AGWA practice questions 1–10

1. Question 1 · 56 in bank

   Your company is undergoing a regulatory compliance audit. As part of the audit, you are required to demonstrate that you can preserve all electronic communications related to a specific project for a potential legal discovery process. You need to configure Google Vault to accomplish this goal. What should you do?

   • AUse the security investigation report to show Vault log events.
   • BUse the search and export functionality to identify all relevant communications within the project timeframe.
   • CCreate a matter and a hold on all project-related data sources such as Email, Chat, and Drive within Google Workspace.
   • DCreate a custom retention policy for the project data. Ensure that the policy covers the required retention period.

   Show answer

   Answer: C

   Next question

2. Question 2 · 56 in bank

   Several employees from your finance department are collaborating on a long-term, multi-phase project. You need to create a confidential group for this project as quickly as possible. You also want to minimize management overhead. What should you do?

   • ACreate a Google Group by using Google Cloud Directory Sync (GCDS) to automatically sync the members.
   • BCreate a dynamic group and define the Department user attribute as a condition for membership with the value as the finance department.
   • CCreate a Google Group and update the settings to allow anyone in the organization to join the group.
   • DCreate a Google Group and appoint a group admin to manage the membership of this group.

   Show answer

   Answer: D

   Next question

3. Question 3 · 56 in bank

   Today your company signed up for Google Workspace Business Starter with an existing domain name. You want to add team members and manage their access to email and other services. However, you are unable to create new user accounts or change user settings. You need to fix this problem. What should you do?

   • ARun the Transfer tool to bring unmanaged users to your Workspace account.
   • BCheck domain ownership in the DNS settings.
   • CWait 24 hours after signing up for the features to become active.
   • DUpgrade to a Google Workspace Enterprise edition.

   Show answer

   Answer: B

   Next question

4. Question 4 · 56 in bank

   A team of temporary employees left your organization after completing a shared project. Per company policy, you need to disable their Google Workspace accounts while preserving all project data and related communications in Google Vault for a minimum of two years. You want to comply with this policy while minimizing cost. What should you do?

   • APurchase and assign Archived User licenses to the former employees.
   • BTransfer the former employees’ files and data to active user accounts. Delete the former employees’ Workspace accounts.
   • CPurchase additional user licenses and suspend the former employees’ accounts.
   • DMove the former employees to their own organizational unit (OU) and disable access to Google services for that OU.

   Show answer

   Answer: A

   Next question

5. Question 5 · 56 in bank

   The legal department at your organization is working on a time-critical merger and acquisition (M&A) deal. They urgently require access to specific email communications from an employee who is currently on leave. The organization’s current retention policy is set to indefinite. You need to retrieve the required emails for the legal department in a manner that ensures data privacy. What should you do?

   • AInstruct the IT department to directly access and forward the relevant emails to the legal department.
   • BTemporarily grant the legal department access to the employee’s email account with a restricted scope that is limited to the M&A-related emails.
   • CAsk a colleague with delegate access to the employee's mailbox to identify and forward the relevant emails to the legal department.
   • DUse Google Vault to create a matter specific to the M&A deal. Search for relevant emails within the employee's mailbox. Export and share relevant emails with your legal department.

   Show answer

   Answer: D

   Next question

6. Question 6 · 56 in bank

   Your company distributes an internal newsletter that contains sensitive information to all employees by email. You’ve noticed unauthorized forwarding of this newsletter to external addresses, potentially leading to data leaks. To prevent this, you need to implement a solution that automatically detects and blocks such forwarding while allowing legitimate internal sharing. What should you do?

   • AAdd a banner to the newsletter that warns users that external sharing is prohibited.
   • BCreate a Gmail content compliance rule that targets the internal newsletter, identifying instances of external forwarding. Configure the rule to reject the message when such forwarding is detected
   • CDevelop an Apps Script project by using the Gmail API to scan sent emails for the newsletter content and external recipients. Automatically revoke access for violating users.
   • DCreate a content compliance rule to modify the newsletter subject line, adding a warning against external forwarding.

   Show answer

   Answer: B

   Next question

7. Question 7 · 56 in bank

   Your organization has hired temporary employees to work on a sensitive internal project. You need to ensure that the sensitive project data in Google Drive is limited to only internal domain sharing. You do not want to be overly restrictive. What should you do?

   • AConfigure the Drive sharing options for the domain to internal only.
   • BRestrict the Drive sharing options for the domain to allowlisted domains.
   • CCreate a Drive DLP rule, and use the sensitive internal Project name as the detector.
   • DTurn off the Drive sharing setting from the Team dashboard.

   Show answer

   Answer: C

   Next question

8. Question 8 · 56 in bank

   Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company’s human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?

   • ASearch the sender’s email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.
   • BSearch for the sender’s email address by using the security investigation tool. Mark the messages as phishing. Add the sender’s email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
   • CCollect a list of users who received the messages. Search the recipients’ email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender’s email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.
   • DSearch for the sender’s email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.

   Show answer

   Answer: D

   Next question

9. Question 9 · 56 in bank

   Your organization’s users are reporting that a large volume of legitimate emails are being misidentified as spam in Gmail. You want to troubleshoot this problem while following Google-recommended practices. What should you do?

   • AAdjust the organization’s mail content compliance settings in the Admin console.
   • BAdvise users to individually allowlist senders.
   • CDisable spam filtering for all users.
   • DContact Google Workspace support and report a suspected system-wide spam filter malfunction.

   Show answer

   Answer: A

   Next question

10. Question 10 · 56 in bank

    Your organization’s security team has published a list of vetted third-party apps and extensions that can be used by employees. All other apps are prohibited unless a business case is presented and approved. The Chrome Web Store policy applied at the top-level organization allows all apps and extensions with an admin blocklist. You need to disable any unapproved apps that have already been installed and prevent employees from installing unapproved apps. What should you do?

    • AChange the Chrome Web Store allow/block mode setting to allow all apps, admin manages blocklist, In the App access control card, block any existing web app that is not on the security team’s vetted list.
    • BChange the Chrome Web Store allow/block mode setting to block all apps, admin manages allowlist. Add the apps on the security team’s vetted list to the allowlist.
    • CDisable Extensions and Chrome packaged apps as Allowed types of apps and extensions for the top-level organizational unit. Selectively enable the appropriate extension types for each suborganization
    • DDisable the Chrome Web Store service for the top-level organizational unit. Enable the Chrome Web Store service for organizations that require Chrome apps and extensions.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AGWA practice, question 1. 56 questions available.