4.1 Securing User Access ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of enforcing two-step verification for organizational users?

   • ATo simplify the sign-in process for users
   • BTo reduce the number of password reset requests
   • CTo allow users to bypass password requirements
   • DTo add an extra layer of security beyond the password
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the benefit of applying a security policy to a group rather than to individual users?

   • AIt allows users to opt out of the policy
   • BIt automatically creates a backup of user data
   • CIt ensures the policy is applied consistently to all group members
   • DIt reduces the need for user training
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which attribute is commonly used in a context-aware access policy to restrict access?

   • ADevice compliance status
   • BUser's manager name
   • CUser's favorite color
   • DUser's department
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to restrict access to Google Drive for users accessing from outside the corporate network. They want to allow access only when the user is on a trusted device and from a specific IP range. What should the administrator configure?

   • ACreate a context-aware access policy that requires the user to be in a specific organizational unit and from a trusted IP range.
   • BSet a password policy that requires strong passwords and periodic changes.
   • CUse Google Session Control to limit session duration for all users.
   • DEnable two-step verification for all users and rely on that to secure access.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of setting up recovery options for a user's Google Workspace account?

   • ATo automatically reset the user's password every 30 days
   • BTo provide a way for the user to regain access if they forget their password
   • CTo enable single sign-on for the user
   • DTo allow the user to change their password without verification
   Reveal Solution Discussion Select an answer first