差别

这里会显示出您选择的修订版和当前版本之间的差别。

--- resources:courses:gws_c4 [2025/01/23 22:59] – jackiez
+++ resources:courses:gws_c4 [2025/01/25 10:27] (当前版本) – jackiez
@@ 行 136: / 行 136: @@
 参考链接：[[https://support.google.com/a/answer/7380368]]
+## 测试4
+<q>Which of the following are reasons to use an inbound gateway? (Choose 2)</q>
+  - Can be used for batch delivery of email to Gmail
+  - Improves mail delivery performance
+  - **Spam filtering**
+  - **Message archiving**
+<q>Your organization has been receiving unwanted emails from another organization, and attempts by you to get the organization to stop sending the emails have failed. What approach is best to stop messages from this organization from reaching your users?</q>
+  - Configure a blocked senders list and add the domain's IP address to the list
+  - Ask each of your user's to block the domain
+  - **Configure a blocked senders list and add the domain name to the list**
+  - Contact Google Support and ask them to block the organization for you
+<q>Messages from a single person that you trust are being marked as spam by Gmail. What approach is best to ensure that these messages reach the intended recipients inboxes?</q>
+  - Setup a security sandbox rule for the user to have all mail verified by the sandbox prior to delivery
+  - **Add a spam setting which bypasses spam filters for messages received from addresses within an approved senders list. Add the user's email address to the list**
+  - Ask each of your users to add the contact to their personal contacts
+  - Add the user's email address to your email allowlist
+## 邮件合规检查
+  - Attachment compliance
+  - Content compliance
+  - objectionable content compliance
+触发后的动作
+  - rejected before reaches the recipient
+  - be sent to admin
+  - be modified before delivery
+DLP对策
+## 练习1
+{{:resources:courses:pasted:20250123-230719.png}}
+## 练习2
+{{:resources:courses:pasted:20250123-231456.png}}
+然后发一封包含Jupiter（在标题或是正文）的邮件到自己个人邮箱，发现是收不到的。
+## 练习3
+{{:resources:courses:pasted:20250123-232142.png}}
+发送违规邮件，然后查看隔离邮件（使用管理员账号）
+{{:resources:courses:pasted:20250123-232301.png}}
+也可以访问下列URL [[https://email-quarantine.google.com/adminreview]]
+<note>管理员需要定期处理隔离邮件，如果30天内不处理，会被自动删除</note>
+## 其他合规对策
+  - email and chat auto-deletion 删除超过某一时间的信息
+  - OCR for email attachment (并不是所有GWS版本都支持)
+  - restrict delivery (一般用于教育账号）
+  - Security sandbox (微软家的EDR也有这个功能）
+## 测试5
+<q>You want to prevent your users from receiving mail from baddomain.com. What is the best way to achieve this?</q>
+  - **Add baddomain.com to a blocked senders list**
+  - Add baddomain.com's IP address to the blocked senders list
+  - 1Create a security sandbox rule to filter and delete messages to/from baddomain.com
+  - Configure the 'Restrict delivery' setting to prevent message exchange between your users and baddomain.com
+<q>What actions can an administrator perform on a quarantined message? (Choose 2)</q>
+  - **Deny**
+  - **Allow**
+  - Return to sender
+  - Deliver to another recipient
+<q>In which type of compliance control can you apply a Data Loss Prevention (DLP) rule for Gmail?</q>
+  - Objectionable content
+  - **Content compliance**
+  - Optical Character Recognition (OCR)
+  - Attachment compliance
+<q>Which statements are true for an objectionable content rule? (Choose 2)</q>
+  - **An objectionable content setting works on inbound and outbound messages**
+  - In an objectionable content setting you use a predefined list of objectionable words for filtering for objectionable content
+  - An objectionable content setting works on inbound messages only
+  - **In an objectionable content setting you create word lists for filtering for objectionable content**
+## Mail routing
+有3种方式，默认的Direct，还有Dual，以及Split Delivery
+Dual用于小范围测试邮件，需要新旧2个邮箱都收到邮件。（或是邮件迁移时，比如收购公司接收的一批邮箱（非GWS））
+Spli用于进来的邮件分发到不同邮箱，它同Dual都是暂时操作而非长期。
+## 练习1
+设定Split Delivery
+{{:resources:courses:pasted:20250123-234001.png}}
+Port不能为空
+{{:resources:courses:pasted:20250123-234109.png}}
+{{:resources:courses:pasted:20250123-234321.png}}
+这样所有未定额站以识别的用户发来的邮件都会被转到Legacy邮件服务器，适用于还未迁移到Gmail的人。
+参考链接：[[https://support.google.com/a/answer/2614757]]
+## 其他Routing选项
+  - outbound mail gateway server 用于备份或是过滤邮件
+  - virtual user table,建立映射，最多可以加5000条记录，每条里可以放12个地址,用于保存邮件
+  - Inbound e-mail journal acceptance to Vault 保存邮件到另一个邮件平台
+  - 3rd party email archiving
+## 测试6
+<q>Which mail delivery scheme allows messages to be delivered to multiple mailboxes?</q>
+  - Indirect delivery
+  - Split delivery
+  - **Dual delivery**
+  - Direct delivery
+<q>What advantages does a routing setting have over an outbound gateway when you need to route mail through an external mail server?</q>
+  - A routing setting can be applied at an OU level
+  - Address lists can be used to control or bypass a routing setting
+  - **All of the options here**
+  - A routing setting can be applied to specific senders and recipients
+<q>What must you define before you can change the route in a routing setting?</q>
+  - An outbound gateway
+  - Alternate secure route
+  - **A mail host**
+  - An SMTP relay
+<q>Which features in Google Workspace can be used to leverage Google's spam protection for users who are on a non-Gmail mail platform? (Choose 2)</q>
+  - Alternate secure route
+  - **SMTP Relay service**
+  - **Non-Gmail mailbox**
+  - Outbound gateway
+<note>后面2章节不再需要测试用GWS，可以取消订阅了！</note>
+{{:resources:courses:pasted:20250125-094448.png}}
+{{:resources:courses:pasted:20250125-094613.png}}
+这时会发现Gmail，Drive和Calendar等核心GWS服务已经不可用。所以直接删除账户吧。
+{{:resources:courses:pasted:20250125-095037.png}}
+会确认有没有MarketplaceAPP，如果有，要先删除APP才能删除账户。