What should you do?

The organization has conducted and completed Security Awareness Training (SAT) for all employees. As part of a new security policy, employees who did not complete the SAT have had their accounts suspended. The CTO has requested to be informed of any accounts that have been re-enabled to ensure no one is in violation of the new security policy.

What should you do?
A . Enable “Suspicious login” rule – Other Recipients: CTO
B. Enable “Suspended user made active” rule – Other Recipients: CTO
C. Enable “Email settings changed” rule – -Other Recipients: CTO
D. Enable “Suspended user made active” rule and select “Deliver to” Super Administrator(s)

Answer: B

Explanation:

CTO must be informed when creating the Suspended user made active―A suspended user is made active by an admin Alert. Ref: https://support.google.com/a/answer/3230421?hl=en#zippy=%2Cuser-activity-alerts