PGWA practice questions 31–40

1. Question 31 · 151 in bank

   You work for a midsize organization. Your compliance and audit team sees that users are frequently resetting their passwords. You must provide accurate information and ensure that the compliance team is informed every time a user changes their password. What should you do?

   • ACreate a new alert by using user log events and check that event Login type is Google password, and include the compliance team in the email notifications.
   • BCheck the User's password changed alert in the alert center and include the compliance team in the email notifications.
   • CDisable user account recovery so users must contact you before a reset.
   • DEnable user account recovery and forward any alert to the compliance team through the alert center.

   Show answer

   Answer: B

   Explanation

   B. The User's password changed alert informs you that a user's password was changed in your organization. From the Alert details page, you can view important details about the User's password changed alert.

   Source: Adapted from community discussion — apb98

   Next question

2. Question 32 · 151 in bank

   Your global marketing team has over 500 employees. They recently started working with Google Analytics and want to move to managed accounts. You decide to use Google Cloud Directory Sync (GCDS) to sync users from your current identity provider. Your organization currently has no Google Workspace licenses linked to the Admin console. You run GCDS for the first time and receive the following error, “Domain user limit reached.” You need to identify and fix the problem. What should you do?

   • AEnsure that there is a subscription available and enough licenses to sync the new users.
   • BCheck if GCDS has the correct permissions to run a sync on your domain.
   • CWait 48 hours until the domain is fully provisioned.
   • DUpdate the delete limits of GCDS, and try again.

   Show answer

   Answer: A

   Next question

3. Question 33 · 151 in bank

   Your organization has users in the United States and Europe. For compliance reasons, you want to ensure that user data is always stored in the region where the user is located. What should you do?

   • ACreate two Google Groups titled “United States” and “Europe.” Assign users to either group based on location.
   • BSpecify a data region policy for each Organizational Unit (OU) where users are grouped by location.
   • CPopulate the Address field on each user record, ensuring the country information is accurate.
   • DDo nothing. No extra configuration is needed because user data is always stored in the region the user is located.

   Show answer

   Answer: B

   Explanation

   By grouping users into Organizational Units (OUs) based on their location and then applying data region policies to these OUs, you can ensure that user data is stored in the appropriate region.

   Source: Adapted from community discussion — apb98

   References

   • support.google.com documentation

   Next question

4. Question 34 · 151 in bank

   You are configuring a customer relationship management (CRM) solution to integrate with Google Workspace services for the sales department at your organization. The CRM solution is in the Google Workspace Marketplace and you deploy the specific CRM solution. Employees report that there are no contacts and documents visible in the CRM solution. You must identify and fix the problem. What should you do?

   • ACheck the OAuth scopes, and ensure that Drive and Gmail scopes are granted for the CRM solution.
   • BCheck if Manage access to apps is set to Allow users to install and run any app from the Marketplace.
   • CRevoke all OAuth scopes, and reinstall the CRM solution for just the sales department.
   • DCheck if the App distribution settings are set to ON for everyone in your organization.

   Show answer

   Answer: A

   Explanation

   OAuth scopes define the level of access that the CRM solution has to Google Workspace services such as Drive and Gmail. If the necessary OAuth scopes are not granted, the CRM solution will not be able to access contacts and documents.

   Source: Adapted from community discussion — apb98

   Next question

5. Question 35 · 151 in bank

   The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in. What else can you do to increase your organization's defense-in-depth strategy?

   • AImplement an IP block on the malicious user's IPs under Security Settings in the Admin Console.
   • BUse Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.
   • CEnforce higher complexity passwords by rolling it out to the affected users.
   • DUse Mobile device management geo-fencing to prevent malicious actors from using these stolen credentials.

   Show answer

   Answer: B

   References

   • support.google.com documentation

   Next question

6. Question 36 · 151 in bank

   You have implemented a data loss prevention (DLP) policy for a specific finance organizational unit. You want to apply the same security policy to a shared drive owned by the finance department in the most efficient manner. What should you do?

   • AIn the Admin console sharing settings, select the finance organizational unit and deselect Allow users outside the domain to access files in shared drives.
   • BAssign the Shared Drive to the finance organizational unit.
   • CCreate a new DLP policy for shared drive users.
   • DChange the scope of the policy to apply to all in the domain.

   Show answer

   Answer: B

   Explanation

   The phrasing askes to complete the task in the most efficient manner possible. Creating a new DLP rule is more time consuming than simply assigning the shared drive to the OU where the DLP rule already exists. Correct answer is B.

   Source: Adapted from community discussion — 3fd692e

   Next question

7. Question 37 · 151 in bank

   Your organization has a group of users who interact with sensitive information and their accounts contain valuable files. You need to protect these users from targeted online attacks. What should you do?

   • AEnable 2-Step Verification for those users and recommend they use Google Authenticator.
   • BEnable 2-Step Verification for those users and recommend they use SMS codes.
   • CDisable password recovery for end users.
   • DEnroll all accounts for those users in the Advanced Protection Program.

   Show answer

   Answer: D

   References

   • support.google.com documentation

   Next question

8. Question 38 · 151 in bank

   An employee at your company does not need access to their Workspace account while they are on leave for a year. When they return, you need to ensure they have access to their account and that all their data and current emails remain intact. Also, their shared documents must be available to other users. You must accomplish this goal in the most cost-effective way. What should you do?

   • AAssign an Archive User license.
   • BSuspend their account in the Admin console.
   • CDelete the user after copying their emails and reassigning their documents to their manager.
   • DRemove the user license in the Admin console.

   Show answer

   Answer: A

   Explanation

   Correct Answer A. Assigning Archive licnese. Suspended accounts are still charged at the same rate as active accounts on both the Annual billing plan and the Flexible plan. https://support.google.com/a/answer/33312?hl=en Removing user license will not help in maintaining user data and providing access to others.

   Source: Adapted from community discussion — Chetantest07

   References

   • support.google.com documentation

   Next question

9. Question 39 · 151 in bank

   Employees at your company sent emails with physical file attachments to external recipients. However, it is against company policy to send file attachments externally. You need to enforce the policy and alert the sender. What should you do?

   • AQuarantine messages that contain attachments for all external recipients.
   • BCreate an attachment compliance rule that removes attachments from external messages and notifies recipients.
   • CCreate an email denylist to block external mail recipients from receiving messages with physical files attached.
   • DStore the files in a shared drive and add the recipients as members.

   Show answer

   Answer: B

   Explanation

   I believe it's B. To enforce the company policy of not sending file attachments externally, the most effective solution is to create an attachment compliance rule. This rule can be configured to automatically remove attachments from emails sent to external recipients. Additionally, it can notify the sender that their email violated the company policy, ensuring they are aware of the restriction.

   Source: Adapted from community discussion — xarisk

   Next question

10. Question 40 · 151 in bank

    An employee at your organization created a recurring calendar event. When they made edits to the recurring event, none of the event attendees received email notifications with the changes. You collected the Google Calendar IDs and user emails. You must troubleshoot the issue and collect additional information from the event attendees before contacting the Google Support team. What should you do?

    • ACapture the Gmail labels used by the reported user.
    • BCapture the number of times the Event is set for recurrence to ensure that the host is not hitting the email limits.
    • CCapture the relevant Event IDs and the ICS files by using the Show original option.
    • DCapture the laptop OS version of the user to troubleshoot if there are older versions of the event being displayed.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PGWA practice, question 31. 151 questions available.