You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.
What should you do?
A. Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups.
B. Update your configuration file and resync mailing lists with Google Cloud Directory Sync.
C. Create and assign a custom admin role for all group owners so they can update settings.
D. Use the Groups Settings API to update Google Groups with desired settings.
Your Chief Information Security Officer is concerned about phishing. You implemented 2 Factor Authentication and forced hardware keys as a best practice to prevent such attacks. The CISO is curious as to how many such email phishing attempts you've avoided since putting the 2FA+Hardware Keys in place last month.
Where do you find the information your CISO is interested in seeing?
A. Security > Advanced Security Settings > Phishing Attempts
B. Apps > Google Workspace > Gmail > Phishing Attempts
C. Security > Dashboard > Spam Filter: Phishing
D. Reporting > Reports > Phishing
Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as "view data for all teams" to the HR group, but it is reporting an error when accessing the application. What should you do?
A. Allocate the "view data for all teams" permission to all employees of the company.
B. Confirm that the Work Insights app is turned ON for all employees.
C. Confirm in Security > API controls > App Access Controls that Work Insights API is set to "unrestricted."
D. Confirm in Reports > BigQuery Export that the job is enabled.
Your-company.com recently bought 2500 Chrome devices and wants to distribute them to various teams globally. You decided that enterprise enrollment would be the best way to enforce company policies for managed Chrome devices. You discovered that Chrome devices currently end up in the top-level organization unit, and this needs to change to the organizational unit of the device administrator.
What should you do?
A. Change Enrollment Permissions to only allow users in this organization to re-enroll existing devices.
B. Change Enrollment Controls to Place Chrome device in user organization.
C. Change Enrollment Controls to Keep Chrome device in current location.
D. Change Enrolment Permissions to not allow users in this organization to enroll new devices.
Your company (your-company.com) just acquired a new business (new-company.com) that is running their email on-premises. It is close to their peak season, so any major changes need to be postponed. However, you need to ensure that the users at the new business can receive email addressed to them using your- company.com into their on-premises email server. You need to set up an email routing policy to accomplish this.
What steps should you take?
A. Set up an Outbound Mail Gateway to route all outbound email to the on-premises server.
B. Set up accounts for the new employees, and use mail forwarding rules to send to the on-premises server.
C. Set up an Inbound Mail Gateway to reroute all inbound email to the on-premises server.
D. Set up a Default route with split delivery to route email to the on-premises server.
In the years prior to your organization moving to Google Workspace, it was relatively common practice for users to create consumer Google accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners who were on Google Workspace.) You were able to address active employees' use of consumer accounts during the rollout, and you are now concerned about blocking former employees who could potentially still have access to those services even though they don't have access to their corporate email account.
What should you do?
A. Contact Google Enterprise Support to provide a list of all accounts on your domain(s) that access non-Google Workspace Google services and have them blocked.
B. Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed account.
C. Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts, so they can clean up the respective access control lists.
D. Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google Workspace and Other Google Services disabled.
A user reached out to the IT department about a Google Group that they own:
[email protected]. The group is receiving mail, and each message is also delivered directly to the user's Gmail inbox. The user wants to be able to reply to messages directly from Gmail and have them sent on behalf of the group, not their
individual account. Currently, their replies come from their individual account.
What would you instruct the user to do?
A. Create a new content compliance rule that matches the user's outgoing messages with the group copied, and have it modify the sender to be the group address.
B. Add the group as an email address that can be sent from within Gmail, and verify that the user has access. They can then choose to reply from the group.
C. Add the user's individual account as a delegate to the group's inbox. They can then toggle between the accounts and use the Gmail interface on behalf of the group.
D. Set the group address to be the default sender within the group's posting policies.
Your Accounts Payable department is auditing software license contracts companywide and has asked you to provide a report that shows the number of active and suspended users by organization unit, which has been set up to match the Regions and Departments within your company. You need to produce a Google Sheet that shows a count of all active user accounts and suspended user accounts by Org unit.
What should you do?
A. From the Admin Console Billing Menu, turn off auto-assign, and then click into Assigned Users and export the data to Sheets.
B. From the Admin Console Users Menu, download a list of all Users to Google Sheets, and join that with a list of ORGIDs pulled from the Reports API.
C. From the Google Workspace Reports Menu, run and download the Accounts Aggregate report, and export the data to Google Sheets.
D. From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.
Your company recently decided to use a cloud-based ticketing system for your customer care needs. You are tasked with rerouting email coming into your customer care address, [email protected] to the cloud platform's email address, your- [email protected]. As a security measure, you have mail forwarding disabled at the domain level.
What should you do?
A. Create a mail contact in the Google Workspace directory that has an email address of your- [email protected]
B. Create a rule to forward mail in the [email protected] mailbox to your- [email protected]
C. Create a recipient map in the Google Workspace Admin console that maps [email protected] to [email protected]
D. Create a content compliance rule in the Google Workspace Admin console to change route to your- [email protected]
Your company recently migrated to Google Workspace and wants to deploy a commonly used third-party app to all of finance. Your OU structure in Google Workspace is broken down by department. You need to ensure that the correct users get this app.
What should you do?
A. For the Finance OU, enable the third-party app in SAML apps.
B. For the Finance OU, enable the third-party app in Marketplace Apps.
C. At the root level, disable the third-party app. For the Finance OU, allow users to install any application from the Google Workspace Marketplace.
D. At the root level, disable the third-party app. For the Finance OU, allow users to install only whitelisted apps from the Google Workspace Marketplace.
