You recently noticed a suspicious trend in your organization's Google Drive usage. Several users have shared sensitive documents outside the organization, potentially violating your company's data security policy. You need to identify the responsible users and the extent of the unauthorized sharing. What should you do?
The core of the problem is to identify the responsible users and the extent of past unauthorized sharing. The Security Investigation Tool is designed precisely for this purpose. It allows administrators to search and analyze various audit logs, including Drive logs, to pinpoint specific events, users, and data.
Here's why the other options are less appropriate as the first or most direct action for this specific problem:
A . Review the organization's sharing policies in the Admin console, and update the policies to prevent external sharing. This is a crucial preventative measure for the future, and a necessary step after identifying the scope of the problem. However, it won't help you identify who shared what in the past.
B . Use the security health page to identify misconfigured sharing settings in Drive. The security health page provides an overview of your security posture and can highlight general misconfigurations. While useful for identifying potential vulnerabilities, it won't give you the granular details of specific users and shared documents that have already occurred, which is what the question asks for.
D . Create an activity rule in the Security Center to alert you of future external sharing events. Similar to option A, this is a future-oriented preventative and monitoring measure. It will help catch future violations but won't provide information about the past unauthorized sharing that has already happened.
Reference from Google Workspace Administrator:
Security investigation tool: This tool is explicitly designed for identifying, triaging, and taking action on security issues. It allows administrators to search and analyze logs from various Google Workspace services, including Drive, to investigate specific events like external sharing.
Drive audit log events: The security investigation tool leverages audit logs. Drive audit logs capture events such as document sharing, changes in sharing permissions, and access.
Your company's sales team writes many business proposals in Google Docs. They want to streamline the proposal process by using templates. You need to create a document template with pre-populated sections that the sales team can access. What should you do?
To create document templates with pre-populated sections that the sales team can easily access and use to streamline their proposal process, the most efficient and centrally managed approach is to utilize the Google Workspace template gallery. This involves enabling organization branding (though not strictly required for basic templates, it's often associated with organizational templates) and then adding the created templates to the default themes and templates for the entire organization or specific groups.
Here's a breakdown of why option C is correct and why the others are not the ideal solutions:
C . Enable organization branding in the Admin console. Create the templates in Google Drive. Add the templates to default themes and templates for the entire organization.
This option leverages the built-in template gallery feature of Google Workspace. By creating the templates in Google Docs (which are stored in Google Drive) and then adding them to the organization's default themes and templates through the Google Admin console, you make these templates easily discoverable by all users (or a specific organizational unit) when they go to create a new document from the template gallery. Enabling organization branding can help customize the look and feel, but the crucial part is adding the templates to the gallery.
Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation provides detailed instructions on 'Create and manage document templates for your organization.' This documentation explains how to prepare a document as a template in Google Drive and then submit it through the Admin console to the template gallery, making it available to users within the organization. Topics covered include:Submitting templates to your organization's gallery: This process involves going to Apps > Google Workspace > Drive and Docs > Templates in the Admin console.
Setting up a custom template gallery: The documentation guides administrators on how to manage the templates that appear for their users.
Organizational units: Templates can often be made available to specific organizational units, allowing for tailored templates for different teams like the sales team.
A . Create the templates in Google Drive. Grant edit access to the sales team.
Granting edit access to the sales team on the master templates is problematic. It could lead to accidental or intentional modifications of the original templates, causing inconsistencies and requiring ongoing management to ensure the templates remain in their intended state. Users should ideally create copies of the template to work on, leaving the original template untouched.
Associate Google Workspace Administrator topics guides or documents reference: Best practices for file sharing and collaboration in Google Drive emphasize providing appropriate levels of access. For templates, the goal is usually for users to use the template to create new documents, not to edit the original.
B . Create the templates in Google Drive. Make a copy for each sales representative. Transfer ownership of each template to the sales representatives.
This approach is inefficient and difficult to manage. Creating and transferring ownership of individual copies of the template to each sales representative would be time-consuming for the administrator. Furthermore, if the template needs to be updated, each individual copy would need to be modified, leading to version control issues and inconsistencies across the sales team.
Associate Google Workspace Administrator topics guides or documents reference: Google Drive's sharing and ownership features are designed for collaborative work on documents, not for distributing and managing templates in this manner. Centralized management through the template gallery is the recommended method.
D . Create the templates in Google Drive and download the files as PDFs. Upload PDF files to a drive shared with your sales team.
Saving the templates as PDFs defeats the purpose of having editable templates. The sales team would not be able to easily modify the pre-populated sections or add their specific proposal details to a PDF. Templates are meant to be starting points for new, editable documents.
Associate Google Workspace Administrator topics guides or documents reference: Google Docs is designed for creating and editing documents. Templates are a feature within this editable format, allowing users to start with a pre-structured document that they can then customize. PDFs are for final, non-editable versions.
Therefore, the correct approach is to leverage the Google Workspace template gallery to provide a streamlined and centrally managed way for the sales team to access and use the proposal templates. This is achieved by creating the templates in Google Drive and then adding them to the organizational templates through the Admin console. While enabling organization branding is mentioned in option C, the core functionality relies on the template gallery feature.
You've received multiple reports about a suspicious email from someone who is pretending to be from your organization's human resources department. The email is prompting employees to click a link for a password update. You want to remediate this sender's emails. What should you do?
The security investigation tool allows you to search for and take action on suspicious emails within your organization. Marking the email as phishing helps to flag the email as malicious and prevents further emails from the same sender from being delivered to users' inboxes. This also ensures that the email is properly categorized for review and investigation by your security team.
A team of temporary employees left your organization after completing a shared project. Per company policy, you need to disable their Google Workspace accounts while preserving all project data and related communications in Google Vault for a minimum of two years. You want to comply with this policy while minimizing cost. What should you do?
Google Workspace offers Archived User licenses, which allow you to retain access to the data and communications of former employees without paying for a full user license. This option ensures compliance with the policy of retaining project data and communications in Google Vault while minimizing costs by avoiding unnecessary full user licenses.
You've received multiple reports about a suspicious email from someone who is pretending to be from your organization's human resources department. The email is prompting employees to click a link for a password update. You want to remediate this sender's emails. What should you do?
The security investigation tool allows you to search for and take action on suspicious emails within your organization. Marking the email as phishing helps to flag the email as malicious and prevents further emails from the same sender from being delivered to users' inboxes. This also ensures that the email is properly categorized for review and investigation by your security team.
Keneth
12 days agoMagdalene
19 days agoClaribel
27 days agoSalley
1 month agoWalker
1 month agoGayla
2 months agoHorace
2 months agoChantell
2 months agoTequila
2 months agoFelicidad
3 months agoBrandee
3 months agoEttie
3 months agoBernardo
3 months agoMargurite
4 months agoRicarda
4 months agoNovella
4 months agoAnnette
4 months agoPaulina
5 months agoGolda
5 months agoGlendora
5 months agoJesus
5 months agoClarence
6 months agoBettina
6 months agoDottie
6 months agoGeraldine
6 months agoNadine
7 months agoDahlia
7 months agoMagda
7 months agoRoosevelt
7 months agoFrance
7 months agoEmelda
9 months agoNickie
10 months agoKati
11 months agoTitus
1 year agoFidelia
1 year agoOren
1 year agoZona
1 year ago