Google Workspace Professional Administrator — Question 72

Your company is using Google Workspace Business Plus edition, and the security team has reported several unsuccessful attempts to sign in to your Google Workspace domain from countries where you have no local employees. The affected accounts are from several executives in the main office.

You are asked to take measures to mitigate this security risk. Although budget is not a concern, your company prefers a minimal financial outlay to fix the issue, which you are tasked with managing. Which two solutions would help you mitigate the risk at minimal cost? (Choose two.)

Answer options

• A. Deploy 2-Step Verification for all users who have security keys.
• B. Deploy Google Cloud Armor on a dedicated project, and create a rule to allow access to Google Workspace only from specific locations.
• C. Upgrade to Google Workspace Enterprise Plus for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.
• D. Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.
• E. For all executives, create new accounts with random characters to match Google best practices, migrate data from the former accounts, and then delete them.

Correct answer: A, D

Explanation

Option A is correct because implementing 2-Step Verification for users with security keys enhances account security without significant cost. Option D is also correct as Cloud Identity Premium can provide Context-Aware Access, which is a cost-effective solution. Options B and C involve higher costs with Google Cloud Armor and Enterprise Plus upgrades, while option E is impractical and time-consuming.