PGWA practice questions 11–20

1. Question 11 · 151 in bank

   You work at a large global holding firm with multiple companies that are united under one Google Workspace deployment. You must ensure that employees can only access documents at the company in which they are employed. What should you do?

   • ACreate a User group for each company and change Google Drive sharing settings to block external sharing.
   • BCreate an organizational unit (OU) for each company and disable file sharing.
   • CSet up data loss prevention (DLP) rules to prevent specific documents from being shared.
   • DSet up Google Drive trust rules to prevent access to documents from individual companies.

   Show answer

   Answer: D

   Explanation

   Not A because you are blocking all external sharing that you may need with, for example, send files to external auditors. Not B because you wouldn't be able to share neither internally nor externally. Not C because DLP rules are typically content-specific and not designed to manage access control based on organizational units (OUs) or group structures. I choose D, although Google Drive trust rules need OUs or groups to define the scope of access control.

   Source: Adapted from community discussion — apb98

   Next question

2. Question 12 · 151 in bank

   An employee at your organization is experiencing video call issues in Google Meet, and they were unable to resolve the issues by themselves. You need to troubleshoot the issue. What should you do first?

   • AView the Meet quality report of the employee.
   • BAsk your network administrator to add the dedicated Meet IP address range for your users.
   • CRestart the device of the employee.
   • DCheck the Meet settings of the employee.

   Show answer

   Answer: A

   Next question

3. Question 13 · 151 in bank

   Your organization's information security team has asked you to determine and remediate if a user (user1@example.com) has shared any sensitive documents outside of your organization. How would you audit access to documents that the user shared inappropriately?

   • AOpen Security Investigation Tool-> Drive Log Events. Add two conditions: Visibility Is External, and Actor Is user1@example.com.
   • BHave the super administrator use the Security API to audit Drive access.
   • CAs a super administrator, change the access on externally shared Drive files manually under user1@example.com.
   • DOpen Security Dashboard-> File Exposure Report-> Export to Sheet, and filter for user1@example.com.

   Show answer

   Answer: A

   Explanation

   Option C is not correct lol, read the question again... "HOW would you audit access to documents", for this purpose GW has a feature called Investigation Tool... not everyone knows how to use it but you can for sure get the report, also recently GW updated the Audits and now its merged Audits / Investigation tool so you already have 2 reasons why option A is correct lol, why would you pick option C.. is not asking you to change the external access.. is asking you to Audit.. here is the documentation: https://support.google.com/a/answer/9300435?hl=en Also I have worked as a GW Admin and Deployment for about 7 years so I know perfectly that the Investigation tool can be used for this.

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation
   • support.google.com documentation

   Next question

4. Question 14 · 151 in bank

   Your organization is migrating to Google Workspace and wants to improve how newly created files are classified. You must find a scalable solution to improve security and transparency on how to handle sensitive files. What should you do?

   • ASet data loss prevention (DLP) policies to label data automatically, disable label locking, and educate users.
   • BCreate classification labels, enable automatic classification, and educate users.
   • CMigrate data to Google Workspace, map classifications, and migrate with the Drive Labels API.
   • DIntegrate with the Cloud DLP API, map identifiers and classifications, install the Google Drive label client, and run the application.

   Show answer

   Answer: B

   Next question

5. Question 15 · 151 in bank

   The Google Analytics service is set to OFF for your entire organization. All users in the marketing team OU and a subset of users in the sales OU need access to Analytics. The rest of the organization should not have access. You must configure access in Additional Google services. What should you do?

   • AEnable Google Analytics at the top of the OU structure.
   • BEnable Google Analytics for the marketing and sales OUs. Create a group to deny access to Google Analytics and assign it to the sales users who should not have access.
   • CEnable Google Analytics for the marketing OU. Create a sub-OU for the sales users under the marketing OU.
   • DEnable Google Analytics for the marketing OU. Create a group from the Admin console that includes the sales users, and set Google Analytics to On for that group.

   Show answer

   Answer: D

   Next question

6. Question 16 · 151 in bank

   Your organization has a strict requirement that your temporary employees can only send emails to and receive emails from specific external domains. You must define a policy in Google Workspace that meets this requirement for users in the temporary employee organizational unit (OU). What should you do?

   • ACreate a policy in Gmail settings that rewrites the recipient for outbound messages and quarantines incoming messages to review before delivery.
   • BAdd the allowed domains when configuring the restrict delivery setting in Gmail settings, and select the box to bypass for internal emails.
   • CRestrict sending and receiving to Google Groups, and carefully curate the temporary employees' memberships.
   • DConfigure the restrict delivery setting to limit domains that the temporary employees can communicate with. Allow Google Docs sharing notifications.

   Show answer

   Answer: D

   Next question

7. Question 17 · 151 in bank

   Your default Vault retention policy for Gmail is set to 365 days. Your legal department has just informed you that emails sent and received by the customer support department are sensitive, and must be retained for only 30 days. You must enforce this new retention policy in the simplest way. What should you do?

   • AChange the current default retention policy in Vault for Gmail to 30 days, and apply it to the customer support organizational unit (OU). Configure a custom retention policy for Gmail for 365 days for your domain.
   • BCreate two custom retention policies in Vault: one for 30 days that is applied to the customer support organizational unit (OU), and one for 365 days that is applied to all other OUs in your directory.
   • CChange the current default retention policy for Gmail to 30 days. Configure two custom retention policies in Vault: one for 30 days that is applied to the customer support organizational unit (OU), and one for 365 days that is applied to all other OUs in your directory.
   • DCreate a custom retention policy in Vault for Gmail for 30 days, and apply it to the customer support organizational unit (OU).

   Show answer

   Answer: D

   Next question

8. Question 18 · 151 in bank

   Your organization is moving from a legacy mail system to Google Workspace. This move will happen in phases. During the first phase, some of the users in the domain are set up to use a different identity provider (IdP) for logging in. You need to set up multiple IdPs for various users. What should you do?

   • AEnable single sign-on (SSO) with third-party identity providers and exclude the users who are using a different provider.
   • BEnable single sign-on (SSO) with Cloud Identity, and use Cloud Directory Sync to manage multiple identity providers.
   • CCreate Security Assertion Markup Language (SAML) based single sign-on (SSO) profiles and assign them to specific organizational units or groups of users.
   • DNothing. Google uses cookies to establish a user's relationship to a device. This will cover multiple identity providers.

   Show answer

   Answer: C

   Next question

9. Question 19 · 151 in bank

   By using Account Activity reports, you have flagged several users who are uploading large files. You want to ensure you don't run out of pooled storage and you want to stop the abuse. What should you do first?

   • AEmail flagged users with a warning of possible abuse.
   • BUse the Security Investigation Tool to set alerts on the flagged users.
   • CWarn the flagged users, and purchase more pooled storage to avoid hitting storage quotas.
   • DPlace the flagged users in a configuration group and set storage limits for the group.

   Show answer

   Answer: D

   Next question

10. Question 20 · 151 in bank

    The helpdesk at your organization reports that many users in multiple locations are not able to access Gmail, but can access other Workspace services. You must troubleshoot the issue. What should you do first?

    • AOpen a ticket with Google Support listing the affected users.
    • BCheck the Google Workspace status dashboard to see whether there is a disruption in Gmail service availability.
    • CCheck the Google Workspace release calendar to ensure there's not a Gmail upgrade scheduled.
    • DCheck network connectivity of the affected users.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PGWA practice, question 11. 151 questions available.