What should you do?

Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as “view data for all teams” to the HR group, but it is reporting an error when accessing the application.

What should you do?
A . Allocate the “view data for all teams” permission to all employees of the company.
B. Confirm that the Work Insights app is turned ON for all employees.
C. Confirm in Security > API controls > App Access Controls that Work Insights API is set to “unrestricted.”
D. Confirm in Reports > BigQuery Export that the job is enabled.

Answer: C

Which combination of attributes will meet this objective?

Your company’s compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company’s account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.

Which combination of attributes will meet this objective?
A . Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.
B. Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject
C. Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
D. Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

Answer: D

Explanation:

https://www.shieldq.com/en-gb/Google-apps-content-compliance

What should you do?

Your cyber security team has requested that all email destined for external domains be scanned for credit card numbers, and if found, the email must be encrypted using your cloud-based third-party encryption provider. You are responsible for configuring to meet this request.

What should you do?
A . Create a content compliance rule on outbound mail and internal-sending mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.
B. Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check “Encrypt message if not encrypted”.
C. Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.
D. Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check “Change route” to send to your third-party encryption provider to encrypt.

Answer: D

Explanation:

https://support.google.com/a/answer/3540538?hl=en

What should you do?

Your company has sales offices in Madrid, Tokyo, London, and New York. The outbound

email for those offices needs to include the sales person’s signature and a compliance footer. The compliance footer needs to say “Should you no longer wish to receive emails about this offer, please reply with UNSUBSCRIBE.” You are responsible for making sure that users cannot remove the footer.

What should you do?
A . Send an email to each sales person with the instructions on how to add the footer to their Signature.
B. Ensure that each sales team is in their own OU, and configure the Append Footer with the signature and footer content translated for each locale.
C. Ensure that each sales team is in their own OU, and configure the Append Footer with footer content.
D. Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.

Answer: C

Explanation:

Google Workspace has no way to translate for each region for the footer. https://support.google.com/a/answer/2364576?hl=en

What should you do to meet these requirements?

Your company has acquired a new company in Japan and wants to add all employees of the acquisition to your existing Google Workspace domain. The new company will retain its original domain for email addresses and, due to the very sensitive nature of its work, the new employees should not be visible in the global directory. However, they should be visible within each company’s separate directory.

What should you do to meet these requirements?
A . Create a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.
B. Under Directory Settings > Contact sharing, disable the contact sharing option and wait for 24 hours to allow the settings to propagate before creating the new employee accounts.
C. Redesign your OU organization to have 2 child OUs for each company directly under the root. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the OU.
D. Create one dynamic group for each company based on a custom attribute defining the company. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the dynamic group.

Answer: C

Explanation:

https://support.google.com/a/answer/7566446?hl=en&ref_topic=9832541

What should you do?

You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.

What should you do?
A . Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups.
B. Update your configuration file and resync mailing lists with Google Cloud Directory Sync.
C. Create and assign a custom admin role for all group owners so they can update settings.
D. Use the Groups Settings API to update Google Groups with desired settings.

Answer: B

Explanation:

https://support.google.com/a/answer/6129577?hl=en#:~:text=Create%20and%20assign%20the%20role&text=Click%20Assign%20role.,organizational%20unit%20and%20click%20Done.

How do you configure Workspace for the fastest end user experience while also ensuring that European user data is contained in Europe?

You are the Workspace administrator for an international organization with Enterprise Plus Workspace licensing. A third of your employees are located in the United States, another third in Europe, and the other third geographically dispersed around the world. European employees are required to have their data stored in Europe. The current OU structure for your organization is organized by business unit, with no attention to user location.

How do you configure Workspace for the fastest end user experience while also ensuring that European user data is contained in Europe?
A . Configure a data region at the top level OU of your organization, and set the value to “Europe”.
B. Add three additional OU structures to designate location within the current OU structure.
Assign the corresponding data region to each.
C. Configure a configuration group for European users, and set the data region to “Europe”.
D. Configure three configuration groups within your domain. Assign the appropriate data regions to each corresponding group, but assign no preference to the users outside of the United States and Europe.

Answer: C

Explanation:

https://support.google.com/a/answer/7630496?hl=en#zippy=%2Cstep-set-the-organizational-structure "put them in a configuration group (to set for users across or within departments)".

What two actions should be taken on this call with the user?

A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.

You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user’s busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs.

What two actions should be taken on this call with the user? (Choose two.)
A . Ask the user to send an email to you so you can check the headers.
B. Record a HAR file of the user composing a new email.
C. Take screenshots of the user’s screen when composing an email.
D. Use the Email log search in the Admin panel.
E. Check the Users > App Users Activity report.

Answer: B,C

What should you do?

Your-company.com recently bought 2500 Chrome devices and wants to distribute them to various teams globally. You decided that enterprise enrollment would be the best way to enforce company policies for managed Chrome devices. You discovered that Chrome devices currently end up in the top-level organization unit, and this needs to change to the organizational unit of the device administrator.

What should you do?
A . Change Enrollment Permissions to only allow users in this organization to re-enroll existing devices.
B. Change Enrollment Controls to Place Chrome device in user organization.
C. Change Enrollment Controls to Keep Chrome device in current location.
D. Change Enrolment Permissions to not allow users in this organization to enroll new devices.

Answer: B

Explanation:

https://support.google.com/chrome/a/answer/2657289#auto_device_placement_enabled