Your security team is overwhelmed by the number of alerts from the security center. They want to prioritize alerts that indicate a real threat, such as a compromised account, and reduce noise from less critical events. What should you do?

Use the investigation tool to search for threats

Disable all alerts in the alert center

Check the security health page for threats

Review alerts in the alert center and set up activity rules to filter out low-priority events

Your company wants to be notified immediately if an administrator changes a critical security setting, such as disabling 2SV for the domain. You need to set up a monitoring solution. What should you do?

Create an activity rule for admin settings changes

Enable all alerts in the alert center

Check the security health page for setting changes

Search the audit log daily for setting changes

A user reports that they received a suspicious email with a link that they clicked. You need to determine if any other users also clicked the link. What should you do?

Use the investigation tool to search Gmail logs for link clicks

Review the alert center for link click alerts

Create an activity rule for link clicks

Google CloudAssociate Google Workspace Administrator

Domain 4Objective 2

4.2 Reporting, Auditing, and Investigating Security Risks and Events ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 3)

Part of the Managing security policies and access controls domain, which accounts for ~20% of the ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR exam.

27questions here

6free pages

6concepts

~20%of the exam

Questions 11–15

11expert · hard
Your security team is overwhelmed by the number of alerts from the security center. They want to prioritize alerts that indicate a real threat, such as a compromised account, and reduce noise from less critical events. What should you do?
Select an answer first
12foundation · easy
What is a common action an administrator can take on an alert in the Alert center?
Select an answer first
13application · medium
Your company wants to be notified immediately if an administrator changes a critical security setting, such as disabling 2SV for the domain. You need to set up a monitoring solution. What should you do?
Select an answer first
14foundation · easy
An alert in the security center indicates that a user's account may have been compromised. Which type of threat does this alert likely represent?
Select an answer first
15application · medium
A user reports that they received a suspicious email with a link that they clicked. You need to determine if any other users also clicked the link. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR” is a trademark of its owner, used for identification only.

4.2 Reporting, Auditing, and Investigating Security Risks and Events ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

Your security team is overwhelmed by the number of alerts from the security center. They want to prioritize alerts that indicate a real threat, such as a compromised account, and reduce noise from less critical events. What should you do?

What is a common action an administrator can take on an alert in the Alert center?

Your company wants to be notified immediately if an administrator changes a critical security setting, such as disabling 2SV for the domain. You need to set up a monitoring solution. What should you do?

An alert in the security center indicates that a user's account may have been compromised. Which type of threat does this alert likely represent?

A user reports that they received a suspicious email with a link that they clicked. You need to determine if any other users also clicked the link. What should you do?

Keep studying — Managing security policies and access controls