A security incident occurred where a user's calendar was deleted and their account password was changed. The admin suspects an admin may have done this. The admin needs to determine if any admin performed these actions and also see if the user logged in after the changes. Which combination of logs should the admin review?

Admin log and Calendar log only

Admin log, Calendar log, and User log

An organization is planning to increase storage for users who are near their limits. The admin wants to identify users who are close to their Drive storage limit and also check if any of those users have recently shared large files externally or sent large attachments via Gmail. Which set of reports should the admin use?

Storage usage report and Gmail log only

Storage usage report, Drive log, and Gmail log

Storage usage report and Drive log only

Google CloudAssociate Google Workspace Administrator

Domain 6Objective 3

6.3 Viewing, Creating, and Managing Reports and Audit Logs ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 4)

Part of the Monitoring and troubleshooting common issues domain, which accounts for ~13% of the ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR exam.

21questions here

5free pages

8concepts

~13%of the exam

Questions 16–20

16expert · hard
A security incident occurred where a user's calendar was deleted and their account password was changed. The admin suspects an admin may have done this. The admin needs to determine if any admin performed these actions and also see if the user logged in after the changes. Which combination of logs should the admin review?
Select an answer first
17foundation · easy
You need to check whether a mobile device is compliant with your organization's policies. Which audit log would provide this information?
Select an answer first
18application · medium
A user's calendar was unexpectedly shared with a large distribution list. The admin wants to find out which admin changed the calendar sharing settings and also see if any calendar events were modified around the same time. Which two logs should be reviewed?
Select an answer first
19foundation · easy
You need to determine if a user has sent an email to a specific external address. Which audit log would provide this information?
Select an answer first
20expert · hard
An organization is planning to increase storage for users who are near their limits. The admin wants to identify users who are close to their Drive storage limit and also check if any of those users have recently shared large files externally or sent large attachments via Gmail. Which set of reports should the admin use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR” is a trademark of its owner, used for identification only.

6.3 Viewing, Creating, and Managing Reports and Audit Logs ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

You need to check whether a mobile device is compliant with your organization's policies. Which audit log would provide this information?

A user's calendar was unexpectedly shared with a large distribution list. The admin wants to find out which admin changed the calendar sharing settings and also see if any calendar events were modified around the same time. Which two logs should be reviewed?

You need to determine if a user has sent an email to a specific external address. Which audit log would provide this information?

Keep studying — Monitoring and troubleshooting common issues