Google Google-Workspace-Administrator - Google Cloud Certified - Professional Google Workspace Administrator

Your company is transitioning to Google Workspace from legacy communication and collaboration applications. User accounts are managed in Active Directory and synced to Google Workspace by using Google Cloud Directory Sync (GCDS). Your company is implementing a new security policy for all accounts that requires complex passwords. Passwords must be at least 20 characters long, contain 3 symbols, 4 numbers, and 2 capital letters.
You need to enforce the new password policy in Google Workspace. What should you do?

• A. Create a password policy in Active Directory. Install Password Sync on the global catalog servers for Active Directory and require a password change for your users.
• B. Create a password policy in Active Directory. Enable password synchronization in GCDS.
• C. Enable strong password enforcement and require a minimum length of 20 characters at the top-level organizational unit.
• D. Share the instructions for changing a Google account password with your users. Monitor password strength in the Google Admin console as users change their passwords.

Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company's human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?

• A. Search for the sender's email address by using the security investigation tool. Delete the messages.
  Turn on the safety options for spoofing and authentication protection in Gmail settings.
• B. Collect a list of users who received the messages. Search the recipients' email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender's email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.
• C. Search for the sender's email address by using the security investigation tool. Mark the messages as phishing. Add the sender's email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
• D. Search the sender's email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.

The innovation team at your organization has a dedicated room with prototype equipment. You need to make the room bookable, add the equipment, and ensure that there are no booking conflicts. Only the innovation team and the sales directors can access this room. What should you do?

• A. Create a Google Group for the innovation team and another Google Group for sales directors. Share the room's calendar with both groups.
• B. Edit the Google Calendar settings for the room resource. Adjust the permission settings so only the innovation team and sales director group can view and book time on this calendar.
• C. Create a separate Google Calendar resource for the room. Manually manage booking requests from both teams.
• D. Create a Google Calendar event for the room. Share the event with the innovation team and sales directors.

Your organization has hired temporary employees to work on a sensitive internal project. You need to ensure that the sensitive project data in Google Drive is limited to only internal domain sharing. You do not want to be overly restrictive. What should you do?

• A. Turn off the Drive sharing setting from the Team dashboard.
• B. Restrict the Drive sharing options for the domain to allowlisted domains.
• C. Configure the Drive sharing options for the domain to internal only.
• D. Create a Drive DLP rule, and use the sensitive internal Project name as the detector.

You are designing a group structure for your company that will be used to grant access to a specific shared drive. You need this solution to automatically add and remove employees based on their job role. What should you do?

• A. Create a security group. Add all employees with the desired job role. Grant the security group access to the shared drive.
• B. Create a distribution list. Add all employees with the desired job role. Grant the distribution list access to the shared drive.
• C. Create a dynamic group. Set the membership criteria to the desired job role. Grant the dynamic group access to the shared drive.
• D. Create a configuration group. Add users on an exception basis. Grant the configuration group access to the shared drive.