Google-Workspace-Administrator 無料問題集「Google Cloud Certified - Professional Google Workspace Administrator」

（A）Enable confidential mode for Gmail. Instruct employees to use confidential mode when sending messages to the banks.

（B）Configure Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) authentication for your email domains.

（C）Set up Transport Layer Security (TLS) compliance for inbound and outbound messages with a list of the banks' email domains. Validate the TLS connections.

（D）Enable Protect against unauthenticated emails in Gmail Safety.

（A）Configure the allowed list of apps in the Devices page in the apps and extensions settings.

（B）Configure the Chrome user setting to require users to sign in to use Chrome apps and extensions.

（C）Configure the Policy Precedence to override the domain-wide policy applied for apps and extensions.

（D）Require 2SV for user logins.

（A）Assign Gemini licenses to each user in the marketing and sales departments.

（B）Enable Gemini for the entire organization. Instruct users in other departments not to use Gemini.

（C）Create a script to assign a Gemini license to new users if they are in marketing or sales. Run the script daily.

（D）Create an organizational unit (OU) for marketing and sales. Assign the Gemini licenses to that OU, and enable Gemini for that OU only.

（A）Create and enforce a new password policy for all users in your organization.

（B）Create a new alert by using user log events. Check that the challenge type is "Password", and add the compliance team as email recipients.

（C）Create an activity rule that is triggered by the User's password changed event. Add compliance team members as email recipients.

（D）Move all compliance team members into a separate organizational unit (OU). Create and enforce a new password policy for the members of this OU.

（A）Use a third-party mobile device management (MDM) solution to manage the device.

（B）Implement Google's basic management solution for the mobile device.

（C）Allow the employee to use their personal device without enrolling it in any mobile device management (MDM) solution.

（D）Implement Google's advanced management solution for the mobile device.

（A）Suspend former employee's Workspace account.

（B）Reset the password of the former employee and keep their Workspace license active.

（C）Delete the former employee's Workspace account.

（D）Switch the license type of the former employee's Workspace account to an Archived User license.

（A）Create a dynamic group for each region by setting the location as a condition.

（B）Create a Google Group for each region and add the respective employees to the appropriate group.

（C）Create a security group for each region, and apply the location label to allow employees to join based on their region.

（D）Create a Google Group for each region and set permissions that allow employees to discover and join the groups.

（A）Disable spam filtering for all users.

（B）Adjust the organization's mail content compliance settings in the Admin console.

（C）Contact Google Workspace support and report a suspected system-wide spam filter malfunction.

（D）Advise users to individually allowlist senders.

（A）Implement a third-party data governance tool that integrates with Drive and provides advanced classification capabilities.

（B）Create data loss prevention (DLP) rules for Drive. Configure the rules to apply Drive labels based on content.

（C）Add users into organizational units (OUs). Configure default file classification in Drive for the desired OUs.

（D）Apply Drive labels based on content. Use Google Vault to create retention rules based on Drive labels, ensuring that data is kept for the required duration.