Exam Associate Google Workspace Administrator topic 1 question 67 discussion

Actual exam question from Google's Associate Google Workspace Administrator

Question #: 67
Topic #: 1

[All Associate Google Workspace Administrator Questions]

Your company operates several primary care clinics where employees routinely work with protected health information (PHI). You are in the process of transitioning the organization to Google Workspace from a legacy communication and collaboration system. After you sign the Business Associate Agreement (BAA), you need to ensure that data is handled in compliance with regulations when using Google Workspace. What should you do?

A. Implement a third-party backup service that is also compliant with Google Workspace core services.
B. Create a label for Google Drive content to help employees identify sensitive data.
C. Instruct the staff to not store any PHI in Google Workspace core services, including Google Drive, Docs, Sheets, and Keep.
D. Disable integrations with third-party apps and turn off non-core Google services.

Show Suggested Answer

Suggested Answer: D 🗳️

by schamorroa at May 8, 2025, 12:21 p.m.

Comments

Submit Cancel

schamorroa

2 weeks, 5 days ago

Selected Answer: D

Once your organization has signed the Business Associate Agreement (BAA) with Google, only Google Workspace core services (like Gmail, Drive, Docs, Sheets, etc.) are covered under HIPAA compliance. To remain compliant, you must: Disable non-core services (like YouTube or Blogger) that aren't covered by the BAA. Block third-party apps unless they also enter into a BAA with your organization and meet HIPAA requirements. This ensures PHI is only stored and processed in services governed by the BAA.

upvoted 3 times

...