ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR · Question #3
Your organization is concerned about unauthorized access attempts. You want to implement a security measure that makes users change their password if there are twenty or more failed login attempts…
The correct answer is B. Create an activity rule for user log events, define a time period and threshold, and select an Action. In Google Workspace, Activity Rules in the Security Investigation Tool let administrators monitor user log events (including failed login attempts), set a time window (e.g., 1 hour) and a threshold (e.g., 20 events), and automatically trigger an action such as requiring a…
Question
Your organization is concerned about unauthorized access attempts. You want to implement a security measure that makes users change their password if there are twenty or more failed login attempts within one hour. You want to use the most effective and efficient approach. What should you do?
Options
- ASet up a Chrome action rule to restrict users from defined ChromeOS actions after twenty failed
- BCreate an activity rule for user log events, define a time period and threshold, and select an Action
- CCreate an activity rule for live-state data sources that meets the required time period and threshold
- DEnable email alerts to notify users that they need to change their password.
How the community answered
(52 responses)- A4% (2)
- B81% (42)
- C6% (3)
- D10% (5)
Explanation
In Google Workspace, Activity Rules in the Security Investigation Tool let administrators monitor user log events (including failed login attempts), set a time window (e.g., 1 hour) and a threshold (e.g., 20 events), and automatically trigger an action such as requiring a password change or suspending the account. This is a fully automated, event-driven approach-the most effective and efficient method. Email alerts (D) are passive and require the user to act manually. Chrome action rules (A) govern ChromeOS device actions, not login security. Live-state data source rules (C) apply to specific data-level monitoring, not authentication log events.
Topics
Community Discussion
No community discussion yet for this question.