Google Updated Google-Workspace-Administrator Exam Questions and Answers by bailey

Access Security Dashboard: Go to the Google Admin console and navigate to the 'Security' section.

Open Spam Filter Report: In the security dashboard, open the spam filter report.

Filter by Time Period: Select the specific time period you want to analyze.

Review Spam Messages: Review the detailed information regarding each message marked as spam by Google's spam filter.

Take Necessary Actions: Use the information from the report to adjust spam filters, user alerts, or take other necessary actions to manage spam more effectively.

References

Security Dashboard

Email Log Search

Understanding the Requirement:

The scenario involves a group of users who handle sensitive information and have valuable files in their accounts.

The goal is to protect these users from targeted online attacks.

Options Analysis:

Option A: Enable 2-Step Verification for those users and recommend they use Google Authenticator

2-Step Verification (2SV) enhances security by adding an extra layer of authentication. Google Authenticator is a reliable method, but it may not be sufficient against highly targeted attacks.

Option B: Enable 2-Step Verification for those users and recommend they use SMS codes

While SMS codes are a form of 2SV, they are considered less secure than other methods due to potential vulnerabilities like SIM swapping.

Option C: Disable password recovery for end users

Disabling password recovery can prevent unauthorized access through recovery options but does not provide active protection against targeted attacks.

Option D: Enroll all accounts for those users in the Advanced Protection Program

The Advanced Protection Program (APP) is designed specifically to protect users at high risk of targeted attacks. It includes strong measures such as requiring a physical security key for login, blocking unauthorized access attempts, and restricting access to sensitive data.

Recommended Solution:

Enrolling users in the Advanced Protection Program (APP):

Step 1: Identify High-Risk Users:

Identify users who handle sensitive information and have valuable files.

Step 2: Enroll in APP:

Go to the Google Admin console.

Navigate to the Security section and find the Advanced Protection Program.

Enroll the identified high-risk users in APP.

Step 3: Implement Security Keys:

Ensure users have security keys (e.g., Titan Security Keys) for login.

Guide users through the process of setting up and using security keys.

Step 4: User Education:

Educate users on the importance of APP and how it protects their accounts.

Provide training on recognizing phishing attempts and other security best practices.

Benefits of APP:

Enhanced Security:

APP provides the highest level of security for Google accounts, requiring security keys for authentication.

Protection Against Phishing:

Security keys are highly resistant to phishing attacks, which are common in targeted online attacks.

Limited Access:

APP restricts access to sensitive data, ensuring that only trusted apps and services can interact with the protected accounts.

References:

Google Workspace Admin Help: Advanced Protection Program

Google Workspace Security: Advanced Protection Program

Google Security Blog: Advanced Protection Program

Move to Shared Drive:

Shared Drives in Google Workspace are designed to store files owned by the team or the organization rather than an individual user.

When files are moved to a Shared Drive, the ownership of those files is transferred to the domain, which means the storage quota for individual users is not affected.

To move files to a Shared Drive:

Navigate to Google Drive.

Select the files or folders to move.

Right-click and choose "Move to" and select the appropriate Shared Drive.

Transfer Ownership:

You can transfer ownership of files from one user to another within the same domain.

This is helpful if a user is running out of storage quota, as the storage used by the file will count against the new owner’s quota.

To transfer ownership:

Open the file in Google Drive.

Click on the Share button.

Add the new owner and change their role to 'Owner'.

The new owner must accept the ownership transfer.

References

Google Workspace Admin Help: Shared Drives

Google Drive Help: Transfer File Ownership

Create an Alert for External Sharing:

Access Google Admin Console: Go to admin.google.com and sign in with your administrator account.

Navigate to Rules: Go to "Security" > "Alert Center" > "Manage Rules".

Create a New Rule: Select "Create Rule" and choose "Drive Audit" as the event source.

Configure Rule Settings: Set the conditions to trigger alerts when files or folders are shared externally.

Set Notification Preferences: Configure who should receive the alerts and how they should be notified.

Save the Rule: Save and activate the rule to start receiving alerts on external sharing activities.

Create a Custom Dashboard for External Sharing:

Access Security Investigation Tool: In the Admin console, go to "Security" > "Investigation Tool".

Create a New Investigation: Click "Create" and select "Drive" as the data source.

Set Up Investigation Parameters: Define the parameters to track external sharing activities (e.g., file shared externally, users involved).

Create Dashboard: Save the investigation as a custom dashboard to continuously monitor external sharing activities.

Review and Monitor: Regularly review the dashboard and set up automated reports if necessary.

References

Google Workspace Admin Help - Create and manage alerts

Google Workspace Admin Help - Use the security investigation tool