You have a Data Region policy configured for the US. A user moves from the US to the EU. How do you trigger the migration of their existing data to the EU?
A compliance officer at your organization wants to ensure that all Google Drive files containing credit card numbers are automatically labeled as "Confidential" and that only users in the Finance department can access them. You need to implement this without requiring users to manually apply labels. What should you do?
You are the Google Workspace administrator for a healthcare company. To comply with HIPAA, you need to ensure that emails containing protected health information (PHI) are not sent outside your organization. You also need to allow legitimate business emails to external partners. Which TWO actions should you take? (Choose two.)
As the Google Workspace administrator, you need to enforce a policy that automatically applies a classification label to all new files uploaded to a specific shared drive based on the file's content, and prevents users from changing that label. Which configuration should you implement?
A financial services company uses Google Workspace and must ensure that no one can permanently delete emails from Gmail that are subject to a legal hold. Compliance officers need the retention rule to apply to all users in the Sales OU and prevent any user or admin from overriding it. Which configuration should you implement in the Admin Console?
Your organization uses Google Workspace Enterprise. A security analyst needs to investigate a potential data exfiltration incident. They need to see a timeline of file sharing events, including who shared what file, with whom, and when, over the past 30 days. Which tool should they use?
You are the Google Workspace administrator for a company that must comply with GDPR. You need to ensure that you can respond to data subject access requests (DSARs) by searching for and exporting all data belonging to a specific user across Google Workspace services. Which TWO tools should you use to accomplish this? (Choose two.)
A financial services company uses Google Workspace. Their compliance team requires that all Gmail messages sent by employees to external recipients containing specific financial terms be retained for 7 years, even if users delete them. You need to configure a Gmail retention rule that meets this requirement without affecting other messages. What should you do?
A user in your organization has left the company. The legal team requires that all their email and Drive data be preserved for 7 years. You need to ensure that the data is retained and cannot be deleted by anyone, including administrators, during this period. What should you do?
A multinational corporation uses Google Workspace and has implemented Data Regions for its EU users, storing their data in the European Union. A user in the EU moves to the United States and continues to access Google Workspace. The compliance team wants to ensure that this user's data remains stored in the EU after the move. What should the administrator do?
Your organization uses Google Workspace. A compliance officer needs to be notified whenever a user shares a Drive file with someone outside the company. You want to receive these alerts in the Admin Console's alert center. What should you do?
Your legal team requires that all emails from a specific user be preserved for an upcoming audit. Which tool should you use to ensure these messages are not deleted?
You need to investigate a potential data breach where a user downloaded a large number of sensitive files. Which tool provides the most granular audit logs for Drive file downloads?
You are the Workspace administrator for a financial firm. Compliance requires that every external share of a Drive file be logged with the file owner's identity, the recipient, and the timestamp, and that the log be retained for three years. Which action best satisfies this requirement?
Your organization uses Google Workspace and must comply with a new regulation requiring that all newly created Drive files for the Finance department are stored only in the United States. You have already created a Data Region policy for the US and applied it to the Finance organizational unit. However, you notice that some files created by Finance users are still being stored in the global region. What is the most likely reason for this behavior?
A healthcare organization uses Google Workspace. A compliance officer asks you to ensure that any Gmail message containing a patient identifier is automatically quarantined for review rather than delivered. Which configuration accomplishes this with the least administrative overhead?
Your organization must ensure that any Google Drive file containing credit card numbers is automatically flagged and the file owner is alerted. You want the least administrative overhead and want the detection to leverage Google's built-in classifiers. Which Google Workspace feature should you configure?
Your company is subject to a regulation that requires all Google Workspace data for EU employees to remain within the European Union. You have already set a Data Region policy for the EU. A new employee in Germany reports that their Drive files show a US data region. What is the most likely explanation?
Your company has a regulatory requirement to retain all Gmail messages sent by employees for exactly seven years, after which they must be permanently deleted. You need to enforce this automatically without user intervention. What should you configure?
A security analyst needs to investigate a suspected data exfiltration event involving Google Drive. The analyst has access to the Admin Console and Security Center. Which two actions should the analyst take to gather evidence of external sharing and file downloads? (Choose two.)
A departing employee's account must be preserved for a legal hold, but the employee should not be able to sign in. The legal team also needs to search the employee's Gmail and Drive content. Which action should the administrator take?
Your organization uses Google Workspace and has a legal hold on a user's Gmail and Drive data. The user continues to work and creates new files and emails. You need to ensure that any new content created by this user is also preserved under the same legal hold. What should you do?
Your organization is subject to a regulation that requires all Google Workspace data for users in the European Union to be stored within the EU. You have already set up a data region policy for the EU. However, you discover that some user data is still stored in the United States. What is the most likely reason for this?
You are the Workspace administrator for a healthcare company. A compliance officer asks you to prove that Drive files containing patient data cannot be accessed by users outside your organization, even if a user accidentally shares a link publicly. You need to configure a Drive sharing setting that blocks external sharing for files matching a specific label. What should you do?
Your organization needs to comply with a regulation that requires all Google Drive files to be classified and labeled based on their sensitivity. You want to automate the labeling process for files containing personally identifiable information (PII). Which two Google Workspace features should you use together to achieve this? (Choose two.)
Your organization has a Data Region policy that restricts data at rest for Google Drive to the European Union. A user based in the EU travels to the United States and accesses Drive from there. The compliance team wants to ensure that the user's existing Drive data remains stored in the EU and that new files created during the trip are also stored in the EU. What should you do?
A Workspace administrator needs to give the legal department the ability to search across all users' Gmail and Drive data for a specific matter, and to place holds on user accounts to preserve data. The legal team should not have the ability to change any Workspace settings or access user passwords. Which role should you assign to the legal team members?
Your organization has a Google Workspace Enterprise Plus subscription and uses Google Vault. An external auditor requests a report of all users who have accessed a specific sensitive document stored in a shared drive over the past 90 days. What should you do to provide this information?
A university uses Google Workspace for Education. The IT team wants to ensure that all new Google Drive files created by students are automatically scanned for sensitive data such as credit card numbers, and that any matches are logged for review. They do not want to block file creation. What should they configure?
A company is preparing for a compliance audit and needs to ensure that all Google Workspace data is retained according to legal requirements. The compliance team asks you to identify which two settings can be configured to prevent users from permanently deleting data. (Choose two.)
Your organization is deploying Google Workspace and must comply with data residency requirements. You need to ensure that data for users in Germany is stored only in the European Union. Which TWO actions should you take? (Choose two.)
A user in your organization needs to be placed on legal hold for their Gmail and Drive data. You are the Google Workspace administrator. What should you do?