ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR · Question #60
Your organization has detected a significant rise in unauthorized access to applications from personal devices. This poses a critical security risk and could lead to data loss. To mitigate this…
The correct answer is A. Limit apps access to company-issued devices by using context-aware access. Context-Aware Access (CAA) in Google Workspace allows administrators to enforce access policies based on device context, including whether a device is company-managed or a personal device. By creating a CAA level that requires a device to be enrolled in endpoint management…
Question
Your organization has detected a significant rise in unauthorized access to applications from personal devices. This poses a critical security risk and could lead to data loss. To mitigate this risk, you must immediately restrict user access to these applications. What should you do?
Options
- ALimit apps access to company-issued devices by using context-aware access.
- BEnable multi-factor authentication for application access.
- CEnable data loss prevention rules.
- DConfigure apps data access to Limited to only allow access to unrestricted services.
How the community answered
(29 responses)- A79% (23)
- B7% (2)
- C10% (3)
- D3% (1)
Explanation
Context-Aware Access (CAA) in Google Workspace allows administrators to enforce access policies based on device context, including whether a device is company-managed or a personal device. By creating a CAA level that requires a device to be enrolled in endpoint management (indicating it is company-issued) and applying that level to the target applications, you can immediately block access from personal devices. Option B (MFA) adds a verification factor but does not distinguish between personal and company devices. Option C (DLP rules) protects data in transit/at rest but does not restrict login access based on device type. Option D (Limited data access) restricts which services an app can access, not which devices can use the app. Context-Aware Access is the precise, targeted solution for device-based access restriction.
Topics
Community Discussion
No community discussion yet for this question.