Your organization's security team has published a list of vetted third-party apps and extensions that can be used by employees. All other apps are prohibited unless a business case is presented and approved. The Chrome Web Store policy applied at the top-level organization allows all apps and extensions with an admin blocklist. You need to disable any unapproved apps that have already been installed and prevent employees from installing unapproved apps. What should you do?

• A. Disable the Chrome Web Store service for the top-level organizational unit. Enable the Chrome Web Store service for organizations that require Chrome apps and extensions.
• B. Change the Chrome Web Store allow/block mode setting to block all apps, admin manages allowlist. Add the apps on the security team's vetted list to the allowlist.
• C. Change the Chrome Web Store allow/block mode setting to allow all apps, admin manages blocklist, In the App access control card, block any existing web app that is not on the security team's vetted list.
• D. Disable Extensions and Chrome packaged apps as Allowed types of apps and extensions for the top-level organizational unit. Selectively enable the appropriate extension types for each suborganization

Your organization requires enhanced privacy and security when sending messages to banks and other financial institutions. Your organization uses Gmail, but the banks use various other email providers. You need to maximize privacy and limit access to messages sent and received between your organization and the banks. What should you do?

• A. Set up Transport Layer Security (TLS) compliance for inbound and outbound messages with a list of the banks' email domains. Validate the TLS connections.
• B. Enable confidential mode for Gmail. Instruct employees to use confidential mode when sending messages to the banks.
• C. Configure Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) authentication for your email domains.
• D. Enable Protect against unauthenticated emails in Gmail Safety.

Your company's security team has requested two requirements to secure employees' mobile devices-enforcement of a passcode and remote account wipe functionality. The security team does not want an agent to be installed on the mobile devices or to purchase additional licenses.
Employees have a mix of iOS and Android devices. You need to ensure that these requirements are met. What should you do?

• A. Set up advanced management for both iOS and Android devices.
• B. Set up advanced mobile management for iOS devices and basic mobile management for Android devices.
• C. Set up basic management for both iOS and Android devices.
• D. Implement a third-party enterprise mobility management (EMM) provider.

Your company's legal department has issued a litigation hold that requires you to preserve all data related to a specific project. You need to ensure that all data for this project, including emails, documents, and chats, are preserved indefinitely and cannot be deleted by users. What should you do?

• A. Create a hold in Google Vault that includes all users and data sources associated with the project.
• B. Assign an Archived User license to all users involved in the project.
• C. Export all project related data from Google Workspace and store the data in a separate, secure location.
• D. Set up a retention rule in Google Vault that retains all data from Gmail and Drive indefinitely.

A user is experiencing intermittent issues accessing their Gmail inbox. Sometimes their Gmail loads slowly, and other times the user encounters error messages that haven't been documented.
You need to effectively troubleshoot this recurring problem. What should you do?

• A. Instruct the user to generate a HAR file the next time they experience slowness or an error.
• B. Check the Google Workspace Status Dashboard for any reported service disruptions.
• C. Instruct the user to try to access Gmail from another device or network to see if the issue persists.
• D. Instruct the user to clear their browser cache and cookies.