Associate Cloud Workspace Administrator · Free Practice Question Medium
Question 39
You are the Google Workspace Administrator and a wave of phishing emails is hitting your organization. The emails appear to come from a trusted partner company, but they are malicious. Your current email settings are causing legitimate emails from this partner to be marked as spam. How can you ensure that legitimate emails from the trusted partner are delivered to the inbox while blocking the phishing emails?
-
A
Disable spam filtering entirely in the Google Admin Console.
-
B
Add the partner's domain to the email allowlist in Google Admin Console.
-
C
Manually move emails from the partner to the inbox and mark them as "Not Spam".
-
D
Implement a Gmail filter that flags emails with certain phishing characteristics, irrespective of the sender.
-
E
Change the DMARC policy for your domain to "none".
Reveal correct answer
Correct answer: B
A. Disabling spam filtering entirely in the Google Admin Console is a drastic measure that can expose your organization to a higher risk of receiving malicious emails, including phishing attempts. It is not a recommended solution for handling the specific issue of phishing emails from a trusted partner.
B. Adding the partner's domain to the email allowlist in Google Admin Console will ensure that emails from this trusted partner are not marked as spam and are delivered to the inbox. This action will help differentiate between legitimate emails and phishing emails from the same domain.
C. Manually moving emails from the partner to the inbox and marking them as "Not Spam" is not a scalable solution for handling a wave of phishing emails. It is time-consuming and does not prevent future phishing emails from being delivered to the inbox.
D. Implementing a Gmail filter that flags emails with certain phishing characteristics, irrespective of the sender, may inadvertently flag legitimate emails from the trusted partner as phishing emails. This approach can lead to important emails being missed or marked incorrectly, causing disruptions in communication.
E. Changing the DMARC policy for your domain to "none" may have unintended consequences and can potentially weaken the security of your email domain. It is not a recommended solution for specifically addressing the issue of phishing emails from a trusted partner.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
