nerdexam
Google

ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR · Question #7

Your compliance team has observed that employees at your organization are frequently resetting their passwords and is concerned about account hijacking. You need to create a solution to notify the…

The correct answer is C. Create an activity rule that is triggered by the User's password changed event. Add compliance. Google Workspace Activity Rules in the Security Investigation Tool allow you to define a trigger based on a specific log event-in this case, the 'User's password changed' event. When triggered, the rule can automatically send email notifications to designated recipients, such…

Managing Security and Compliance

Question

Your compliance team has observed that employees at your organization are frequently resetting their passwords and is concerned about account hijacking. You need to create a solution to notify the compliance team whenever a user updates or resets their password. What should you do?

Options

  • ACreate and enforce a new password policy for all users in your organization.
  • BMove all compliance team members into a separate organizational unit (OU). Create and enforce a
  • CCreate an activity rule that is triggered by the User's password changed event. Add compliance
  • DCreate a new alert by using user log events. Check that the challenge type is "Password", and add

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    79% (30)
  • D
    11% (4)

Explanation

Google Workspace Activity Rules in the Security Investigation Tool allow you to define a trigger based on a specific log event-in this case, the 'User's password changed' event. When triggered, the rule can automatically send email notifications to designated recipients, such as compliance team members. This provides real-time, automated alerting for every password change or reset with no manual monitoring required. Creating a new password policy (A) enforces rules on passwords but does not notify anyone. Moving compliance users to a separate OU (B) is unrelated to event alerting. Using the Alert Center with a 'Password' challenge type filter (D) is close but activity rules provide more precise, configurable actions and notifications than default alert policies.

Topics

#Security Monitoring#Alerts & Notifications#Google Workspace Security#Activity Rules

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice