Exam Professional Collaboration Engineer topic 1 question 42 discussion

Actual exam question from Google's Professional Collaboration Engineer

Question #: 42
Topic #: 1

[All Professional Collaboration Engineer Questions]

Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.
What action should you take to meet these requirements?

A. Use the login audit report to export all suspicious login details for analysis.
B. Create a custom dashboard with the security investigation tool showing suspicious logins.
C. Use the account activity report to export all suspicious login details for analysis.
D. Create a custom query in BigQuery showing all suspicious login details.

Show Suggested Answer

Suggested Answer: A 🗳️

by Yei at Aug. 5, 2020, 9:22 a.m.

Comments

Submit Cancel

cafebamo

Highly Voted 4 years, 7 months ago

I think it's D because they talk about last year and the standard reports only retain information for 6 months

upvoted 20 times

juliog101

4 years, 2 months ago

It is one of those questions with no available answer. Even pulling the data from BigQuery you can get only the last 6 months: https://support.google.com/a/answer/7061566 I would say that based on simplicity answer A makes more sense

upvoted 1 times

jcloud965

3 years, 6 months ago

It is assumed that export to bigquery is already enabled. Or there is no answer.

upvoted 1 times

...

saurabh1805

Highly Voted 4 years, 8 months ago

A is correct answer here, https://support.google.com/a/answer/4580120?hl=en

upvoted 7 times

...

[Removed]

Most Recent 3 years, 5 months ago

Selected Answer: A

correct answer is A

upvoted 1 times

...

ESP_SAP

3 years, 5 months ago

Correct answers is (A): Login audit log Track user sign-in activity You can use the Login audit log to track user sign-ins to your domain. You can review all sign-ins from web browsers. If a user signs in from an email client or a non-browser application, you can only review reports of suspicious attempts. Forward log event data to the Google Cloud Platform You can opt in to share the log event data with Google Cloud Platform. If you turn on sharing, data is forwarded to Cloud Logging, where you can query and view your logs, and control how you route and store your logs https://support.google.com/a/answer/4580120?hl=en

upvoted 2 times