Professional Google Workspace Administrator Exam - Question 63

Question

Your company is using Google Workspace Business Plus edition, and the security team has reported several unsuccessful attempts to sign in to your Google Workspace domain from countries where you have no local employees. The affected accounts are from several executives in the main office.

You are asked to take measures to mitigate this security risk. Although budget is not a concern, your company prefers a minimal financial outlay to fix the issue, which you are tasked with managing. Which two solutions would help you mitigate the risk at minimal cost? (Choose two.)

Examice · Accepted Answer

To mitigate the security risk at minimal cost, you can take two actions. Firstly, deploying 2-Step Verification for all users who have security keys increases account security by requiring an additional form of verification, which helps prevent unauthorized access. Secondly, subscribing to Cloud Identity Premium for all accounts enables Context-Aware Access levels to restrict access to only the countries where your company has employees. This combination enhances security and adheres to the minimal financial outlay preference.

Prosecute · Answer

minimal costs

[Removed] · Answer

Google wants us to use the mentioned services. There mitigate costs. for those choosing A, it's not proper as is only secures the accounts of employees who have security keys

dija123 · Answer

Agree, A,D make minimal cost

jcloud965 · Answer

Answers are A & D
Cloud Identity Premium is almost the cheapest option to enable Context-Aware Access on any Google Cloud license. (almost because Ent. Standard is cheaper than Business Plus + CIP)

B. Google Cloud Armor is a network security service that provides defenses against DDoS.
C. Google Workspace Enterprise Plus is too fancy. Enterprise Standard would have been a better choice with same level of features than Business Plus (Vault, Adv Mobile management, DLP and Context-Aware access) 
E. Accounts with random characters is non-sense and doesn't match any Google best practices

2shyshy · Answer

AD is correct, CIP is $7.20 per license while the Enteprise Plus suscription is $21.60.

klu23 · Answer

I would say AB... because: C is expensive and in D context-aware access is in Enterprise plans (and ID premium licenses are also an additional cost)

Jane1234YIP · Answer

AD is the correct Answer!

To mitigate the security risk of unsuccessful sign-in attempts from countries where your company has no local employees

bobsmith69 · Answer

AD - key word minimal cost so not C

zanhsieh · Answer

Vote CD. Context-Aware access only available as stated:
"Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus; Cloud Identity Premium."
A: No. The customer might not request 2SV but still want to restrict locations. Plus, no info that enabling Identity Premium needs 2SV.
B: No. Workspace is a SaaS; Google Cloud Armor can't intercept it.
E: No. Not relevant.
https://support.google.com/a/answer/9275380?sjid=1346886938548748908-AP

virat_kohli · Answer

A. Deploy 2-Step Verification for all users who have security keys.
D. Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

AGHPE · Answer

Deploy 2-Step Verification for all users who have security keys AND Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

Professional Google Workspace Administrator Exam - Question 63

Discussion