password for suspected compromised account [email protected].
BConfigure a Sender Policy Framework (SPF) record for your domain.
CConfigure Domain Keys Identified Mail (DKIM) to authenticate email.
DDisable mail delegation for the [email protected] account.
EDisable "Allow users to automatically forward incoming email to another address."
Your organization is concerned with the increasing threat of phishing attacks that may impact users. Leadership has declined to force-enable 2-Step verification.
You need to apply a security measure to prevent unauthorized access to user accounts.
What should you do?
AEnable Enforce Strong Password policy.
BEnable Employee ID Login Challenge.
CDecrease the Maximum User Session Length.
DRevoke token authorizations to external applications.
With the help of a partner, you deployed G Suite last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things G Suite so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform.
What should you do?
ADevelop a cadence of regular roadmap and business reviews with your partner.
BRegularly scan the admin console and keep track of any new features you identify.
CCreate a Feature Release alert in the Alert Center to be alerted to new functionality.
DPut half of your organization on the Rapid Release Schedule to highlight differences.
The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.
What two actions should you take? (Choose two.)
AConfigure objectionable content to reject messages with the words "wire transfer."
BVerify that DMARC, DKIM, and SPF records are configured correctly for your domain.
CCreate a rule requiring secure transport for all messages regarding wire transfers.
DAdd the sender of the wire transfer email to the blocked senders list.
EEnable all admin settings in Gmail's safety > spoofing and authentication.
Your company is in the process of deploying Google Drive Enterprise for your sales organization. You have discovered that there are many unmanaged accounts across your domain. Your security team wants to manage these accounts moving forward.
What should you do?
ADisable access to all "Other Services" in the G Suite Admin Console.
BUse the Transfer Tool for unmanaged accounts to invite users into the domain.
CUse the Data Migration Service to transfer the data to a managed account.
DOpen a support ticket to have Google transfer unmanaged accounts into your domain.
Your organization syncs directory data from Active Directory to G Suite via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user's data.
What two actions should you take? (Choose two.)
AAdd the user's old email address to their account in the G Suite Admin panel.
BChange the user's primary email address in the G Suite Admin panel.
CChange the user's last name in the G Suite Admin panel.
DChange the user's primary email in Active Directory.
EChange the user's last name in Active Directory.
The Director of your Finance department has asked to be alerted if two financial auditors share any files outside the domain. You need to set an Admin Alert on
Drive Sharing.
What should you do?
ACreate a Google Group that has the two auditors as members, and then create a Drive DLP Rule that is assigned to that Group.
BCreate a Content Compliance rule that looks for outbound share notifications from those two users, and Bcc the Director on those emails.
CCreate two Drive Audit Alerts, one for each user, where the Visibility is "Shared Externally," and email them to the Director.
DCheck the Admin Console Dashboard Insights page periodically for external shares, and notify the Director of any changes.
Your organization deployed G Suite Enterprise within the last year, with the support of a partner. The deployment was conducted in three stages: Core IT, Google
Guides, and full organization. You have been tasked with developing a targeted ongoing adoption plan for your G Suite organization.
What should you do?
AUse Google Guides to deliver ad-hoc training to all of their co-workers and reports.
BUse Work Insights to gather adoption metrics and target your training exercises.
CUse Reports APIs to gather adoption metrics and Gmail APIs to deliver training content directly.
DUse a script to monitor Email attachment types and target users that aren't using Drive sharing.
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?
AUse the Drive API to modify the permissions of the Employee Compensation subfolder.
BUse the Drive API to modify the permissions of the individual files contained within the subfolder.
CMove the contents of the subfolder to a new Team Drive with only the relevant team members.
DMove the subfolder to the HR Director's MyDrive and share it with the relevant team members.
User A is a Basic License holder. User B is a Business License holder. These two users, along with many additional users, are in the same organizational unit at the same company. When User A attempts to access Drive, they receive the following error: "We are sorry, but you do not have access to Google Docs Editors.
Please contact your Organization Administrator for access." User B is not presented with the same error and accesses the service without issues.
How do you provide access to Drive for User A?
ASelect User A in the Directory, and under the Apps section, check whether Drive and Docs is disabled. If so, enable it in the User record.
BIn Apps > G Suite > Drive and Docs, select the organizational unit the users are in and enable Drive for the organizational unit.
CIn Apps > G Suite, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.
DSelect User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.
Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.
What two things should you do? (Choose two.)
ADisable Guest Mode and Public Sessions.
BEnable a Device Policy of Sign In Screen and add the employee email address.
CEnroll a 2-Factor hardware key on the device using the employee email address.
DEnable a User Policy of Multiple Sign In Access and add just the employee email address.
EEnable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.