A company is evaluating whether to enforce stricter mobile device policies. The admin wants to see which devices are non-compliant, which users are actively using a specific mobile app, and whether those users have logged in recently. Which combination of logs/reports should the admin use?

Mobile Audit log and User log only

Mobile Audit log and Apps usage report only

Apps usage report and User log only

Mobile Audit log, Apps usage report, and User log

An executive's calendar was deleted, and the admin suspects it was done by a user who also shared a sensitive file and sent a suspicious email. The admin wants to confirm the calendar deletion, check if the user shared the file, and see if the user sent the email. Which combination of logs should the admin review?

Calendar log, Drive log, and Gmail log

Calendar log and Gmail log only

Calendar log and Drive log only

Google CloudAssociate Google Workspace Administrator

Domain 6Objective 3

6.3 Viewing, Creating, and Managing Reports and Audit Logs ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 3)

Part of the Monitoring and troubleshooting common issues domain, which accounts for ~13% of the ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR exam.

21questions here

5free pages

8concepts

~13%of the exam

Questions 11–15

11application · medium
A security admin suspects that an administrator recently changed a user's password without authorization. The admin also wants to check if the affected user logged in successfully after the change. Which two audit logs should be reviewed?
Select an answer first
12application · medium
An employee suspects that an admin changed their Gmail forwarding settings without permission. The admin wants to verify if any forwarding rule was added and also check if any admin recently modified Gmail settings. Which two logs should be reviewed?
Select an answer first
13expert · hard
A company is evaluating whether to enforce stricter mobile device policies. The admin wants to see which devices are non-compliant, which users are actively using a specific mobile app, and whether those users have logged in recently. Which combination of logs/reports should the admin use?
Select an answer first
14application · medium
A manager reports that a meeting invite was deleted from a shared calendar, and no one admits to doing it. The admin needs to determine who deleted the event and whether any admin recently changed calendar sharing settings. Which two logs should the admin check?
Select an answer first
15expert · hard
An executive's calendar was deleted, and the admin suspects it was done by a user who also shared a sensitive file and sent a suspicious email. The admin wants to confirm the calendar deletion, check if the user shared the file, and see if the user sent the email. Which combination of logs should the admin review?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR” is a trademark of its owner, used for identification only.

6.3 Viewing, Creating, and Managing Reports and Audit Logs ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

A security admin suspects that an administrator recently changed a user's password without authorization. The admin also wants to check if the affected user logged in successfully after the change. Which two audit logs should be reviewed?

An employee suspects that an admin changed their Gmail forwarding settings without permission. The admin wants to verify if any forwarding rule was added and also check if any admin recently modified Gmail settings. Which two logs should be reviewed?

A company is evaluating whether to enforce stricter mobile device policies. The admin wants to see which devices are non-compliant, which users are actively using a specific mobile app, and whether those users have logged in recently. Which combination of logs/reports should the admin use?

A manager reports that a meeting invite was deleted from a shared calendar, and no one admits to doing it. The admin needs to determine who deleted the event and whether any admin recently changed calendar sharing settings. Which two logs should the admin check?

Keep studying — Monitoring and troubleshooting common issues