Exam Google-Workspace-Administrator Topic 5 Question 17 Discussion
Actual exam question for Google's Google-Workspace-Administrator exam
Question #: 17
Topic #: 5
Question #: 17
Topic #: 5
A user does not follow their sign-in pattern and signs In from an unusual location As an admin, what should you do in response to this alert for this user during this investigation?
Suggested Answer: D Vote an answer
* Access Admin Console: Go to admin.google.com and sign in with your admin account.
* Navigate to Reports: In the Admin console, go to Reports > Audit > Login.
* Review Login Activity: Look for any unusual or suspicious login attempts, such as logins from unknown IP addresses or locations.
* Investigate Further:
* Check the user's activity for any signs of unauthorized access or unusual behavior.
* Use the Security Audit Log to find more details about the login attempts and other security events.
* Take Appropriate Actions:
* If unauthorized activity is confirmed, consider resetting the user's password and enabling two-factor authentication (2FA).
* Notify the user and possibly suspend the account if the threat level is high until the issue is resolved.
By investigating the login and security logs, you can identify and mitigate potential security threats effectively.
References
* View and analyze security reports and logs
* Audit and investigation page
* Navigate to Reports: In the Admin console, go to Reports > Audit > Login.
* Review Login Activity: Look for any unusual or suspicious login attempts, such as logins from unknown IP addresses or locations.
* Investigate Further:
* Check the user's activity for any signs of unauthorized access or unusual behavior.
* Use the Security Audit Log to find more details about the login attempts and other security events.
* Take Appropriate Actions:
* If unauthorized activity is confirmed, consider resetting the user's password and enabling two-factor authentication (2FA).
* Notify the user and possibly suspend the account if the threat level is high until the issue is resolved.
By investigating the login and security logs, you can identify and mitigate potential security threats effectively.
References
* View and analyze security reports and logs
* Audit and investigation page
by Veronica at May 04, 2026, 09:42 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).