PGWA practice questions 111–120

1. Question 111 · 151 in bank

   As the Workspace Administrator, you have been asked to enable the help desk team to share incoming support requests from end users. The help desk team has ten users who need to respond to support requests that are sent to a help desk email address. The users must be able to respond by email and assign ownership of tickets. Finally, the help desk team is highly mobile and will need to manage help desk tickets from their mobile devices. How would you provide this functionality for the help desk team?

   • AConfigure a Google Group as a collaborative inbox, and assign the required Groups permissions to the help desk team members.
   • BCreate a help desk Workspace mail account, and set the help desk team as mail delegates to the help desk account.
   • CCreate the help desk group as a Q&A Group, and add the "Manager" role to the help desk team users.
   • DIn Google Drive, create a help desk request form, and give the help desk team the ability to view the inbound requests.

   Show answer

   Answer: A

   Explanation

   A. Configure a Google Group as a collaborative inbox, and assign the required Groups permissions to the help desk team members.

   Source: Adapted from community discussion — virat_kohli

   Next question

2. Question 112 · 151 in bank

   Select 2

   Your company is using Google Workspace Business Plus edition, and the security team has reported several unsuccessful attempts to sign in to your Google Workspace domain from countries where you have no local employees. The affected accounts are from several executives in the main office. You are asked to take measures to mitigate this security risk. Although budget is not a concern, your company prefers a minimal financial outlay to fix the issue, which you are tasked with managing. Which two solutions would help you mitigate the risk at minimal cost? (Choose two.)

   • ADeploy 2-Step Verification for all users who have security keys.
   • BDeploy Google Cloud Armor on a dedicated project, and create a rule to allow access to Google Workspace only from specific locations.
   • CUpgrade to Google Workspace Enterprise Plus for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.
   • DSubscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.
   • EFor all executives, create new accounts with random characters to match Google best practices, migrate data from the former accounts, and then delete them.

   Show answer

   Answer: AD

   Explanation

   Answers are A & D Cloud Identity Premium is almost the cheapest option to enable Context-Aware Access on any Google Cloud license. (almost because Ent. Standard is cheaper than Business Plus + CIP) B. Google Cloud Armor is a network security service that provides defenses against DDoS. C. Google Workspace Enterprise Plus is too fancy. Enterprise Standard would have been a better choice with same level of features than Business Plus (Vault, Adv Mobile management, DLP and Context-Aware access) E. Accounts with random characters is non-sense and doesn't match any Google best practices

   Source: Adapted from community discussion — jcloud965

   Next question

3. Question 113 · 151 in bank

   As a Google Workspace administrator for your organization, you are tasked with identifying how users are reporting their messages – whether spam, not spam, or phishing – for a specific time period. How do you find this information?

   • AOpen Admin Console > Security > Dashboard > User Reports.
   • BOpen Admin Console > Security > Dashboard > Spam Filter- Phishing.
   • CUse Reports API to query user Gmail activity.
   • DOpen Admin Console > Reporting > Email Log Search.

   Show answer

   Answer: A

   Explanation

   https://support.google.com/a/answer/7490898?hl=en User reports allows you to view how users are marking their messages--whether spam, not spam, or phishing--for a specific time period.

   Source: Adapted from community discussion — Bardapapa

   References

   • support.google.com documentation

   Next question

4. Question 114 · 151 in bank

   The nature of your organization's business makes your users susceptible to malicious email attachments. How should you implement a scan of all incoming email attachments?

   • AConfigure a safety rule to protect against encrypted attachments from untrusted senders.
   • BConfigure a safety rule to protect against attachments with scripts from untrusted senders.
   • CIn the security sandbox section, enable virtual execution of attachments for the targeted OU.
   • DIn the security sandbox section, enable virtual execution of attachments for the entire organization.

   Show answer

   Answer: D

   Explanation

   D please. The question said the nature of your organization...so for the entire organization works because everyone in the organization gets targeted...You're welcome

   Source: Adapted from community discussion — [Removed]

   Next question

5. Question 115 · 151 in bank

   You have enabled Automatic Room Replacement for your calendar resources, but it is not working for any instances of a conflict booking. What could be the issue?

   • AAutomatic Room Replacement does not work on recurring events.
   • BThis feature requires calendar event owners to have the Buildings and resources administrator privilege.
   • CThe calendar resources do not have the Resource Category configured as CONFERENCE_ROOM.
   • DThe events have more than 20 attendees.

   Show answer

   Answer: C

   Explanation

   Use automatic room replacement Automatic room replacement is on by default, but it only replaces rooms when both of the following conditions are met: - Rooms are defined as structured resources and classified as meeting spaces. - Users have their work locations set, and rooms are structured resources in their buildings. https://support.google.com/a/answer/9682138?hl=en

   Source: Adapted from community discussion — Nico282

   References

   • support.google.com documentation

   Next question

6. Question 116 · 151 in bank

   A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?

   • ADetermine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.
   • BImmediately suspend the user's account, search for all the email messages in question, and forward to the legal team.
   • CImmediately suspend the user's account, assign an archived user license, and export data.
   • DSuspend the user's account, search all associated users data in Google Vault, and export the data.

   Show answer

   Answer: A

   Next question

7. Question 117 · 151 in bank

   A user has reported that they did not receive an email from one of their normal correspondents. What information do you need to collect from the user to investigate the cause of the issue?

   • AThe email address of the sender and the subject and date/time of the missing message.
   • BThe type of device the individual is using, including the OS version, browser, and browser version.
   • CThe sender's domain so you can review their SPF and DKIM configuration.
   • DThe sender's IP address, mail client, and mail platform.

   Show answer

   Answer: A

   Next question

8. Question 118 · 151 in bank

   You are configuring a shared drive for the financial department of your organization. The financial team wants to allow members of the shared drive to add, edit, and move documents into the shared drive. It's important that the same users cannot remove or delete files. How can you configure access for these users to match the team's request?

   • ASet up the shared drive, and add the users as Content Managers of the drive.
   • BSet up the shared drive, and add the users as editors of the drive.
   • CSet up the shared drive, and add the users as Contributors of the drive.
   • DSet up the shared drive, and add the users as Managers of the drive.

   Show answer

   Answer: C

   References

   • support.google.com documentation
   • support.google.com documentation

   Next question

9. Question 119 · 151 in bank

   As the Workspace Administrator, you have been asked to delete a temporary Google Workspace user account in the marketing department. This user has created Drive documents in My Documents that the marketing manager wants to keep after the user is gone and removed from Workspace. The data should be visible only to the marketing manager. As the Workspace Administrator, what should you do to preserve this user's Drive data?

   • AIn the user deletion process, select “Transfer” in the data in other apps section and add the manager's email address.
   • BUse Google Vault to set a retention period on the OU where the users reside.
   • CBefore deleting the user, add the user to the marketing shared drive as a contributor and move the documents into the new location.
   • DAsk the user to create a folder under MyDrive, move the documents to be shared, and then share that folder with the marketing team manager.

   Show answer

   Answer: A

   Explanation

   I will also vote for A but the question is confusing because it says that the user created Drive documents in My Documents but we have to assume the My Documents folder is inside his Drive lol

   Source: Adapted from community discussion — jaxclain

   Next question

10. Question 120 · 151 in bank

    Your organization has decided to enforce 2-Step Verification for a subset of users. Some of these users are now locked out of their accounts because they did not set up 2-Step Verification by the enforcement date. What corrective action should you take to allow the users to sign in again?

    • ADisable 2-Step Verification per organizational unit so the affected users can sign in.
    • BMove the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.
    • CDisable 2-Step Verification organization-wide so all users can successfully sign in.
    • DMove the affected users into the exception group permanently so they do not have to use 2-Step Verification going forward.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PGWA practice, question 111. 151 questions available.