Authentic Google Certification Exam Chrome-Enterprise-Administrator Questions Answers

To allow users to install extensions while blocking those with specific risky permissions, the administrator should "Allow all apps" from the Chrome Web Store and then use the "Block extensions by permission" policy to block extensions that request the "File System" permission. This prevents extensions from accessing local files. Option A is too restrictive by blocking all apps by default. Options B and D use "Runtime Blocked Hosts," which is for controlling access to specific websites, not for blocking extension permissions.

===========

Chrome's Safe Browsing feature actively scans web pages, downloads, and extensions for known malware. When malware is detected, it is reported as a security event. While unauthorized file downloads could be a consequence of a security issue, Chrome's direct detection focuses on the malware itself. Password complexity is a setting for password management, and user inactivity is a system or application-level event, not a direct security event captured by Chrome in the same way as malware detection.

===========

Organizational Units (OUs) in the Google Admin console allow administrators to apply different Chrome policies to different groups of devices or users based on their organizational structure. By creating separate OUs for Engineering and HR (and potentially other departments), the administrator can configure different Chrome update policies for each OU, ensuring Engineering gets rapid updates while HR stays on a more stable release. User groups primarily manage access to services, and device policies are generally applied at the device level, not necessarily tied to departmental needs for update cadences. Active Directory forests are a Microsoft concept and not directly used for managing Chrome update policies in the Google Admin console.

===========