GWS-ADMIN Data Governance And Compliance Practice Test 2 — 15 Questions

Question 1

When a user leaves the company, which status should you set their account to if you want to keep their data but stop them from logging in?

Accepted Answer

Suspend the account. Suspending a user account prevents access but keeps the account and data intact for admins to access or migrate.

Answer

Reset the 2-Step Verification

Answer

Change the password

Answer

Delete the account

Question 2

Which Google Workspace service should you use to search and export user data for legal requests?

Accepted Answer

Google Vault. Vault is the primary tool for eDiscovery and legal data requests in Google Workspace.

Answer

Google Cloud Storage

Answer

Data migrations

Answer

Security center

Question 3

Which TWO actions can you perform in Google Vault?

Accepted Answer

Search and export user data. Vault allows you to place holds on data to prevent deletion and perform searches across user mail and files for eDiscovery.

Answer

Configure DLP policies

Answer

Set up 2-Step Verification

Answer

Manage user passwords

Question 4

Which THREE features are part of the Security Center?

Accepted Answer

Security health page. The Security Center provides tools for proactive security, incident investigation, and reporting on security metrics.

Answer

Vault retention rules

Answer

DLP policy configuration

Question 5

You need to create a report showing which users have been affected by a specific DLP policy violation in the last month. Where can you find this?

Accepted Answer

Security center investigation tool. The Security Center investigation tool allows for queries specifically filtered by DLP rule violations.

Answer

Admin audit logs

Answer

Reports dashboard

Answer

Vault matters

Question 6

You need to restrict access to the Admin Console to only users connecting from your corporate office IP address. Which tool do you use?

Accepted Answer

Context-aware access. Context-aware access allows you to define access levels based on IP ranges and apply them to the Admin Console.

Answer

DLP policy

Answer

2-Step Verification

Answer

Vault access settings

Question 7

You have a Data Region policy, but a user is still showing data in the global region. What is the most likely cause?

Accepted Answer

The user's OU is not in a region-mapped group. Data region policies require the user's OU to be updated to match the intended region. If the OU is not updated, the migration process does not begin.

Answer

The account is suspended

Answer

The user hasn't logged in recently

Answer

Vault hold is preventing the move

Question 8

You need to verify if an email was sent to an external address. Where can you see this in the Admin Console?

Accepted Answer

Email log search. The Email Log Search tool in the Admin Console allows administrators to trace email delivery and identify recipients.

Answer

Vault search

Answer

Compliance reports

Answer

Security center

Question 9

Which TWO settings in Drive sharing can help prevent data leakage?

Accepted Answer

Prevent viewers from downloading, printing, or copying. Restricting sharing to the organization and preventing viewers from downloading files are effective ways to protect data.

Answer

Allow external sharing for all users

Answer

Enable 'Allow user to set their own sharing'

Answer

Disable all Drive sharing

Question 10

Which THREE types of data can be managed using Vault retention rules?

Accepted Answer

Gmail messages. Vault supports retention for Gmail, Drive, Chat, Groups, and Voice data.

Answer

User device logs

Answer

Third-party app tokens

Question 11

Which THREE criteria can you use to build a DLP rule in Google Workspace?

Accepted Answer

Custom regular expressions. DLP rules can be based on predefined content detectors, custom regex, and document metadata like labels.

Answer

User password history

Answer

Network latency

Question 12

Which THREE security settings are commonly configured using Context-Aware Access?

Accepted Answer

Device security posture (e.g., screen lock). Context-aware access allows restricting access to apps based on device security posture, IP, and location.

Answer

Email signature format

Answer

User password strength

Question 13

Which TWO actions should be taken when offboarding a user to protect organizational data?

Accepted Answer

Suspend the user account. Suspending access and ensuring data is preserved or transferred are critical offboarding steps.

Answer

Reset the user's billing settings

Answer

Grant user full email access

Answer

Delete the user account immediately

Question 14

Which TWO tools in the Admin Console help you identify potentially compromised accounts?

Accepted Answer

Security dashboard. The Security dashboard and the Investigation tool are the primary means of identifying suspicious activity in user accounts.

Answer

Vault search

Answer

Group settings

Answer

Data regions

Question 15

Which TWO actions can you take when a user account is under a Vault hold?

Accepted Answer

Prevent data deletion. A hold ensures the data is not deleted, even if the user attempts to delete it or if the account is suspended/deleted.

Answer

Automatically delete old emails

Answer

Enable 2-Step Verification

Answer

Allow the user to change their password