Google Associate Google Workspace Administrator - Associate-Google-Workspace-Administrator

Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company's human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future.
What should you do?

• A. Search the sender's email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.
• B. Search for the sender's email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.
• C. Search for the sender's email address by using the security investigation tool. Mark the messages as phishing. Add the sender's email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
• D. Collect a list of users who received the messages. Search the recipients' email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender's email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.

You are configuring Chrome browser security policies for your organization. These policies must restrict certain Chrome apps and extensions.
You need to ensure that these policies are applied on the devices regardless of which user logs into the device. What should you do?

• A. Configure the Policy Precedence to override the domain-wide policy applied for apps and extensions.
• B. Require 2SV for user logins.
• C. Configure the allowed list of apps in the Devices page in the apps and extensions settings.
• D. Configure the Chrome user setting to require users to sign in to use Chrome apps and extensions.

Your security team is concerned about disgruntled employees downloading large amounts of intellectual property. You need to create an automatic notification if any user downloads more than 500 files from Google Drive within a one-hour period. What should you do?

• A. Configure a Data Loss Prevention (DLP) rule for Drive.
• B. Create an activity rule in the security investigation tool to monitor Drive download events. Set a threshold to trigger an alert.
• C. Use the alert center to review Drive audit logs for instances where users download a large number of files.
• D. Set up an alert within Google Cloud Monitoring to track the number of Drive API calls and trigger a notification when a user makes an excessive number of download requests.

You need to create an automated application or process that includes connectors to external data, leverages Google Sheets data, and is easily shared as a mobile application. What should you do?

• A. Create an automation process by using Apps Script. Run the process through Google Sheets.
• B. Create an AppSheet application to connect the different data sources. Set up the mobile application.
• C. Create an application by using App Engine. Connect the application to your Workspace environment
• D. Copy the external data to BigQuery. Use a Connected Sheet to interact with the data.

An employee using a Workspace Enterprise Standard license was terminated from your organization. You need to ensure that the former employee no longer has access to their Workspace account and preserve access to the former employee's documents for the manager and the team.
You want to minimize license cost. What should you do?

• A. Suspend former employee's Workspace account.
• B. Delete the former employee's Workspace account.
• C. Reset the password of the former employee and keep their Workspace license active.
• D. Switch the license type of the former employee's Workspace account to an Archived User license.