4.2 Reporting, Auditing, and Investigating Security Risks and Events ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common security threat that the Google Workspace security center can alert administrators about?

   • ANetwork latency
   • BBilling overage
   • CPhishing emails
   • DHardware failure
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of creating an activity rule in Google Workspace?

   • ATo block external emails
   • BTo monitor specific user actions and trigger alerts
   • CTo automatically delete user accounts
   • DTo change user passwords
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   Your organization has a security operations center (SOC) that needs to quickly identify and respond to security incidents. They want a centralized view of all security alerts and the ability to investigate them. What should you recommend?

   • AUse the security center overview page to view alerts and the investigation tool to investigate them
   • BSearch the audit log for all events
   • CUse the security health page to view alerts
   • DCreate activity rules for all possible threats
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   Your security team receives too many low-priority alerts from an activity rule that monitors failed login attempts. They want to reduce noise while still being notified of potential brute-force attacks. What should you do?

   • ADelete the activity rule
   • BModify the activity rule to require a higher threshold, such as 10 failed attempts within 5 minutes
   • CChange the alert severity to low
   • DDisable the alert center
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   Your security team has identified a pattern of phishing emails that bypassed the spam filter. They want to be alerted immediately if similar emails are detected in the future. What should you do?

   • AEnable all alerts in the alert center
   • BCreate an activity rule that triggers an alert when emails matching the phishing pattern are detected
   • CCheck the security health page for spam filter settings
   • DUse the investigation tool to search for similar emails
   Reveal Solution Discussion Select an answer first