Your business partner requests that a new custom cloud application be set up to log in without having separate credentials.
What is your business partner required to provide in order to proceed?

Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.
What action should you take to meet these requirements?

Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales & Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company's Information Security policy empowers you, as a G Suite admin, to grant provisional access immediately if all of the following conditions are met:
- Access to the app is restricted to specific individuals by request
only.
- The app does not have the ability to read or manage emails.
- Immediate notice is given to the Infosec team, followed by the
submission of a security risk analysis report within 14 days.
Which actions should you take first to ensure that you are compliant with Infosec policy?

Your company has decided to change SSO providers. Instead of authenticating into G Suite and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.
What two features are essential to reconfigure in G Suite? (Choose two.)

DreamHouse Realty partners with the healthcare sector to adapt housing for clients with specific health conditions. DreamHouse Realty wants to store client notes. These client notes are text data that may be long and often contain Personally Identifiable Information (PII) and Personal Health Information (PHI).
This data must be encrypted at rest as well as in transit in order to comply with the Health Insurance Portability and Accountability Act (HIPA).
Which action should the Architect perform to fulfill this requirement?