Google Workspace Administrator Google Exam Questions and Free Practice Test

Jonnie Karnath2023-04-20T05:09:54+00:00

If you’re looking to pass the Google Google Workspace Administrator exam, Certspot Google Workspace Administrator Google exam questions and free practice test are an excellent choice. These Google Workspace Administrator questions and answers are designed to help you prepare for the exam by providing you with up-to-date and accurate information on the exam topics. One of the best things about Certspot Google Workspace Administrator Google exam questions and free practice test is that it’s designed to be user-friendly and easy to understand. Whether you’re a beginner or an experienced professional, their preparation material will help you gain a better understanding of the subject matter and allow you to test your knowledge before the actual exam.

Page 1 of 4

1. As the Workspace Administrator, you have been asked to delete a temporary Google Workspace user account in the marketing department. This user has created Drive documents in My Documents that the marketing manager wants to keep after the user is gone and removed from Workspace. The data should be visible only to the marketing manager. As the Workspace Administrator, what should you do to preserve this user's Drive data?

In the user deletion process, select “Transfer” in the data in other apps section and add the manager's email address.

Use Google Vault to set a retention period on the OU where the users reside.

Before deleting the user, add the user to the marketing shared drive as a contributor and move the documents into the new location.

Ask the user to create a folder under MyDrive, move the documents to be shared, and then share that folder with the marketing team manager.

2. With the help of a partner, you deployed Google Workspace last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things Google Workspace so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform.

What should you do?

Develop a cadence of regular roadmap and business reviews with your partner.

Regularly scan the admin console and keep track of any new features you identify.

Create a Feature Release alert in the Alert Center to be alerted to new functionality.

Put half of your organization on the Rapid Release Schedule to highlight differences.

3. Several customers have reported receiving fake collection notices from your company. The emails were received from [email protected], which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.

What two actions should you take? (Choose two.)

Change the password for suspected compromised account [email protected].

Configure a Sender Policy Framework (SPF) record for your domain.

Configure Domain Keys Identified Mail (DKIM) to authenticate email.

Disable mail delegation for the [email protected] account.

Disable “Allow users to automatically forward incoming email to another address.”

4. You are in charge of automating and configuring Google Cloud Directory Sync for your organization. Within the config manager, how can you proactively prevent applying widespread deletions within your Workspace environment if your company’s LDAP undergoes a substantial modification?

Manually run Google Cloud Directory Sync only after performing a simulated sync.

Specify the minimum and maximum number of objects to synchronize in each configuration item.

Configure the tool to delete users only when run from the config manager.

Configure limits for the maximum number of deletions on each synchronization.

5. Your company has received help desk calls from users about a new interface in Gmail that they had not seen before. They determined that it was a new feature that Google released recently. In the future, you'll need time to review the new features so you can properly train employees before they see changes.

What action should you take?

Company Profile > Profile > New User Features > Enable “Scheduled Release”

Apps > Google Workspace > Gmail > Uncheck “Enable Gmail Labs for my users”

Company Profile > Profile > New User Features > Enable “Rapid Release”

Device Management > Chrome > Device Settings > Stop auto-updates

6. Your business partner requests that a new custom cloud application be set up to log in without having separate credentials.

What is your business partner required to provide in order to proceed?

Service provider logout URL

Service provider ACS URL

Identity Provider URL

Service provider certificate

7. Your organization recently implemented context-aware access policies for Google Drive to allow users to access Drive only from corporate managed desktops. Unfortunately, some users can still access Drive from non-corporate managed machines.

What preliminary checks should you perform to find out why the Context-Aware Access policy is not working as intended? (Choose two.)

Confirm that the user has a Google Workspace Enterprise Plus license.

Delete and recreate a new Context-Aware Access device policy.

Check whether device policy application is installed on users’ devices.

Confirm that the user has at least a Google Workspace Business license.

Check whether Endpoint Verification is installed on users’ desktops.

8. Your marketing department needs an easy way for users to share items more appropriately. They want to easily link-share Drive files within the marketing department, without sharing them with your entire company.

What should you do to fulfil this request? (Choose two.)

Create a shared drive that's shared internally organization-wide.

Update Drive sharing for the marketing department to restrict to internal.

Create a shared drive for internal marketing use.

Update the link sharing default to the marketing team when creating a document.

In the admin panel Drive settings, create a target audience that has all of marketing as members.

9. Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.

What log should you use?

Admin audit log

SAML audit log

Drive usage audit log

OAuth Token audit log

10. The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.

What two actions should you take? (Choose two.)

Configure objectionable content to reject messages with the words “wire transfer.”

Verify that DMARC, DKIM, and SPF records are configured correctly for your domain.

Create a rule requiring secure transport for all messages regarding wire transfers.

Add the sender of the wire transfer email to the blocked senders list.

Enable all admin settings in Gmail's safety > spoofing and authentication.

Page 2 of 4

11. Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites.

What should you do?

Modify your Marketplace Settings to block users from installing any app from the Marketplace.

Set all API services to “restricted access” and ensure that all connected apps have limited access.

Remove all client IDs and scopes from the list of domain-wide delegation API clients.

Block each connected app's access.

12. Your company frequently hires from five to ten interns for short contract engagements and makes use of the same generically named Google Workspace accounts (e.g., [email protected], [email protected], [email protected]). The manager of this program wants all email to these accounts routed to the manager's mailbox account also.

What should you do?

Setup address forwarding in each account's GMail setting menu.

Set up recipient address mapping in GMail Advanced Settings.

Configure an Inbound Gateway route.

Give the manager delegated access to the mailboxes.

13. You are a Workspace Administrator with a mix of Business Starter and Standard Licenses for your users. A Business Starter User in your domain mentions that they are running out of Drive Storage Quota. Without deleting data from Drive, what two actions can you take to alleviate the quota concerns for this user? (Choose two.)

Add other users as “Editors” on the Drive object, thus spreading the storage quota debt between all of them.

Manually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.

Make another user the “Owner” of the Drive objects, thus transferring the storage quota debt to them.

Perform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.

Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.

14. Your company is using Google Workspace Business Standard. The company has five meeting rooms that are all registered as resources in Google Workspace and used on a daily basis by the employees when organizing meetings. The office layout was changed last weekend, and one of the meeting rooms is now a dedicated room for management. The CEO is complaining that anyone can book the room and requested this room to be used only by the management team and their executive assistants (EAs). No one else must be allowed to book it via Google Calendar.

What should you do?

As a super administrator, modify the room calendar sharing settings, and limit it to the management and EAs group.

Delete the room from Google Workspace resources, and suggest using a spreadsheet shared with the management and EAs only for the room schedule.

As a super administrator, create a group calendar named “Management Room,” and share it only with the management and the EAs.

Move the room resource to the management and EAs group so that only they can use it.

15. A recent legal investigation requires all emails and Google Drive documents from a specific user to be retrieved. As the administrator, how can you fulfill the legal team's request?

Use Security Investigation Tool to Search Google Drive events for all of the user's documents, and use Google Admin > Reports > Email Log Search to find their emails.

Search Google Drive for all of the user’s documents, and ask them to forward all of their emails.

Use the Gmail API and Google Drive API to automatically collect and export data.

Utilize Google Vault to hold, search, and export data of interest.

16. Your IT team is being asked to fulfill a query by your organization's legal department that requires an MBOX file that will be shared to a third-party partner for eDiscovery. The query must be run on multiple users. Legal has no admin rights to Google Vault.

What should you do to fulfil the request?

Create a Google Vault matter for each user account, and share the matters to the legal admin.

Create a Google Vault matter, search for data, and run an export for the legal department.

Use the Investigation Too! to search for the data requested, and export for the legal department.

Search for the data in Gmail, and export for the legal department.

17. A company has thousands of Chrome devices and bandwidth restrictions. They want to distribute the Chrome device updates over a period of days to avoid traffic spikes that would impact the low bandwidth network.

Where should you enable this in the Chrome management settings?

Randomly scatter auto-updates.

Update over cellular.

Disable Auto update.

Throttle the bandwidth.

18. Your company has an OU that contains your sales team and an OU that contains your market research team. The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties. The market research team also receives that email content, but they want it because it often contains interesting market analysis or competitive intelligence. Constant Contact is often used as the source of these messages. Your company also uses Constant Contact for your own mass email marketing. You need to set email controls at the Sales OU without affecting your own outgoing email or the market research OU.

What should you do?

Create a blocked senders list as the Sales OU that contains the mass email sender addresses, but bypass this setting for Constant Contact emails.

Create a blocked senders list at the root level, and then an approved senders list at the Market Research OU, both containing the mass email sender addresses.

Create a blocked senders list at the Sales OU that contains the mass email sender addresses.

Create an approved senders list at the Market Research OU that contains the mass email sender addresses.

19. Your organization has noticed several incidents of accidental oversharing inside the organization. Specifically, several users have shared sensitive Google Drive items with the entire organization by clicking ‘anyone in this group with this link can view’. You have been asked by senior management to help users share more appropriately and also to prevent accidental oversharing to the entire organization.

How would you best accomplish this?

Create groups, add users accordingly, and educate users on how to share to specific groups of people.

Disable sharing to the entire organization so that users must consciously add every person who needs access.

Determine sharing boundaries for users that work with sensitive information, and then implement target audiences.

Temporarily disable the Google Drive service for individuals who continually overshare.

20. Your company has sales offices in Madrid, Tokyo, London, and New York. The outbound

email for those offices needs to include the sales person's signature and a compliance footer. The compliance footer needs to say “Should you no longer wish to receive emails about this offer, please reply with UNSUBSCRIBE.” You are responsible for making sure that users cannot remove the footer.

What should you do?

Send an email to each sales person with the instructions on how to add the footer to their Signature.

Ensure that each sales team is in their own OU, and configure the Append Footer with the signature and footer content translated for each locale.

Ensure that each sales team is in their own OU, and configure the Append Footer with footer content.

Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.

Page 3 of 4

21. Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.

What action should you take to meet these requirements?

Use the login audit report to export all suspicious login details for analysis.

Create a custom dashboard with the security investigation tool showing suspicious logins.

Use the account activity report to export all suspicious login details for analysis.

Create a custom query in BigQuery showing all suspicious login details.

22. Your CISO is concerned about third party applications becoming compromised and exposing Google Workspace data you have made available to them.

How could you provide granular insight into what data third party applications are accessing?

What should you do?

Create a report using the OAuth Token Audit Activity logs.

Create a report using the Calendar Audit Activity logs.

Create a report using the Drive Audit Activity logs.

Create a reporting using the API Permissions logs for Installed Apps.

23. Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app.

What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?

Navigate to “Data Protection” setting in Google Admin Console's Device management section and disable the “Allow users to copy data to personal apps” checkbox.

Disable “Open Docs in Unmanaged Apps” setting in Google Admin Console’s Device management section.

Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.

Clear the “Allow items created with managed apps to open in unmanaged apps” checkbox.

24. Your organization wants more visibility into actions taken by Google staff related to your data for audit and security reasons. They are specifically interested in understanding the actions performed by Google support staff with regard to the support cases you have opened with Google.

What should you do to gain more visibility?

From Google Admin Panel, go to Audit, and select Access Transparency Logs. Most Voted

From Google Admin Panel, go to Audit, and select Login Audit Log.

From Google Admin Panel, go to Audit, and select Rules Audit Log.

From Google Admin Panel, go to Audit, and select Admin Audit Log.

25. Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password.

What steps should you take to troubleshoot this issue?

Reinstall Password Sync on all domain controllers.

Reauthorize the Password Sync tool in the Google Workspace Admin Console.

Confirm that the Password Sync service is running on all domain controllers.

Reset the user's password in Active Directory.

26. You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders.

What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?

Train users to click on Not Spam button for emails.

Add all users of your domain to an approved sender list.

Force TLS for your domain.

Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.

27. Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners.

How best would you achieve this?

Create a configuration group with the approved users as members, and use it to create a target audience.

Enable external sharing for the marketing and sales organizational units.

Enable external sharing only to allowlisted domains provided by marketing and sales teams.

Create a configuration group with the approved users as members, and enable external sharing for this group.

28. Your Chief Information Security Officer is concerned about phishing. You implemented 2 Factor Authentication and forced hardware keys as a best practice to prevent such attacks. The CISO is curious as to how many such email phishing attempts you've avoided since putting the 2FA+Hardware Keys in place last month.

Where do you find the information your CISO is interested in seeing?

Security > Advanced Security Settings > Phishing Attempts

Apps > Google Workspace > Gmail > Phishing Attempts

Security > Dashboard > Spam Filter: Phishing

Reporting > Reports > Phishing

29. The company's ten most senior executives are to have their offices outfitted with dedicated, standardized video conference cameras, microphones, and screens. The goal is to reduce the amount of technical support they require due to frequent, habitual switching between various mobile and PC devices throughout their busy days. You must ensure that it is easier for the executives to join Meet video conferences with the dedicated equipment instead of whatever device they happen to have available.

What should you do?

Set up unmanaged Chromeboxes and set the executives’ homepage to meet.google.com via Chrome settings.

Set up the executive offices as reservable Calendar Resources, deploy Hangouts Meet Hardware Kits, and associate the Meet hardware with the room calendars.

Deploy Hangouts Meet Hardware Kits to each executive office, and associate the Meet hardware with the executives’ calendars.

Provision managed Chromeboxes and set the executives’ Chrome homepage to meet. google.com via device policy.

30. You recently started an engagement with an organization that is also using Google Workspace. The engagement will involve highly sensitive data, and the data needs to be protected from being shared with unauthorized parties both internally and externally. You need to ensure that this data is properly secured.

Which configuration should you implement?

Turn on external sharing with whitelisted domains, and add the external organization to the whitelist.

Provision accounts within your domain for the external users, and turn off external sharing for that Org.

Configure the Drive DLP rules to prevent the sharing of PII and PHI outside of your domain.

Create a Team Drive for this engagement, and limit the memberships and sharing settings.

Page 4 of 4

31. An end user informs you that they are having issues receiving mail from a specific sender that is external to your organization. You believe the issue may be caused by the external entity’s SPF record being incorrectly configured.

Which troubleshooting step allows you to examine the full message headers for the offending message to determine why the messages are not being delivered?

Use the Postmaster Tools API to pull the message headers.

Use the Email Log Search to directly review the message headers.

Use the Security Investigation Tool to review the message headers.

Perform an SPF record check on the domain to determine whether their SPF record is valid.

32. Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting.

What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?

Add your partner domains IPs to the Inbound Gateway setting.

Change the spoofing protection to deliver the emails to spam instead of quarantining them.

Add your partner sending IP addresses to an allowlist.

Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.

33. How can you monitor increases in user reported Spam as identified by Google?

Review post-delivery activity in the Email logs.

Review user-reported spam in the Investigation Tool.

Review spike in user-reported spam in the Alert center.

Review post-delivery activity in the BigQuery Export.

34. Your organization is concerned with the increasing threat of phishing attacks that may impact users.

Leadership has declined to force-enable 2-Step verification. You need to apply a security measure to prevent unauthorized access to user accounts.

What should you do?

Enable Enforce Strong Password policy.

Enable Employee ID Login Challenge.

Decrease the Maximum User Session Length.

Revoke token authorizations to external applications.

35. Your company policy requires that managers be provided access to Drive data once an employee leaves the company.

How should you grant this access?

Make the manager a delegate to the former employee's account.

Copy the data from the former employee’s My Drive to the manager's My Drive.

Transfer ownership of all Drive data using the file transfer ownership tool in the Google Workspace Admin console.

36. Your company recently migrated to Google Workspace and wants to deploy a commonly used third-party app to all of finance. Your OU structure in Google Workspace is broken down by department. You need to ensure that the correct users get this app.

What should you do?

For the Finance OU, enable the third-party app in SAML apps.

For the Finance OU, enable the third-party app in Marketplace Apps.

At the root level, disable the third-party app. For the Finance OU, allow users to install any application from the Google Workspace Marketplace.

At the root level, disable the third-party app. For the Finance OU, allow users to install only whitelisted apps from the Google Workspace Marketplace.

37. What steps does an administrator need to take to enforce TLS with a particular domain?

Enable email safety features with the receiving domain.

Set up secure transport compliance with the receiving domain.

Configure an alternate secure route with the receiving domain.

Set up DKIM authentication with the receiving domain.

Facebook Twitter LinkedIn Google + Email