Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new "G-Team." A "G-Team' is composed of a Google Group and a Team Drive/ Secondary Calendar that is shared using that Google Group.
What two design decisions are required to implement this workflow securely? (Choose two.)

• A.The Google Form will need to enforce Group naming conventions.
• B.The Apps Script will need to run as a Google Workspace admin.
• C.The Apps Script will need to run on a timed interval to process new entries.
• D.The Google Form will need to be limited to internal users only.
• E.You will need a Cloud SQL instance to store "G-Team' data.

Comment: *

Name: *

Email: *

Verification: *

You have configured SSO using a third-party IDP with your Google Workspace domain. An end user has reported that they cannot sign in to Google Workspace after their username was changed in the third-party SSO product. They can sign in to their other internal applications that use SSO. and no other users are experiencing issues signing in. What could be causing the sign-in issue?

• A.The user's Google password was changed administratively, which is causing a sign-in failure.
• B.The issued certificate for that user has been revoked and must be updated before the user can have another successful sign in.
• C.The SAML assertion provided by the third-party IDP is presenting a username that conflicts with the current username configured in Google Workspace.
• D.The SAML assertion is providing the user's previous password attached to their old username.

Comment: *

Name: *

Email: *

Verification: *

Your employer, a media and entertainment company, wants to provision Google Workspace Enterprise accounts on your domain for several world-famous celebrities. Leadership is concerned with ensuring that these VIPs are afforded a high degree of privacy. Only a small group of senior employees must be able to look up contact information and initiate collaboration with the VIPs using Google Workspace services such as Docs, Chat, and Calendar.
You are responsible for configuring to meet these requirements. What should you do?

• A.In the Users list, find the VIPs and turn off the User setting "Directory Sharing."
• B.Create a Group for the VIPs and their handlers, and set the Group Access Level to Restricted.
• C.In Directory Settings, disable Contact Sharing.
• D.Create separate Custom Directories for the VIPs and regular employees.

Comment: *

Name: *

Email: *

Verification: *

The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in. What else can you do to increase your organization's defense-in-depth strategy?

• A.Implement an IP block on the malicious user's IPs under Security Settings in the Admin Console.
• B.Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.
• C.Enforce higher complexity passwords by rolling it out to the affected users.
• D.Use Mobile device management geo-fencing to prevent malicious actors from using these stolen credentials.

Comment: *

Name: *

Email: *

Verification: *

Your-company.com recently bought 2500 Chrome devices and wants to distribute them to various teams globally. You decided that enterprise enrollment would be the best way to enforce company policies for managed Chrome devices. You discovered that Chrome devices currently end up in the top-level organization unit, and this needs to change to the organizational unit of the device administrator.
What should you do?

• A.Change Enrollment Permissions to only allow users in this organization to re-enroll existing devices.
• B.Change Enrollment Controls to Place Chrome device in user organization.
• C.Change Enrollment Controls to Keep Chrome device in current location.
• D.Change Enrolment Permissions to not allow users in this organization to enroll new devices.

Comment: *

Name: *

Email: *

Verification: *