GWS-ADMIN Data Governance And Compliance — 25 Questions

Question 1

An auditor requests a log of all file sharing activities in Drive for the past 6 months. Where can you retrieve this information?

Accepted Answer

Security Center Investigation Tool. The Admin Console audit logs contain detailed information about Drive file sharing and access events.

Answer

User's Drive settings

Answer

DLP incident reports

Answer

Google Vault Matters

Question 2

You need to block Gmail messages containing specific keywords related to a confidential project. Which tool do you use?

Accepted Answer

DLP policy. Compliance rules in the Gmail settings of the Admin Console allow for filtering based on content, including keywords.

Answer

Context-aware access

Answer

Gmail routing rules

Answer

Vault hold

Question 3

A user is leaving the company. You need to keep their data for 7 years. What is the best practice?

Accepted Answer

Create a Vault hold for the user's account. Placing a legal hold in Vault ensures all of a user's data is preserved indefinitely or until the hold is removed, which is appropriate for offboarding.

Answer

Export all data to a PST file

Answer

Transfer Drive ownership to another user

Answer

Suspend the user account and keep it

Question 4

You need to ensure that credit card numbers are not sent via Gmail by your employees. Which tool should you configure?

Accepted Answer

DLP rules. DLP rules in Google Workspace allow administrators to define content detectors to scan for sensitive information like credit card numbers.

Answer

Context-aware access

Answer

Google Vault retention rules

Answer

Security center investigation tool

Question 5

You need to prevent users from sharing sensitive files outside the organization. Which setting should you modify?

Accepted Answer

Drive sharing options in the Admin Console. Drive sharing settings allow administrators to restrict sharing to internal users or specific whitelisted domains.

Answer

Endpoint management

Answer

Vault retention settings

Answer

App access control

Question 6

How can you ensure that deleted emails are kept for 3 years even if the user empties their trash?

Accepted Answer

Set a Gmail retention rule in Google Vault. A Vault retention rule for Gmail with a 3-year duration ensures all emails are preserved for that period, overriding user deletion.

Answer

Enable endpoint management

Answer

Use an Admin Console report

Answer

Configure a Gmail filter

Question 7

Your legal team requires that all emails from a specific user be preserved for an upcoming audit. Which tool should you use to ensure these messages are not deleted?

Accepted Answer

Google Vault. Google Vault is designed for eDiscovery and retention. Setting a retention rule or hold in Vault ensures data is preserved regardless of user actions.

Answer

Data Loss Prevention (DLP) rules

Answer

Google Workspace Migration for Microsoft Outlook

Answer

Admin Console Reporting

Question 8

You need to investigate a potential data breach where a user downloaded a large number of sensitive files. Which tool provides the most granular audit logs for Drive file downloads?

Accepted Answer

Security center investigation tool. The Investigation tool within the Security Center provides the most granular logs for file-level activities, including downloads.

Answer

DLP policy logs

Answer

Vault eDiscovery search

Answer

Reports dashboard

Question 9

You have a Data Region policy configured for the US. A user moves from the US to the EU. How do you trigger the migration of their existing data to the EU?

Accepted Answer

Move the user to an OU configured for the EU data region. Google Workspace automatically migrates data to the new region once the user's organizational unit (OU) is updated to a region mapped to the new location.

Answer

Manually run a data export in Vault

Answer

Re-provision the user account

Answer

Contact Google Support to initiate a manual migration

Question 10

Where do you go in the Admin Console to view the current data region for your organization?

Accepted Answer

Account > Account settings > Data regions. The 'Account settings' section under 'Account' contains the data regions configuration.

Answer

Vault > Settings

Answer

Apps > Google Workspace

Answer

Security > Data protection

Question 11

You need to monitor for potentially malicious third-party apps accessing Drive data. Which feature should you use?

Accepted Answer

App access control. App access control allows admins to review and restrict third-party apps that have OAuth scopes to access Drive files.

Answer

DLP rules

Answer

Context-aware access

Answer

Vault matters

Question 12

Which dashboard provides a summary of security incidents and potential policy violations?

Accepted Answer

Security center dashboard. The Security Center dashboard provides an overview of security-related events and policy violations across the workspace.

Answer

Vault dashboard

Answer

Compliance reports

Answer

User management dashboard

Question 13

You need to ensure that Google Chat messages are retained for 5 years. How do you do this?

Accepted Answer

Create a Chat retention rule in Vault. Vault supports retention rules for Google Chat, which can be configured for a specific time period.

Answer

Enable chat history for all users

Answer

Export Chat logs via the API

Answer

Set a Gmail retention rule

Question 14

An employee is suspected of leaking data. You need to search their past Gmail and Drive files for specific terms. Which tool do you use?

Accepted Answer

Vault matter search. Vault allows for full-text search across Gmail, Drive, and other services to support eDiscovery investigations.

Answer

DLP incident report

Answer

Security investigation tool

Answer

Admin audit logs

Question 15

You want to prevent sensitive Drive documents from being printed. Which setting is appropriate?

Accepted Answer

Drive sharing options for viewers/commenters. Drive sharing settings include an option to disable downloading, printing, and copying for viewers and commenters.

Answer

Context-aware access

Answer

Endpoint management

Answer

DLP policy

Question 16

When a user leaves the company, which status should you set their account to if you want to keep their data but stop them from logging in?

Accepted Answer

Suspend the account. Suspending a user account prevents access but keeps the account and data intact for admins to access or migrate.

Answer

Reset the 2-Step Verification

Answer

Change the password

Answer

Delete the account

Question 17

Which Google Workspace service should you use to search and export user data for legal requests?

Accepted Answer

Google Vault. Vault is the primary tool for eDiscovery and legal data requests in Google Workspace.

Answer

Google Cloud Storage

Answer

Data migrations

Answer

Security center

Question 18

Which TWO actions can you perform in Google Vault?

Accepted Answer

Search and export user data. Vault allows you to place holds on data to prevent deletion and perform searches across user mail and files for eDiscovery.

Answer

Configure DLP policies

Answer

Set up 2-Step Verification

Answer

Manage user passwords

Question 19

Which THREE features are part of the Security Center?

Accepted Answer

Security health page. The Security Center provides tools for proactive security, incident investigation, and reporting on security metrics.

Answer

Vault retention rules

Answer

DLP policy configuration

Question 20

You need to create a report showing which users have been affected by a specific DLP policy violation in the last month. Where can you find this?

Accepted Answer

Security center investigation tool. The Security Center investigation tool allows for queries specifically filtered by DLP rule violations.

Answer

Admin audit logs

Answer

Reports dashboard

Answer

Vault matters