三叉戟

领域专家的成长记录

用户工具

站点工具

您的足迹:
resources:courses:gws_c2

差别

这里会显示出您选择的修订版和当前版本之间的差别。

到此差别页面的链接

两侧同时换到之前的修订记录前一修订版
后一修订版		前一修订版
resources:courses:gws_c2 [2025/01/22 21:56] – jackiezresources:courses:gws_c2 [2025/01/23 13:43] (当前版本) – jackiez
行 148: 行 148:
   - Locations   - Locations
   - **Buildings**   - **Buildings**
 +
 ## 练习1 ## 练习1
 允许用户将资料分享给外部，但不允许发布到网上。内部分享，则是只要有Link就可以查看。 允许用户将资料分享给外部，但不允许发布到网上。内部分享，则是只要有Link就可以查看。
行 159: 行 160:
   - 文档的链接不容易出现在搜索结果中（如果大家都用Notion的话，这个搜索结果有可能包含文档链接）   - 文档的链接不容易出现在搜索结果中（如果大家都用Notion的话，这个搜索结果有可能包含文档链接）
 <note>分享设置优先于共享Drive的外部分享设置，如果对公司全体禁用了外部分享，那么共享Drive的管理者（Manager）也不能开共享，即使他们可以改设定</note> <note>分享设置优先于共享Drive的外部分享设置，如果对公司全体禁用了外部分享，那么共享Drive的管理者（Manager）也不能开共享，即使他们可以改设定</note>
-<note></note> 
 {{:resources:courses:pasted:20250122-213420.png}} {{:resources:courses:pasted:20250122-213420.png}}
 设定白名单，会自动跳转到这里 设定白名单，会自动跳转到这里
行 181: 行 181:
 允许文档的离线访问 允许文档的离线访问
 对于海外出差的人来说，这个就类似于本地保存（DSFolder) 对于海外出差的人来说，这个就类似于本地保存（DSFolder)
 +{{:resources:courses:pasted:20250122-215711.png}}
 +默认是打开的
 +参考资料：[[https://support.google.com/docs/answer/6388102]]
 +问题：Sam可以使用Firefox来访问他的离线文档吗？
 +  - 不可以，必须使用Chrome或是Edge浏览器，且不要使用无痕浏览。
 +
 +问题：Sam需要安装什么app
 +  - 需要安装Google文档离线功能的Chrome扩展
 +
 +问题：Sam需要采取哪些步骤
 +  - 打开GoogleDrive
 +  - 设置，离线设置  
 +{{:resources:courses:pasted:20250122-220205.png}}
 +{{:resources:courses:pasted:20250122-220228.png}}
 +## 练习5
 +谷歌硬盘桌面版，允许用户自己安装。
 +{{:resources:courses:pasted:20250122-220951.png}}                                                                                                                                                                   
 +{{:resources:courses:pasted:20250122-221029.png}}
 +## 练习6
 +创建共享Drive
 +{{:resources:courses:pasted:20250122-221523.png}}
 +使用Tim的账号创建共享Drive
 +{{:resources:courses:pasted:20250122-221558.png}}
 +然后添加共享对象
 +<note>如果禁止同外部分享，则所有包含外部用户的Drive也会断开外部访问</note>
 +## 练习7
 +{{:resources:courses:pasted:20250122-222214.png}}
 +在Drive and Docs>Mange shared drives处可以管理所有共享Drive，设定里可以允许Managers来修改设定。
 +这里取消勾选，然后保存。
 +再用Tim账号登录，发现已经变成灰色，不能更改了。
 +{{:resources:courses:pasted:20250122-222547.png}}
 +{{:resources:courses:pasted:20250122-222355.png}}
 +## 测试4
 +<q>Your company allows external sharing of documents but your CEO is concerned about how documents are shared externally. As the administrator, which additional protections might you put in place? (Choose 2)</q>
 +  - **Require a Google sign in when viewing a shared file**
 +  - **Enable the feature that warns users when sharing outside the organization**
 +  - Allow users to share publicly
 +  - Ensure users are only allowed to share with users in the global directory.
 +
 +<q>Your company wants to adopt the policy that new documents will be shared internally with everyone in the company. This way users won’t have to explicitly share new documents with others. What’s the recommended way to set this up?</q>
 +  - Have users save their docs to a Google Group that everyone belongs to
 +  - Have users save their docs to a shared drive that everyone belongs to
 +  - **Change Link Sharing Defaults to "ON - Primary target audience with the link"**
 +  - Have users save their docs to a My Drive folder that is shared with everyone
 +
 +<q>From which places can you transfer file ownership from one user to another? (Choose 2)</q>
 +  - From the user's My Drive folder
 +  - The user's profile in the admin console
 +  - **From the Drive and Docs service settings page**
 +  - **When deleting a user from the admin console**
 +
 +<q>A user left your company last month and you deleted their Google Workspace account 15 days ago. You have been contacted as the administrator and asked if you can recover the deleted user's documents. What should you do?</q>
 +  - Advise the requester that you cannot restore a deleted user's files.
 +  - Advise the requestor that 14 days after account deletion, all data is purged so you cannot recover any documents
 +  - **Restore the user, transfer the files to a new owner, and delete the user again.**
 +  - Restore the files from the deleted user's account
 +
 +<q>Which of the following actions can you NOT take as administrator from the Managed shared drives area in the admin console?</q>
 +  - **View drive contents**
 +  - Manage members
 +  - Delete a shared drive
 +  - Restore a deleted drive or files
 +  - Manage shared drive sharing settings
 +
 +## 练习1
 +设定MobileDevicePolicis
 +背景是公司要搞BYOD
 +{{:resources:courses:pasted:20250122-224201.png}}
 +{{:resources:courses:pasted:20250122-224358.png}}
 +{{:resources:courses:pasted:20250122-224437.png}}
 +{{:resources:courses:pasted:20250122-224547.png}}
 +{{:resources:courses:pasted:20250122-224657.png}}
 +## 练习2
 +登录一个MobileDevice
 +这个练习只适合于安卓手机，所以跳过（公司也全换成苹果手机了）
 +## 练习3
 +处理纷失或被入侵手机
 +这个也没有实操条件，略
 +## 测试5
 +<q>What icon do you click on the admin console in order to access the Google Device Management toolset?</q>
 +  - Apps
 +  - Company profile
 +  - Mobile Management
 +  - **Devices**
 +
 +<q>Which of the following features are only available in advanced management? (Choose 2)</q>
 +  - **Android work profiles**
 +  - **Device approvals**
 +  - Android app management
 +  - Remote account wipe
 +
 +<q>How can you automatically manage a device that falls out of compliance with your organization's policies?</q>
 +  - Add a compliance rule
 +  - **Add a device management rule**
 +  - Add a data loss prevention (DLP) rule
 +  - Any of the options here
 +
 +<q>An end user in your organization has lost their device. This is a personal device with a work profile. Based on this training, what would be your next step?</q>
 +  - Suspend the user
 +  - Immediately get your user a new mobile device
 +  - **Wipe the device to remove the user's work profile**
 +  - Ask the user where they think they lost the device, and wait for them to find it
 +
 +## Google Vault
 +主要用于组织数据的Archive和E-Discovery和法令要求，它支持Gmail,Drive,Chat,Meet,Groups等
 +## 练习1
 +{{:resources:courses:pasted:20250122-230843.png}}
 +{{:resources:courses:pasted:20250122-231045.png}}
 +{{:resources:courses:pasted:20250122-231052.png}}
 +这是对高管们的Gmail，对一般用户，执行1年有效
 +{{:resources:courses:pasted:20250122-231219.png}}
 +## 练习2
 +在Vault中，Matter是一个容器，保存某一主题相关的所有数据，比如公司内调查，它包括
 +  - Saved search queries
 +  - A list of accounts with data on litigation hold
 +  - A list of the accounts that can access the matter
 +  - Export sets for the matter
 +  - An audit trail for the matter
 +
 +## 练习3
 +{{:resources:courses:pasted:20250122-231535.png}}
 +{{:resources:courses:pasted:20250122-231717.png}}
 +然后可以导出结果
 +{{:resources:courses:pasted:20250122-232152.png}}
 +类似的搜索条件，可以创建Hold
 +{{:resources:courses:pasted:20250122-232109.png}}
 +## 练习4
 +搜索和导出，上面已经做过了，略
 +
 +## 测试6
 +<q>How long are export files available for download?</q>
 +  - **15 days**
 +  - Indefinitely
 +  - 30 days
 +  - Until the matter is closed
 +
 +<q>What constraints/filters are available in the search form? (Choose 3)</q>
 +  - **Organizational Unit (OU)**
 +  - **Data Type (Mail, Drive etc)**
 +  - Domain
 +  - **Specific Accounts**
 +
 +<q>When is a default retention rule applied to a message or a file?</q>
 +  - **Only when there are no applicable custom retention rules or holds in place**
 +  - Always unless the user is on hold
 +  - Always unless a custom retention rule applies
 +  - Always, default retention rules take precedence over custom retention rules and holds
 +
 +<q>What data types are supported by Vault? (Choose 3)</q>
 +  - Contacts
 +  - Blogs
 +  - **Groups**
 +  - **Drive**
 +  - **Meet**
 +
 +## 练习1
 +各类Reports，自行查看，略
 +## 练习2
 +{{:resources:courses:pasted:20250122-233200.png}}
 +{{:resources:courses:pasted:20250122-233256.png}}
 +{{:resources:courses:pasted:20250122-233321.png}}
 +显示结果：
 +{{:resources:courses:pasted:20250122-233344.png}}
 +
 +## 练习3
 +新建Email报警,查看预设Rules
 +{{:resources:courses:pasted:20250122-233635.png}}
 +
 +<note>有3类Rules，一类是Activity rules,但是在试用版中无法使用，另一类是Data Protection rules,同样的试用版中无法使用</note>
 +但Reporting Rules可以创建
 +{{:resources:courses:pasted:20250122-234011.png}}
 +{{:resources:courses:pasted:20250122-234122.png}}
 +
 +## 练习4
 +Email日志搜索 Email Log search,工作中经常用，略
 +{{:resources:courses:pasted:20250122-234309.png}}
 +
 +## 测试7
 +<q>What is editable in a System Defined Rule?</q>
 +  - Scope
 +  - Scope and Actions
 +  - **Actions**
 +  - Condition
 +
 +<q>Your IT manager would like to know what changes have been made to your Google Workspace organizations settings. Where would you find this information?</q>
 +  - **Admin audit log**
 +  - Refer to the audit log for each service and build an aggregated report
 +  - Use a BigQuery export
 +
 +<q>What information can you find on the main report (the highlights) page? (Choose 3)</q>
 +  - **Apps usage**
 +  - Admin account status
 +  - **Users account status**
 +  - **External file sharing**
 +
 +## 域名别名
 +它能给所有用户提供多一个邮件地址
 +## 练习1
 +添加域名别名和新增域
 +我手上目前确实还有2个域名，但添加域名所需的TXT记录等操作比较麻烦，就不做了。
 +{{:resources:courses:pasted:20250123-103752.png}}
 +{{:resources:courses:pasted:20250123-103913.png}}
 +
 +## 练习2
 +信赖一个域
 +互相信赖的两个域之间，可以共享GoogleDrive文件。
 +Admin>Account>.Domains>Allowlisted domains
 +<note>1.添加的域必须是GWS域（即经过认证）
 +2.Primary域名的子域或别名不会被自动添加的，需要手动添加，每次最多添加200个</note>
 +
 +## 测试8
 +<q>Your company regularly works with another company that also uses Google Workspace and you wish to make it easier for users to collaborate using Drive. What action would you take?</q>
 +  - **Add their primary domain, subdomains and any aliases to your list of trusted/allowed domains**
 +  - Add their primary domain to your list of allowed domains
 +  - Create a domain alias using their domain name in your Google Workspace account
 +  - Add their domain name to your list of trusted domains
 +
 +<q>Your organization has just purchased another company that has their own domain. They will be using Google Workspace and you want them to be able to continue receiving email to their existing address. What approach would you take?</q>
 +  - Create a new Google Workspace account and add the domain as the primary domain for that account.
 +  - **Add the new domain as a new (secondary) domain to your Google Workspace account.**
 +  - Add the new domain as a subdomain to your Google Workspace account
 +  - Add the new domain as a domain alias to your Google Workspace account.
 +
 +<q>Which of the following are true about a domain alias? (Choose 2)</q>
 +  - Domain aliases can be applied to the primary and any secondary domains from the admin console
 +  - **Domain aliases do not require additional Google Workspace licenses**
 +  - Domain aliases require additional Google Workspace licenses
 +  - **Domain aliases can only be applied to the primary domain from the admin console**
 +
 +## 数据导入与导出
 +几种迁移工具
 +### 管理员用（多数人需求）
 +  - GWMME: GWS Migration for Microsoft Exchange
 +  - GWM: GWS Migrate
 +  - GWMHN: GWS for HCL Notes
 +  - DMS: Data Migration Service
 +
 +### 用户用(少数人需求）
 +  - GWMMO: GWS Migration for Microsoft Outlook
 +  - 其他账户导入，Calendar/Contacts
 +
 +### 导出
 +管理员：导出Gmail,Docs等到GoogleCloudStorage
 +用户：导出Gmail，Calendar，Contacts等
 +
 +## Troubleshooting GWS
 +  - Status dashboard
 +  - Connect with help Assistant
 +  - View important alerts
 +  - Search for help
 +  - Contact Google support
  
 +其他工具
 +  - Google admin toolbox [[https://toolbox.googleapps.com/apps/main/]]
 +  - Browser Debugger
 + 
resources/courses/gws_c2.1737550591.txt.gz · 最后更改: 2025/01/22 21:56 由 jackiez