Commonly confused services and features

When Owen reviews the questions he has missed since November, a second pattern appears beside the reading errors of lesson 3. Many wrong answers name a real feature that does something close to what the question needs, but not quite. He chose a domain alias where a secondary domain was needed, a DLP rule where a trust rule fitted, an IP allowlist where an inbound gateway was right. Sofia calls these look-alike pairs. Exam writers use them deliberately, because only someone who knows exactly what each feature does can tell them apart.

This lesson collects the pairs and groups that cause most trouble in Workspace administration. For each, it gives the difference in one line and the clue in a question that points to each side. Owen turns the result into the second of his two cards for the final week.

Accounts and directory

The suspend-archive-delete group is the most tested of all. Sofia gives Owen a way to remember it: suspend is a pause button, archive is a storage room, delete is the bin with a short time to change your mind. The question's time frame usually decides: days or weeks suggests suspend; years suggests archive; never again, with data already safe, suggests delete.

Scoping settings

Mail flow

The inbound gateway and the IP allowlist are the pair Sofia singles out. Both involve another server's IP address, and both change how Gmail treats mail from it. The difference is trust. An inbound gateway says: this server is a hop on the way, look past it. An IP allowlist says: trust what this server sends. Allowlisting a filtering service that relays outside mail would let through whatever it relays, which is why the inbound gateway is usually the correct answer for a filtering service in front of Gmail.

Data protection and governance

Sofia reduces the sharing trio to one question: is the rule about who or about what? External sharing settings and trust rules are about who may share with whom. DLP rules are about what is in the content. A question that names a type of data, such as card numbers or health records, points to DLP; a question that names people, groups or domains points to sharing settings or trust rules, and to trust rules when the control is between specific parties rather than simply inside versus outside.

Security and monitoring

Devices, browsers and releases

Building the card

Owen cannot carry all of these tables into the final week, and he should not try. Sofia asks him to choose the 12 pairs he got wrong at least once and write each on one line in the form "A does X; B does Y; clue for A; clue for B". Writing them in his own words is the point; reading Sofia's tables helps much less than producing his own.

# Owen's misses by look-alike pair since November (illustrative counts).
misses = {
    "Inbound gateway vs IP allowlist": 3,
    "Domain alias vs secondary domain": 2,
    "Trust rules vs DLP rules": 3,
    "Suspend vs archive": 1,
    "Hold vs retention rule": 1,
    "Managed browser vs managed profile": 2,
    "Split vs dual delivery": 2,
    "Takeout vs Data Export tool": 1,
    "Activity rules vs alert center": 1,
}
total = sum(misses.values())
print("Questions lost to look-alike pairs:", total)
running = 0
for pair, n in sorted(misses.items(), key=lambda kv: -kv[1]):
    running += n
    print(f"{pair:38s} {n}  (cumulative {running} of {total})")

Questions lost to look-alike pairs: 16
Inbound gateway vs IP allowlist        3  (cumulative 3 of 16)
Trust rules vs DLP rules               3  (cumulative 6 of 16)
Domain alias vs secondary domain       2  (cumulative 8 of 16)
Managed browser vs managed profile     2  (cumulative 10 of 16)
Split vs dual delivery                 2  (cumulative 12 of 16)
Suspend vs archive                     1  (cumulative 13 of 16)
Hold vs retention rule                 1  (cumulative 14 of 16)
Takeout vs Data Export tool            1  (cumulative 15 of 16)
Activity rules vs alert center         1  (cumulative 16 of 16)

Of 16 questions lost to look-alike pairs, the top four pairs account for 10. That is where Owen starts. Sofia warns him not to stop there: the pairs he missed once may simply not have come up often yet.