3.2 Creating and Managing Data Loss Prevention (DLP) Rules ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which action can be configured for a DLP rule when content matches a detector?

   • ADelete the user's account
   • BBlock the message from being sent
   • CEncrypt the message with a custom key
   • DChange the user's password
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An administrator needs to create a DLP rule for Drive that detects files containing a custom project code (e.g., 'PROJ-\d{6}') and blocks external sharing. The administrator also wants to notify the user with a custom message. The project code format may change in the future. What is the best practice for the detector configuration?

   • ACreate the rule without a detector and add it later when the format is finalized.
   • BUse a custom regex detector with the pattern 'PROJ-\d{6}' and document the pattern for future updates.
   • CUse a broad regex like 'PROJ-.*' to cover all possible future formats.
   • DUse a built-in detector for project codes to avoid future updates.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company stores customer contracts in Google Drive and communicates with clients via Gmail. The security team wants to prevent sensitive customer bank account numbers from being shared externally in either service. They have already created a DLP rule with a custom regex detector for bank account numbers. What must the administrator do to apply this rule to both services?

   • AApply the rule to Drive only, then configure Gmail's 'Content compliance' settings to reference the Drive rule.
   • BEdit the existing DLP rule and enable it for both Gmail and Drive in the 'Service' settings of the rule.
   • CCreate two separate DLP rules — one for Drive and one for Gmail — because DLP rules cannot span multiple services.
   • DCreate a new DLP rule for Gmail, then use the 'Copy to Drive' action to replicate the rule configuration.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   An administrator wants to prevent a user from sending an email that contains a credit card number. Which DLP rule action should be configured?

   • ABlock
   • BNotify admin only
   • CQuarantine
   • DWarn
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A DLP rule for Gmail detects emails containing confidential legal documents. The legal team wants to be notified when this rule is triggered, in addition to the user being warned. What should the administrator configure?

   • ACreate a separate DLP rule that only alerts the legal team.
   • BAdd the legal team's email address in the 'Alert' section of the rule.
   • CConfigure the user notification to also send a copy to the legal team.
   • DSet the action to 'Quarantine' and manually forward the email to the legal team.
   Reveal Solution Discussion Select an answer first