A user reports that external emails are being rejected by the organization's domain. Where should you check the email authentication settings to ensure SPF, DKIM, and DMARC are correctly configured?
You are the Workspace administrator for a company that uses Google Vault. A legal team requests that all email messages sent by the CEO be retained for 7 years, even if the CEO deletes them. Which Vault action should you take?
Your organization uses Google Workspace. The legal team wants to ensure that all email sent from the domain is encrypted in transit and that recipients can verify the email was sent by your domain. They also want to receive reports when emails fail authentication. Which email security standard should you implement to meet these requirements?
A company's Google Workspace administrator needs to ensure that departing employees' Google Drive files are automatically transferred to their manager when their account is deleted. The administrator wants to set this up once and have it apply to all future employee departures without manual intervention. What should the administrator configure?
You are the Workspace administrator at a financial services firm. The security team requires that all outbound email from your domain be encrypted using TLS, and that messages to recipients who do not support TLS be rejected rather than delivered insecurely. Where do you configure this requirement?
Your organization uses Google Workspace and wants to give a set of users access to a shared mailbox that receives support requests. These users should be able to read and reply to messages as the shared address, but they should not have to know the mailbox password. Which Google Workspace feature should you configure for these users?
You are the Workspace administrator at Northwind Traders. The legal team needs to preserve all email sent and received by a former employee for an ongoing litigation hold, even after the employee's account is deleted. The hold must remain in effect for at least three years and must capture messages that were already delivered to the mailbox. Which action should you take?
A user in your organization accidentally deleted a Google Calendar event that was created by their manager. The event was deleted 10 days ago. The user wants to recover the event. As the administrator, what is the maximum time you have to restore the event from the trash?
A Google Workspace administrator is configuring security settings for a new organizational unit that handles sensitive financial data. The administrator must ensure that users in this OU can only access Google Drive from company-owned devices and that data cannot be downloaded to personal devices. Which two actions should the administrator take? (Choose two.)
Your organization uses Google Workspace and has a policy that all email older than 90 days must be automatically deleted from users' mailboxes to comply with data retention regulations. You need to implement this without affecting other services. What should you do?
A user in your organization reports that they are unable to join a Google Meet meeting because the meeting link is not working. You check the Admin console and see that Google Meet is enabled for the organizational unit. What is the most likely cause?
You are configuring Google Drive sharing policies for a new organizational unit that handles sensitive financial data. You want to enforce the following two requirements: (1) users in this OU must not be able to share files with any external domain except the approved partner domain example.com, and (2) users must not be able to make files visible to anyone with the link. Which TWO settings should you configure? (Choose two.)
You are a Google Workspace administrator. You need to configure Google Meet so that only users in your organization can join meetings created by your users, and external participants must be explicitly invited. Which two settings should you configure? (Choose two.)
A Google Workspace administrator needs to give a new employee access to Gmail, Google Calendar, and Google Drive. The administrator wants to ensure the user can only access these services from a desktop browser and not from mobile devices. What should the administrator do?
Your company uses Google Workspace and has a policy that all external email must be authenticated with SPF, DKIM, and DMARC. A user reports that emails from a partner domain are being rejected. You check the partner's DNS records and see they have SPF and DKIM configured, but no DMARC record. Your domain's DMARC policy is set to p=reject. What is the most likely cause of the rejection?
You are a Google Workspace administrator for a company that uses Google Calendar. You need to ensure that all calendar events created by users in the Sales organizational unit automatically include a Google Meet link. Which TWO of the following steps should you take? (Choose two.)
A user in your organization reports that they cannot add a Google Meet link to a Calendar event because the option is missing. You verify that the user has a Google Workspace license that includes Meet. Where should you check to ensure that Meet links can be automatically added to Calendar events for this user?
You are the Workspace administrator at Contoso. The security team wants to prevent users from installing any Google Workspace Marketplace app that requests access to Gmail data. You need to enforce this for all users in the organization. What should you do?
Your organization has a policy that all email sent to external recipients must be encrypted using S/MIME. You need to enforce this for all users in the sales department. What should you do?
Your organization wants to ensure that all outgoing mail is routed through a third-party email security gateway for scanning. What is the correct configuration?
You are the Workspace administrator for a healthcare company. A new compliance policy requires that all external email sent from your domain be digitally signed so that recipients can verify the messages are genuinely from your organization. You need to configure this in the Google Workspace Admin console. What should you do?
A user in your organization reports that they cannot access their Google Drive files from their mobile device. They can access Drive from their laptop without issue. You suspect a device-based access policy is blocking mobile access. Where in the Google Admin console should you check?
Your organization uses Google Workspace and has a mix of full-time employees and temporary contractors. You need to ensure that contractors cannot access Google Drive from unmanaged mobile devices, while employees can. Which TWO configurations should you implement? (Choose two.)
A user in your organization reports that they accidentally deleted a Google Calendar event that contained important meeting notes and attachments. The event was deleted from a secondary calendar they own. Where can the user recover the deleted event?
Your organization has a policy that all Google Drive files must be owned by the organization, not by individual users. A user creates a new Google Doc and shares it with an external collaborator. You need to ensure that the file remains owned by the organization even if the user leaves. What should you do?
Your organization is migrating from Microsoft Exchange to Google Workspace. The IT director wants to ensure that all existing calendar events, including recurring meetings and resource bookings, are transferred to Google Calendar with minimal user intervention. Which Google Workspace service should you use to accomplish this?
You are the Google Workspace administrator for a company that wants to enforce stricter controls on how users share Google Drive files. You need to configure sharing settings at the organizational unit level. Which TWO of the following actions can you perform in the Google Drive sharing settings for an organizational unit? (Choose two.)
Your company's security team wants to ensure that all outgoing email from your Google Workspace domain is authenticated so that external recipients can verify it. They ask you to check the current email authentication configuration for the domain. Where should you look in the Google Workspace Admin console to review and manage these settings?
You are the Workspace administrator for a retail company. The legal department needs to ensure that all email sent to and received from a specific external domain is archived for eDiscovery, even if users delete the messages. Which Google Workspace feature should you configure?
A manager needs to know which users in the sales organizational unit have not signed in to their Google Workspace account in the past 30 days. The manager does not have admin access. What should the administrator do to provide this information?
Your company has a Google Workspace subscription. The IT team wants to ensure that all users' Chrome browsers are configured to block third-party cookies and that this setting cannot be changed by users. Which Google Workspace setting should you configure?
Your organization uses Google Workspace and you have been asked to ensure that all email sent from your domain passes SPF, DKIM, and DMARC checks. You have already published SPF and DKIM records. Which action should you take to complete the DMARC configuration?
Your organization has a policy that employees must not be able to download Google Drive files on unmanaged devices. You have already set up Context-Aware Access with an access level that requires managed devices. However, users report they can still download files from Drive on personal devices. What is the most likely reason?