Data Governance And Compliance

A user is leaving the company. You need to keep their data for 7 years. What is the best practice?

You need to ensure that credit card numbers are not sent via Gmail by your employees. Which tool should you configure?

You need to prevent users from sharing sensitive files outside the organization. Which setting should you modify?

How can you ensure that deleted emails are kept for 3 years even if the user empties their trash?

Your legal team requires that all emails from a specific user be preserved for an upcoming audit. Which tool should you use to ensure these messages are not deleted?

You need to investigate a potential data breach where a user downloaded a large number of sensitive files. Which tool provides the most granular audit logs for Drive file downloads?

Where do you go in the Admin Console to view the current data region for your organization?

You need to monitor for potentially malicious third-party apps accessing Drive data. Which feature should you use?

Which dashboard provides a summary of security incidents and potential policy violations?

You need to ensure that Google Chat messages are retained for 5 years. How do you do this?

An employee is suspected of leaking data. You need to search their past Gmail and Drive files for specific terms. Which tool do you use?

You want to prevent sensitive Drive documents from being printed. Which setting is appropriate?

When a user leaves the company, which status should you set their account to if you want to keep their data but stop them from logging in?

Which Google Workspace service should you use to search and export user data for legal requests?

Which TWO actions can you perform in Google Vault?

You need to restrict access to the Admin Console to only users connecting from your corporate office IP address. Which tool do you use?

You have a Data Region policy, but a user is still showing data in the global region. What is the most likely cause?

You need to verify if an email was sent to an external address. Where can you see this in the Admin Console?

Which TWO settings in Drive sharing can help prevent data leakage?

Which THREE types of data can be managed using Vault retention rules?

Which THREE security settings are commonly configured using Context-Aware Access?

Which TWO actions should be taken when offboarding a user to protect organizational data?

Which TWO tools in the Admin Console help you identify potentially compromised accounts?

Which TWO actions can you take when a user account is under a Vault hold?

You are the Workspace administrator for a financial firm. Compliance requires that every external share of a Drive file be logged with the file owner's identity, the recipient, and the timestamp, and that the log be retained for three years. Which action best satisfies this requirement?

Your organization uses Google Workspace and must comply with a new regulation requiring that all newly created Drive files for the Finance department are stored only in the United States. You have already created a Data Region policy for the US and applied it to the Finance organizational unit. However, you notice that some files created by Finance users are still being stored in the global region. What is the most likely reason for this behavior?

A healthcare organization uses Google Workspace. A compliance officer asks you to ensure that any Gmail message containing a patient identifier is automatically quarantined for review rather than delivered. Which configuration accomplishes this with the least administrative overhead?

Your organization must ensure that any Google Drive file containing credit card numbers is automatically flagged and the file owner is alerted. You want the least administrative overhead and want the detection to leverage Google's built-in classifiers. Which Google Workspace feature should you configure?

Your company is subject to a regulation that requires all Google Workspace data for EU employees to remain within the European Union. You have already set a Data Region policy for the EU. A new employee in Germany reports that their Drive files show a US data region. What is the most likely explanation?

Your company has a regulatory requirement to retain all Gmail messages sent by employees for exactly seven years, after which they must be permanently deleted. You need to enforce this automatically without user intervention. What should you configure?

A security analyst needs to investigate a suspected data exfiltration event involving Google Drive. The analyst has access to the Admin Console and Security Center. Which two actions should the analyst take to gather evidence of external sharing and file downloads? (Choose two.)

A departing employee's account must be preserved for a legal hold, but the employee should not be able to sign in. The legal team also needs to search the employee's Gmail and Drive content. Which action should the administrator take?

Your organization uses Google Workspace and has a legal hold on a user's Gmail and Drive data. The user continues to work and creates new files and emails. You need to ensure that any new content created by this user is also preserved under the same legal hold. What should you do?

Your organization is subject to a regulation that requires all Google Workspace data for users in the European Union to be stored within the EU. You have already set up a data region policy for the EU. However, you discover that some user data is still stored in the United States. What is the most likely reason for this?

You are the Workspace administrator for a healthcare company. A compliance officer asks you to prove that Drive files containing patient data cannot be accessed by users outside your organization, even if a user accidentally shares a link publicly. You need to configure a Drive sharing setting that blocks external sharing for files matching a specific label. What should you do?

Your organization needs to comply with a regulation that requires all Google Drive files to be classified and labeled based on their sensitivity. You want to automate the labeling process for files containing personally identifiable information (PII). Which two Google Workspace features should you use together to achieve this? (Choose two.)

Your organization has a Data Region policy that restricts data at rest for Google Drive to the European Union. A user based in the EU travels to the United States and accesses Drive from there. The compliance team wants to ensure that the user's existing Drive data remains stored in the EU and that new files created during the trip are also stored in the EU. What should you do?

A Workspace administrator needs to give the legal department the ability to search across all users' Gmail and Drive data for a specific matter, and to place holds on user accounts to preserve data. The legal team should not have the ability to change any Workspace settings or access user passwords. Which role should you assign to the legal team members?

Your organization has a Google Workspace Enterprise Plus subscription and uses Google Vault. An external auditor requests a report of all users who have accessed a specific sensitive document stored in a shared drive over the past 90 days. What should you do to provide this information?

A university uses Google Workspace for Education. The IT team wants to ensure that all new Google Drive files created by students are automatically scanned for sensitive data such as credit card numbers, and that any matches are logged for review. They do not want to block file creation. What should they configure?

A company is preparing for a compliance audit and needs to ensure that all Google Workspace data is retained according to legal requirements. The compliance team asks you to identify which two settings can be configured to prevent users from permanently deleting data. (Choose two.)

Your organization is deploying Google Workspace and must comply with data residency requirements. You need to ensure that data for users in Germany is stored only in the European Union. Which TWO actions should you take? (Choose two.)

A user in your organization needs to be placed on legal hold for their Gmail and Drive data. You are the Google Workspace administrator. What should you do?