You have been tasked to deploy shared devices using Managed Guest Sessions. Your IT policy requires blocking access to "google.com" at the parent organization. How would you prevent users from accessing "google.com" for all Managed Guest Sessions at the parent organization?

To prevent users from accessing specific websites, the administrator must use the "URL blocking" policy. Adding "google.com" to "the list of blocked URLs" in the Google Admin console will enforce this policy. This setting explicitly tells ChromeOS to deny any navigation attempts to the specified URL and its subdomains. This is the direct and intended method for blacklisting websites for users or sessions, including Managed Guest Sessions, within an organizational unit.

A. "Allow insecure content on these sites" is a security setting to create exceptions for mixed content, not for blocking sites.
B. "Disallowed URLs in content settings" is not the correct name for the policy; the correct policy is "URL blocking" or "Blocked URLs".
C. "The blocked URL exceptions" (URL allowlist) is used to allow access to sites that would otherwise be blocked by a wildcard entry in the blocklist.

1. Google Chrome Enterprise and Education Help. (n.d.). Block URLs and applications. Retrieved from https://support.google.com/chrome/a/answer/7532419. This page states, "You can use a blocklist to prevent users from visiting certain websites." It details using the "Blocked URLs" setting.

2. Google Chrome Enterprise and Education Help. (n.d.). Set Chrome policies for users or browsers. Retrieved from https://support.google.com/chrome/a/answer/2657289. The policy is listed as URLBlocklist with the description, "Prevents users from navigating to the URLs you specify."