Data Governance And Compliance

Your organization is subject to a regulation that requires all Google Workspace data for users in the European Union to be stored within the EU. You have already set up a data region policy for the EU. However, you discover that some user data is still stored in the United States. What is the most likely reason for this?

How can you ensure that deleted emails are kept for 3 years even if the user empties their trash?

Which THREE security settings are commonly configured using Context-Aware Access?

Your organization uses Google Workspace and has a legal hold on a user's Gmail and Drive data. The user continues to work and creates new files and emails. You need to ensure that any new content created by this user is also preserved under the same legal hold. What should you do?

You want to prevent sensitive Drive documents from being printed. Which setting is appropriate?

Which TWO actions can you take when a user account is under a Vault hold?

Your legal team requires that all emails from a specific user be preserved for an upcoming audit. Which tool should you use to ensure these messages are not deleted?

A university uses Google Workspace for Education. The IT team wants to ensure that all new Google Drive files created by students are automatically scanned for sensitive data such as credit card numbers, and that any matches are logged for review. They do not want to block file creation. What should they configure?

You need to ensure that credit card numbers are not sent via Gmail by your employees. Which tool should you configure?

Which TWO actions can you perform in Google Vault?

A Workspace administrator needs to give the legal department the ability to search across all users' Gmail and Drive data for a specific matter, and to place holds on user accounts to preserve data. The legal team should not have the ability to change any Workspace settings or access user passwords. Which role should you assign to the legal team members?

Which THREE types of data can be managed using Vault retention rules?

You are the Workspace administrator for a financial firm. Compliance requires that every external share of a Drive file be logged with the file owner's identity, the recipient, and the timestamp, and that the log be retained for three years. Which action best satisfies this requirement?

You need to verify if an email was sent to an external address. Where can you see this in the Admin Console?

Your organization needs to comply with a regulation that requires all Google Drive files to be classified and labeled based on their sensitivity. You want to automate the labeling process for files containing personally identifiable information (PII). Which two Google Workspace features should you use together to achieve this? (Choose two.)

Your organization uses Google Workspace and must comply with a new regulation requiring that all newly created Drive files for the Finance department are stored only in the United States. You have already created a Data Region policy for the US and applied it to the Finance organizational unit. However, you notice that some files created by Finance users are still being stored in the global region. What is the most likely reason for this behavior?

Which Google Workspace service should you use to search and export user data for legal requests?

You need to prevent users from sharing sensitive files outside the organization. Which setting should you modify?

Your organization has a Google Workspace Enterprise Plus subscription and uses Google Vault. An external auditor requests a report of all users who have accessed a specific sensitive document stored in a shared drive over the past 90 days. What should you do to provide this information?

Which TWO actions should be taken when offboarding a user to protect organizational data?

Your organization has a Data Region policy that restricts data at rest for Google Drive to the European Union. A user based in the EU travels to the United States and accesses Drive from there. The compliance team wants to ensure that the user's existing Drive data remains stored in the EU and that new files created during the trip are also stored in the EU. What should you do?

You need to ensure that Google Chat messages are retained for 5 years. How do you do this?

A security analyst needs to investigate a suspected data exfiltration event involving Google Drive. The analyst has access to the Admin Console and Security Center. Which two actions should the analyst take to gather evidence of external sharing and file downloads? (Choose two.)

A user in your organization needs to be placed on legal hold for their Gmail and Drive data. You are the Google Workspace administrator. What should you do?

You need to investigate a potential data breach where a user downloaded a large number of sensitive files. Which tool provides the most granular audit logs for Drive file downloads?

An employee is suspected of leaking data. You need to search their past Gmail and Drive files for specific terms. Which tool do you use?

Your organization is deploying Google Workspace and must comply with data residency requirements. You need to ensure that data for users in Germany is stored only in the European Union. Which TWO actions should you take? (Choose two.)

Where do you go in the Admin Console to view the current data region for your organization?

A healthcare organization uses Google Workspace. A compliance officer asks you to ensure that any Gmail message containing a patient identifier is automatically quarantined for review rather than delivered. Which configuration accomplishes this with the least administrative overhead?

When a user leaves the company, which status should you set their account to if you want to keep their data but stop them from logging in?

Which TWO tools in the Admin Console help you identify potentially compromised accounts?

You have a Data Region policy, but a user is still showing data in the global region. What is the most likely cause?

A company is preparing for a compliance audit and needs to ensure that all Google Workspace data is retained according to legal requirements. The compliance team asks you to identify which two settings can be configured to prevent users from permanently deleting data. (Choose two.)

Which TWO settings in Drive sharing can help prevent data leakage?

A departing employee's account must be preserved for a legal hold, but the employee should not be able to sign in. The legal team also needs to search the employee's Gmail and Drive content. Which action should the administrator take?

Your organization must ensure that any Google Drive file containing credit card numbers is automatically flagged and the file owner is alerted. You want the least administrative overhead and want the detection to leverage Google's built-in classifiers. Which Google Workspace feature should you configure?

You are the Workspace administrator for a healthcare company. A compliance officer asks you to prove that Drive files containing patient data cannot be accessed by users outside your organization, even if a user accidentally shares a link publicly. You need to configure a Drive sharing setting that blocks external sharing for files matching a specific label. What should you do?

A user is leaving the company. You need to keep their data for 7 years. What is the best practice?

You need to restrict access to the Admin Console to only users connecting from your corporate office IP address. Which tool do you use?

Your company is subject to a regulation that requires all Google Workspace data for EU employees to remain within the European Union. You have already set a Data Region policy for the EU. A new employee in Germany reports that their Drive files show a US data region. What is the most likely explanation?

Which dashboard provides a summary of security incidents and potential policy violations?

Your company has a regulatory requirement to retain all Gmail messages sent by employees for exactly seven years, after which they must be permanently deleted. You need to enforce this automatically without user intervention. What should you configure?

You need to monitor for potentially malicious third-party apps accessing Drive data. Which feature should you use?