Free Google-Workspace-Administrator Actual Exam Questions - Question 12 Discussion
users are now locked out of their accounts because they did not set up 2-Step Verification by the
enforcement date. What corrective action should you take to allow the users to sign in again?
Temporarily moving users seems best; option B lets them reset 2SV without risking security. B
It’s B because temporarily moving users lets them set up 2SV without risking org-wide security.
B imo, moving users out temporarily avoids messing with org-wide or OU settings.
Makes sense to temporarily move users; option B is the smartest fix here.
B. This seems like the only way to fix the problem without opening up security for the whole org or a big group of users. Temporarily moving just the locked-out users so they can set up 2SV makes sense. A and C are way too broad and risky. D’s permanent exception defeats the purpose of enforcing 2SV in the first place. The key is making sure that the exception group actually has 2SV enforcement turned off, or else moving users there won’t help at all. So, as long as that’s confirmed, B is the practical move here.
B, it avoids broader security risks by only temporarily changing user settings.
B, temporarily moving users to the exception group makes sense here.