Google Updated Google-Workspace-Administrator Exam Questions and Answers by samson

Access Admin Console: Go to admin.google.com and sign in with your admin account.

Navigate to Reports: In the Admin console, go to Reports > Audit > Login.

Review Login Activity: Look for any unusual or suspicious login attempts, such as logins from unknown IP addresses or locations.

Investigate Further:

Check the user’s activity for any signs of unauthorized access or unusual behavior.

Use the Security Audit Log to find more details about the login attempts and other security events.

Take Appropriate Actions:

If unauthorized activity is confirmed, consider resetting the user’s password and enabling two-factor authentication (2FA).

Notify the user and possibly suspend the account if the threat level is high until the issue is resolved.

By investigating the login and security logs, you can identify and mitigate potential security threats effectively.

References

View and analyze security reports and logs

Audit and investigation page

Access Status Dashboard: Open the Google Workspace Status Dashboard.

Check Service Status: Look for any reported issues or outages specifically for Gmail.

Verify Timing: Check the timing of the reported issues to see if they correlate with the time when users reported problems.

Additional Information: Review any additional details or updates provided by Google regarding the service disruption.

Communicate Status: Inform the affected users about the service status and any expected resolution time.

Open Ticket if Necessary: If no issues are reported on the status dashboard, proceed with other troubleshooting steps such as checking network connectivity or opening a ticket with Google Support.

References:

Google Workspace Status Dashboard

Identify Suspicious Login Activity:

Google Workspace triggers a suspicious login activity alert when a user signs in from an unusual location or device that is not part of their regular sign-in pattern.

Review Alerts:

Go to the Google Workspace Admin console.

Navigate to "Security" > "Dashboard" > "Suspicious login activity".

Review the details of the alert to determine the nature of the suspicious login.

Take Appropriate Actions:

Investigate the alert to ensure that the login attempt is legitimate.

If the login is deemed suspicious, follow security protocols to secure the user account, such as resetting the password or enabling two-factor authentication.

References

Google Workspace Admin Help: Review security alerts

Access the Transfer Tool:

In the Google Workspace Admin console, navigate to "Users" > "Transfer tool for unmanaged users".

Identify Conflict Accounts:

Use the tool to search for unmanaged users (conflict accounts) that have email addresses matching your company domain.

Send Transfer Requests:

Send transfer requests to the identified unmanaged users, asking them to transfer their accounts to your Google Workspace domain.

Complete the Transfer:

Guide the users through the transfer process to ensure their accounts are moved to the managed Google Workspace environment.

Verify the transfer completion and resolve any remaining conflicts.

References

Google Workspace Admin Help: Transfer tool for unmanaged users