vmartinez

 

Which access method does NOT allow enforcement of policy controls on iOS devices by Google Workspace?

 

• Google-provided Gmail app
• Google Sync (Microsoft ActiveSync)
• Adding an account type of “Google” through the Mail, Calendar, and Contacts menu
• iOS Sync

 

 

A customer has set the Google session control expiration for 8 hours, but reports that users are not being prompted to re-authenticate as expected. What are the two possible causes of this issue?

 

Select 2 Correct Responses

• The session timeout setting on a third party SSO provider is set longer than the Google session configuration

• Users reporting the issue are on mobile devices which are not subject to the authentication timeout

• An IP whitelist has been configured which takes priority over the session control
• Only Gmail and Drive are subject to session control and user’s are probably using other services
• Users are members of an administrative role that is not subject to session timeout length

 

 

An organization’s MX record points to an inbound mail gateway (gateway1) that must relay all messages through a second gateway (gateway2) before sending messages to Gmail. What are the two Google recommended settings in this architecture?

 

Select 2 Correct Responses

• Check “Automatically detect external IP” in the Inbound gateway configuration.
• Add the IP address for gateway1 to the Inbound gateway setting.
• Add IP addresses for both gateway1 and gateway2 to the email whitelist.
• Add IPs for both gateway1 and gateway2 to the Inbound gateway setting.
• Ensure that all inbound messages receive a custom header to bypass Google spam checks

 

 

An organization has provisioned all of their employees in Google Workspace and pointed their MX records to Google. They want to configure email for some users to be delivered in Gmail, while email for other users is delivered to a legacy mail system. What should they do?

 

• Set up split delivery in their legacy mail system and forward all Google Workspace user mail to aspmx.l.google.com
• Create a Google Group for all legacy mail system users and place the group in an organizational unit that has a “Default Routing” setting to the legacy mail system.
• Add legacy mail system users to an organizational unit and configure a Routing setting to direct mail to the legacy system.
• Place all legacy users in an organizational unit and configure the outbound gateway to the IP address of the legacy mail system.

 

 

A customer wants to disable all the Google Workspace marketplace applications that access Drive and Gmail. What is the recommended approach to disabling users from adding applications that access Drive and Gmail?

 

• Use the Google Workspace Admin console to disable all OAuth access to the selected services
• Set an alert for all installations of Marketplace applications to trigger an action to suspend a user until the application is removed
• Use the Admin SDK API to run a script that removes access to all applications on a scheduled basis
• Disable users from installing applications in the Marketplace in the Google Workspace Admin console

 

 

Which two types of data CANNOT be retained using Google Workspace Vault?

 

Select 2 Correct Responses

• Off-the-record Chat conversations
• Email
• On-the-record Chat conversations
• Google Sheets
• Calendar Entries
• Google Slides