Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Associate Google Workspace Administrator Exam - Topic 4 Question 27 Discussion

Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company's human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?
B) Search for the sender's email address by using the security investigation tool. Mark the messages as phishing. Add the sender's email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
A) Search the sender's email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.
C) Collect a list of users who received the messages. Search the recipients' email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender's email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.
D) Search for the sender's email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.

Google Associate Google Workspace Administrator Exam - Topic 4 Question 27 Discussion

Actual exam question for Google's Associate Google Workspace Administrator exam
Question #: 27
Topic #: 4
[All Associate Google Workspace Administrator Questions]

Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company's human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: B

The security investigation tool in Google Workspace allows you to identify the impacted users and messages. By marking the messages as phishing, you acknowledge their malicious nature, helping to protect the users. Adding the sender's email address to the Blocked senders list ensures that future messages from this sender will be automatically blocked, preventing recurrence of similar incidents.


by Vincent at Aug 18, 2026, 11:14 AM

Limited Time Offer

25%

Off

Get Premium Associate Google Workspace Administrator Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Marshall
3 days ago
Why not just delete the emails and move on? Seems easier.
upvoted 0 times
...
Trevor
8 days ago
I agree with Dell, blocking the sender is a must!
upvoted 0 times
...
Denny
14 days ago
Wait, can we really trust the HR department? This feels sketchy.
upvoted 0 times
...
Armanda
19 days ago
I think C is better, we should export those emails for evidence.
upvoted 0 times
...
Dell
24 days ago
Option B seems the most secure, marking as phishing is key.
upvoted 0 times
...
Lashandra
29 days ago
I think option A might be too basic; we should be using the security tools instead, right?
upvoted 0 times
...
Thea
1 month ago
I recall something about quarantining emails, but I'm a bit confused about whether that's covered in option C or D.
upvoted 0 times
...
Valda
1 month ago
I'm not entirely sure, but I feel like we discussed the importance of marking emails as phishing in one of our sessions.
upvoted 0 times
...
Veronique
1 month ago
I think option B sounds familiar; I remember practicing how to use the security investigation tool for phishing emails.
upvoted 0 times
...

Save Cancel