How can an organization block access to consumer Gmail while allowing enterprise Google Workspace access?

• A. Set up a separate Google Workspace tenant
• B. Limit access through IP address control
• C. Use group policy templates for domain restrictions
• D. Implement two-factor authentication for all accounts

Answer: (C)

Using group policy templates for domain restrictions is a viable method for an organization to specifically manage access to services like consumer Gmail while allowing access to enterprise Google Workspace services. Group policies can be set up to enforce rules and restrictions on user accounts based on the organization’s security needs and governance policies. By applying these policies, administrators can define which services are accessible to the users within the organization, helping to restrict access to consumer-grade Gmail while permitting enterprise services under the Google Workspace umbrella.

Group policy templates allow for a granular approach to managing applications and services associated with Google accounts, ensuring that users cannot access personal Google accounts (like consumer Gmail) when they are on the organization’s network or by using its devices. This is especially important for protecting sensitive corporate data and maintaining compliance with data security standards.

Involving these configurations ensures that the organization can maintain its professional standards while managing user access based on the context of organizational needs and priorities.