Google Associate Google Workspace Administrator Exam - Topic 1 Question 16 Discussion

Actual exam question for Google's Associate Google Workspace Administrator exam

Question #: 16
Topic #: 1

[All Associate Google Workspace Administrator Questions]

You've received multiple reports about a suspicious email from someone who is pretending to be from your organization's human resources department. The email is prompting employees to click a link for a password update. You want to remediate this sender's emails. What should you do?

AUse the security investigation tool to search for users who received the suspicious email, and select Mark message as phishing.

BUse the security investigation tool to action the suspicious email and select Mark message as spam.

CCreate an activity rule to alert administrators to similar emails from that sender.

DNotify all employees and request that they report this email as spam.

Show Suggested Answer

Suggested Answer: A

The security investigation tool allows you to search for and take action on suspicious emails within your organization. Marking the email as phishing helps to flag the email as malicious and prevents further emails from the same sender from being delivered to users' inboxes. This also ensures that the email is properly categorized for review and investigation by your security team.

by Micah at Nov 21, 2025, 05:04 AM

Limited Time Offer

25%

Off

Get Premium Associate Google Workspace Administrator Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hillary

9 hours ago

Wait, how do we know this is really from HR? Seems fishy.

upvoted 0 times

...

Charlie

6 days ago

I think D is important too, everyone should be aware!

upvoted 0 times

...

Zachary

11 days ago

I'd go with C. Gotta love those activity rules - they're like the secret agents of the email world!

upvoted 0 times

...

Elly

16 days ago

B is the funniest option. Marking the email as spam? What is this, amateur hour?

upvoted 0 times

...

Staci

21 days ago

D is the way to go. Notifying all employees is the best way to spread awareness and get them to report the email.

upvoted 0 times

...

Detra

26 days ago

A is the way to go. Marking the message as phishing will help identify the affected users.

upvoted 0 times

...

Jonell

1 month ago

I feel like marking the message as spam, like in option B, might not be effective since it’s more about phishing. I lean towards option A based on what we practiced.

upvoted 0 times

...

Glory

1 month ago

I'm a bit confused about whether we should notify employees first or take action on the email directly. Option D seems like it could help, but I’m not sure if it’s enough.

upvoted 0 times

...

Fidelia

1 month ago

I remember a practice question where we had to deal with a similar phishing email. I think creating an activity rule like in option C could help prevent future issues.

upvoted 0 times

...

Carissa

2 months ago

Option B seems the most straightforward to me. Marking the email as spam will remove it from users' inboxes and prevent further spread of the issue.

upvoted 0 times

...

Helene

2 months ago

I'm leaning towards option A. Marking the message as phishing will help us track which users received it and take appropriate action with them.

upvoted 0 times

...

Krystal

2 months ago

Definitely option C. We need to set up an alert system to catch these kinds of suspicious emails quickly. Notifying all employees (option D) could just cause more confusion.

upvoted 0 times

...

Shaunna

2 months ago

Definitely go with A, marking it as phishing is crucial.

upvoted 0 times

...

Laticia

2 months ago

I think option A sounds familiar from our training, but I'm not entirely sure if marking it as phishing is the best first step.

upvoted 0 times

...

Wilda

3 months ago

C is the correct answer. Creating an activity rule to alert administrators is the best way to remediate the sender's emails.

upvoted 0 times

...

Rebecka

3 months ago

Hmm, I'm a bit unsure here. Should we be marking the message as phishing (option A) or spam (option B)? I'm not sure what the difference is in this case.

upvoted 0 times

...

Wendell

3 months ago

I think I'd go with option C. Creating an activity rule to alert administrators seems like the best way to proactively address this issue and prevent similar emails in the future.

upvoted 0 times

Jackie

2 months ago

I like option C too! It’s smart to alert admins.

upvoted 0 times

...

Viola

3 months ago

But what about notifying everyone? Option D could help too.

upvoted 0 times

...