You manage Chrome Enterprise browsers for your large organization. You want to ensure that specific extensions are automatically installed on all managed Chrome Enterprise browsers. What should you do?

Force-install the extensions through Chrome browser policies.

Allowlist the specific Chrome browser extensions.

Configure a script to deploy the extensions upon user login.

Publish the extensions in the Chrome Web Store.

Force-install the extensions through Chrome browser policies.

You need to grant a specific set of users in your company access to YouTube, and you want to restrict their access to Merchant Center. What should you do?

Enable access to YouTube at the Group or organizational unit (OU) level for the subset of users. Disable access to Merchant Center.

Enable YouTube for all users in the company. Individually restrict access to Merchant Center for specific Groups or organizational units (OUs).

Create YouTube and Merchant Center as custom web apps. Apply access policies at the Group or organizational unit (OU) level.

Contact Google Support and request that they enable YouTube access for the specific set of users and restrict their access to Merchant Center.

Enable access to YouTube at the Group or organizational unit (OU) level for the subset of users. Disable access to Merchant Center.

Your organization is about to conduct its biannual risk assessment. You need to help identify security risks by quickly reviewing all security settings for Gmail, Drive, and Calendar. What should you do?

In the Google Admin console, review the security health page.

In the reporting section of the Admin console, review the Gmail, Drive, and Calendar reports.

In the alert center, review all of the alerts.

In each individual organizational unit (OU), review the security settings.

In the Google Admin console, review the security health page.

You need to ensure that data owned by former employees remains available in Google Vault. You want to use the most cost-effective solution.What should you do?

Suspend the former employees' Google accounts. Create an organizational unit (OU). Move the former employees into that OU.

Migrate the former employees' Gmail to their manager(s) by using the data migration service during the deletion process. Transfer the former employees' Google Drive files to a new owner.

Change the Google account passwords of the former employees.

Suspend the former employees' Google accounts. Create an organizational unit (OU). Move the former employees into that OU.

Assign an Archived User license to the former employees' Google accounts.

A user is experiencing intermittent issues accessing their Gmail inbox. Sometimes their Gmail loads slowly, and other times the user encounters error messages that haven't been documented. You need to effectively troubleshoot this recurring problem. What should you do?

Instruct the user to generate a HAR file the next time they experience slowness or an error.

Check the Google Workspace Status Dashboard for any reported service disruptions.

Instruct the user to generate a HAR file the next time they experience slowness or an error.

Instruct the user to try to access Gmail from another device or network to see if the issue persists.

Instruct the user to clear their browser cache and cookies.

You are managing the buildings and resources for your organization. You need to create several conference rooms with a capacity of 10 people each, equipped with a whiteboard and projector, and wheelchair accessible. You want to ensure the process is efficient. What should you do?

Create a CSV file and add all resources. Write a script using the Workspace API to reference the CSV file and create all the resources.

Automate room creation by using a third-party app from the Google Workspace Marketplace.

Create a CSV file and add all resources. Write a script using the Workspace API to reference the CSV file and create all the resources.

Create each conference room individually in the Google Admin console. Add the features for each room.

Use the Google Admin console to bulk upload the rooms. Create a resource with the specified features and apply the features to that resource.

Your organization allows employees to use their personal mobile devices to check their work emails. You need to remove the employee's work email data from their phone when they leave the organization. What should you do?

Set up advanced mobile management on the devices.

Set up basic mobile management on the devices.

Set up advanced mobile management on the devices.

Set up data protection rules to prevent data sharing externally.

Set up 2SV authentication on the devices.

External sharing at your company is only permitted for the sales and marketing department. Engineering is not allowed to share externally. You need to configure the sharing settings to comply with this policy. What should you do?

Create organizational units (OUs) for each department. Configure different external sharing settings for each OU.

Use a data loss prevention (DLP) solution to control external sharing based on user groups.

Create separate shared drives for each department with different external sharing settings.

Create organizational units (OUs) for each department. Configure different external sharing settings for each OU.

Configure Drive trust rules to restrict the engineering department from sharing externally.

Your company has purchased Gemini licenses for a subset of employees. You need to ensure that only users in the marketing and sales departments have access to Gemini features by using the most efficient approach. What should you do?

Create an organizational unit (OU) for marketing and sales. Assign the Gemini licenses to that OU, and enable Gemini for that OU only.

Create a script to assign a Gemini license to new users if they are in marketing or sales. Run the script daily.

Create an organizational unit (OU) for marketing and sales. Assign the Gemini licenses to that OU, and enable Gemini for that OU only.

Assign Gemini licenses to each user in the marketing and sales departments.

Enable Gemini for the entire organization. Instruct users in other departments not to use Gemini.

Your company wants to enable single sign-on (SSO) for its employees to access a newly acquired cloud-based marketing platform. The marketing platform vendor has confirmed SAML 2.0 compatibility and provided the necessary metadata. You need to streamline user access and centralize authentication through Google Workspace. What should you do?

Create a new SAML application in the Google Admin console.

Request an API key from the marketing platform vendor for SAML integration.

Enable two-factor authentication for all users to enhance security before implementing SSO.

Instruct employees to log in to the marketing platform using the Sign In with Google functionality.

Create a new SAML application in the Google Admin console.

Your organization handles a significant amount of sensitive customer data and must follow strict industry regulations. To meet an upcoming compliance deadline, you need to quickly implement a solution that automatically classifies files stored in Google Drive based on the content of files.What should you do?

Create data loss prevention (DLP) rules for Drive. Configure the rules to apply Drive labels based on content.

Apply Drive labels based on content. Use Google Vault to create retention rules based on Drive labels, ensuring that data is kept for the required duration.

Implement a third-party data governance tool that integrates with Drive and provides advanced classification capabilities.

Add users into organizational units (OUs). Configure default file classification in Drive for the desired OUs.

Your company provides shared Chromebook workstations for employees to access sensitive company data. You must configure the devices to ensure no sensitive data is stored locally and that browsing data is cleared after each use. What should you do?

Force ephemeral mode in Chrome. Disable offline access for sensitive Workspace apps like Docs, Sheets, and Drive.

Enable the Manage Guest Session functionality, and set the maximum user session length.

Force ephemeral mode in Chrome. Allow offline access for all Workspace apps with strict expiration times.

Disable offline access for all Workspace apps. Enable incognito mode for Chrome browsing sessions.

A new user at your organization is unable to access Google Meet. You have verified that the user's account is active and the correct licenses are assigned. You need to resolve the access issue. What should you do?

Verify that Meet is enabled as a service for the user's account in the Admin console.

Check the user's browser settings to ensure that Meet is not blocked.

Instruct the user to clear their browser's cache and cookies.

Restart the user's computer to refresh their network connection.

Verify that Meet is enabled as a service for the user's account in the Admin console.

During a recent Google Meet video conference, several employees reported that they could not hear the presenters. The presenters confirmed that their laptops' microphones were working. The affected employees were all using company-issued laptops. You need to quickly diagnose the source of the issue. What should you do first?

Verify that the audio drivers on the affected laptops are up-to-date and functioning correctly.

Check the Admin console to determine whether there are recent Meet-related notifications or alerts.

Check if Context-Aware access rules were set to prevent Meet access from the user's network location.

Use the Meet quality tool for each affected user to analyze their microphone settings and configurations during the meeting.

Your organization wants to prevent a group of users from logging into their Google Drive when they are traveling internationally for business.You have added these users to an organizational unit (OU). You need to secure the users' access to the Google Drive app to meet this requirement.What should you do?

Define location-based access levels. Assign the levels to the Google Drive app for the OU.

Disable Google Drive for users in the OU.

Define location-based access levels. Assign the levels to the Google Drive app for the OU.

Require 2-step verification (2SV) when users in the OU sign in.

Define user-based access levels. Assign the levels to the Google Drive app for the OU.

Your company is transitioning to Google Workspace from legacy communication and collaboration applications. User accounts are managed in Active Directory and synced to Google Workspace by using Google Cloud Directory Sync (GCDS). Your company is implementing a new security policy for all accounts that requires complex passwords. Passwords must be at least 20 characters long, contain 3 symbols, 4 numbers, and 2 capital letters.You need to enforce the new password policy in Google Workspace. What should you do?

Create a password policy in Active Directory. Enable password synchronization in GCDS.

Share the instructions for changing a Google account password with your users. Monitor password strength in the Google Admin console as users change their passwords.

Enable strong password enforcement and require a minimum length of 20 characters at the top-level organizational unit.

Create a password policy in Active Directory. Install Password Sync on the global catalog servers for Active Directory and require a password change for your users.

Create a password policy in Active Directory. Enable password synchronization in GCDS.

Your company's legal department has issued a litigation hold that requires you to preserve all data related to a specific project. You need to ensure that all data for this project, including emails, documents, and chats, are preserved indefinitely and cannot be deleted by users. What should you do?

Create a hold in Google Vault that includes all users and data sources associated with the project.

Assign an Archived User license to all users involved in the project.

Set up a retention rule in Google Vault that retains all data from Gmail and Drive indefinitely.

Export all project related data from Google Workspace and store the data in a separate, secure location.

You need to create an automated application or process that includes connectors to external data, leverages Google Sheets data, and is easily shared as a mobile application. What should you do?

Create an AppSheet application to connect the different data sources. Set up the mobile application.

Create an application by using App Engine. Connect the application to your Workspace environment

Copy the external data to BigQuery. Use a Connected Sheet to interact with the data.

Create an AppSheet application to connect the different data sources. Set up the mobile application.

Create an automation process by using Apps Script. Run the process through Google Sheets.

Your organization recently deployed Google Workspace. Over 3,000 external contacts were shared in public folders in Microsoft Exchange before the implementation. You need to ensure that these external contacts appear to domain users in Gmail. What should you do?

Use the Domain Shared Contacts API to add the external contacts to the Directory.

Export the external contacts to a CSV file, upload the file to Google Drive, and instruct users to import to their My Contacts.

Use Google Cloud Directory Sync to sync the external contacts from the public folders in Microsoft Exchange to the Directory.

Use the Domain Shared Contacts API to add the external contacts to the Directory.

Create a user account, add the external contacts, and delegate them to all users in the domain.

Your organization has experienced a recent increase in unauthorized access attempts to your company's Google Workspace instance. You need to enhance the security of user accounts while following Google-recommended practices. What should you do?

Enforce the use of physical security keys as the 2-Step Verification (2SV) method for all users.

Disable password recovery options to prevent unauthorized individuals from accessing user accounts.

Implement a strong password policy and enable text messages as the 2-Step Verification (2SV) using text messages.

Enforce the use of physical security keys as the 2-Step Verification (2SV) method for all users.

Enforce a strong password policy that requires users to include special characters, numbers, and uppercase letters.

Your company operates several primary care clinics where employees routinely work with protected health information (PHI). You are in the process of transitioning the organization to Google Workspace from a legacy communication and collaboration system. After you sign the Business Associate Agreement (BAA), you need to ensure that data is handled in compliance with regulations when using Google Workspace. What should you do?

Create a label for Google Drive content to help employees identify sensitive data.

Implement a third-party backup service that is also compliant with Google Workspace core services.

Create a label for Google Drive content to help employees identify sensitive data.

Instruct the staff to not store any PHI in Google Workspace core services, including Google Drive. Docs. Sheets, and Keep.

Disable integrations with third-party apps and turn off non-core Google services.

You are onboarding a new employee who will use a company-provided Android device. Your company requires the ability to enforce strong security policies on mobile devices, including password complexity requirements and remote device wipe capabilities. You need to choose the appropriate Google Workspace mobile device management solution. What should you do?

Implement Google's advanced management solution for the mobile device.

Use a third-party mobile device management (MDM) solution to manage the device.

Allow the employee to use their personal device without enrolling it in any mobile device management (MDM) solution.

Implement Google's basic management solution for the mobile device.

Implement Google's advanced management solution for the mobile device.

You are configuring Google Chat for your organization. Using the Adin console, you want to enable employees to view their chat history by default and allow employees to turn off chat history. What should you do?

Set the top-level default conversation history setting to ON and allow users to change their history setting.

Configure Google Vault to retain all Chat messages, and exclude organizational units (OUs) with users who want to turn Chat history off.

Set the space history setting to OFF and chat history to ON.

Set the top-level default conversation history setting to ON and allow users to change their history setting.

Set the top-level default conversation history settings to OFF and allow users in each organizational unit (OU) to change their history setting.

Your company wants to start using Google Workspace for email. Your domain is verified through a third-party provider. You need to route the email to Google Workspace. What should you do?

Update your domain's MX records to the Google Workspace MX records provided in the setup instructions.

Change your domain's A record to point to Google's mail servers.

Configure a forwarding rule in your current email system to redirect all messages to Gmail.

Update your domain's MX records to the Google Workspace MX records provided in the setup instructions.

Create a CNAME record that maps your domain to ''gmail.com.''

Your organization requires enhanced privacy and security when sending messages to banks and other financial institutions. Your organization uses Gmail, but the banks use various other email providers. You need to maximize privacy and limit access to messages sent and received between your organization and the banks. What should you do?

Set up Transport Layer Security (TLS) compliance for inbound and outbound messages with a list of the banks' email domains. Validate the TLS connections.

Configure Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) authentication for your email domains.

Enable Protect against unauthenticated emails in Gmail Safety.

Enable confidential mode for Gmail. Instruct employees to use confidential mode when sending messages to the banks.

An end user has thousands of files stored in Google Drive. Their files are well organized with Drive labels. You need to advise the end user on how to quickly identify all files that are contracts. What should you do?

Advise the user to search for files that are labeled as 'contracts'.

Advise the user to use the Google Drive API to search for files with the keyword 'contracts'

Advise the user to search in Drive for files with the keyword 'contracts', and use the 'modified by me' filter.

Advise the user to search for files that are labeled as 'contracts'.

Advise the user to use the Investigation tool to search for files with the keyword 'contracts' and updated by you.

You've received multiple reports about a suspicious email from someone who is pretending to be from your organization's human resources department. The email is prompting employees to click a link for a password update. You want to remediate this sender's emails. What should you do?

Use the security investigation tool to search for users who received the suspicious email, and select Mark message as phishing.

Use the security investigation tool to action the suspicious email and select Mark message as spam.

Create an activity rule to alert administrators to similar emails from that sender.

Notify all employees and request that they report this email as spam.

You've noticed an increase in phishing emails that contain links to malicious files hosted on external Google Drives. These files often mimic legitimate documents and trick users into granting access to their accounts. You need to prevent users from accessing these malicious external Drive files, but allow them to access legitimate external files. What should you do? (Choose two.)

Conduct regular security awareness training to educate users.

Create a Drive trust rule that blocks all external domains except for a pre-approved list of trusted partners.

Enforce stricter password policies.

Conduct regular security awareness training to educate users.

Create a Drive trust rule that blocks all external domains except for a pre-approved list of trusted partners.

Deploy advanced malware detection software on all user devices to scan and block malicious files. E Implement two-factor authentication for all users

A user accessing sensitive data is experiencing repeated issues with accessing certain files in Google Drive from their laptop by using the Chrome browser. When you contact Google support, the support representative asks to review an HTTP archive file recording (HAR). You need to share logs with Google support without compromising data privacy. What should you do?

Open the HAR file in a text editor and delete sensitive information. Upload the HAR file to Google Drive and share the file only with the Google support representative

Ask the Google support representative for access to a Google Drive folder used by the Google support team. Upload the HAR file.

Share your screen with the Google support representative so they can view the file without having a copy of the file.

Upload the HAR file to Google Drive and share the file with the Google support representative.

Per regulatory requirements, your company is required to keep the data of employees located in Germany within Europe and the data of employees located in the US within the US. The employees in Germany are in a separate organizational unit (OU) than employees in the US. You need to ensure that where employee data is stored is in compliance with the location regulations.What should you do?

Navigate to the Data Regions function in the Admin console. Select the Europe region for employees in Germany, and select the US region for US employees.

Instruct employees to use Drive for desktop to keep documents on their corporate computers.

Create two Groups. Assign employees into the Germany or US Group based on their location. Use Google Drive trust rules to prevent sharing between the Groups.

Navigate to the Data Regions function in the Admin console. Select the Europe region for employees in Germany, and select the US region for US employees.

Navigate to the Data Regions function in the Admin console. Select 'No preference.'

Your organization allows employees to use their personal devices for work purposes. You want to ensure these devices follow the company's security policies. You need to choose a mobile management solution that provides minimal passcode enforcement and allows for an admin to remotely wipe a user's account from the device. You also want to avoid having to install agents on employees' personal devices. What should you do?

Implement Google's basic management on mobile devices.

Implement Google's advanced management on mobile devices.

Implement Google's basic management on mobile devices.

Enforce a strong password policy, and enforce the password policy at the next sign-in.

Deploy a third-party mobile device management (MDM) solution.

An employee is leaving your company and has numerous files stored in My Drive. Their manager wants to retain access to these files. You need to offboard the departing employee's Google Workspace account while ensuring that the manager can still access the files while following Google-recommended practices. What should you do?

Transfer ownership of the departing employee's files to the manager during the user deletion process.

Use Google Vault to establish a retention policy for the organizational unit (OU) of the departing employee. Assign the Google Archived User license.

Instruct the departing employee to share their My Drive folder with the manager before leaving. Delete the Google Workspace account on the departing employee's last day.

Download the departing employee's Drive data by using Google Takeout. Upload the data to the manager's Drive before deleting the departing employee's Google Workspace account.

Transfer ownership of the departing employee's files to the manager during the user deletion process.

Your company has recently migrated from an on-premises email solution to Google Workspace. You have successfully added and verified the new primary domain. However, you also want to continue receiving emails sent to your former on-premises email server for a transitional period. You need to ensure that emails sent to your former domain are still delivered to your on-premises server, even though your primary email system is now Google Workspace. What should you do?

Configure MX records for the former domain to point to your on-premises email servers.

Add the former domain as a secondary domain in your Google Workspace settings and verify the domain.

Adjust the TTL (Time-to-Live) for the former domain to ensure a smooth transition.

Add the former domain as a domain alias for the primary domain.

A department at your company wants access to the latest AI-powered features in Google Workspace. You know that Gemini offers advanced capabilities and you need to provide the department with immediate access to Gemini's features while retaining control over its deployment to ensure that corporate data is not available for human review. What should you do?

Enable Gemini for the department's organizational unit and assign Gemini licenses to users in the department.

Monitor Gemini adoption through the administrator console and wait for wider user adoption before assigning licenses.

Enable Gemini for non-licensed users in that department so they have immediate access to the free service.

Enable Alpha features for the organization and assign Gemini licenses to all users.

A user in your organization reported that their internal event recipient is not receiving the Calendar event invites. You need to identify the source of this problem. What should you do?

Check whether the event recipient has turned off their email notifications for new events in their Calendar settings.

Check whether the business hours are set up in the event recipient's Calendar settings.

Check if Calendar service is turned off for the event creator.

Check whether the Calendar event has more than 50 guests.

Check whether the event recipient has turned off their email notifications for new events in their Calendar settings.

Your company has recently purchased a new domain name to use for the corporate email addresses. However, you are unable to access certain features in Google Workspace because the domain is not verified. You need to verify the domain. What should you do?

Request a TXT record be added to the DNS zone by your domain registrar.

Contact Google support and request manual verification.

Add an MX record to your DNS zone that points to Google Workspace.

Request a TXT record be added to the DNS zone by your domain registrar.

Purchase a SSL certificate for your domain.

You notice an increase in support cases related to Chrome browser within your organization. You suspect a potential outage or service disruption with Chrome browser. You need to determine whether any information has been released about the issue and if there are any projected timelines for its resolution. What should you do first?

Review the Google Workspace Status Dashboard.

Use the Help Assistant within the Google Admin console to identify if there was a recent outage.

Collect a HAR file, and use the Google Admin Toolbox to identify potential failures.

Review the Google Workspace Status Dashboard.

Log a case with Chrome Enterprise support.

You are configuring Gmail for your company and want to implement a layered security approach. You decide to implement industry-standard email authentication protocols. What should you do?Choose 2 answers

Configure DKIM to digitally sign outbound emails and verify their origin.

Set up SPF records to specify authorized mail servers for your domain.

Enable a default email quarantine for all users to isolate suspicious emails and determine if the messages haven't been authenticated.

Configure a blocked senders rule to block all emails from unknown senders.

Configure DKIM to digitally sign outbound emails and verify their origin.

Disable IMAP for your organization to prevent external clients from accessing Gmail.

Set up SPF records to specify authorized mail servers for your domain.

Your company has just started using Search Ads 360. You need to limit access to Additional Google services for your entire organization by using the Admin console. Only the marketing team and a specific group of users from the web design team should have access. What should you do?

Enable Search Ads 360 for the marketing organizational unit (OU). Create a new group in the Admin console that includes the web design team users who need access. Enable Search Ads 360 for that group.

Enable Search Ads 360 for both the marketing and web design team organizational units (OUs). Create a group to explicitly deny access to Search Ads 360. Assign the group to the web design users who should not have access.

Enable Search Ads 360 at the top level of your organizational structure.

Enable Search Ads 360 for the marketing organizational unit (OU). Create a sub-OU under the marketing OU. and move the web design team users who need access into this sub-OU.

Enable Search Ads 360 for the marketing organizational unit (OU). Create a new group in the Admin console that includes the web design team users who need access. Enable Search Ads 360 for that group.

Google Associate Google Workspace Administrator Practice Test 2

Your organization has enabled Google Groups for Business to let employees create and manage their own email distribution lists and web forums. You need to ensure that users cannot join external Google Groups with their Google Workspace accounts without interrupting internal group usage. What should you do?

Become a Premium Member for full access

Unlock Premium Member

Google Associate Google Workspace Administrator Practice Test 2

Question

Google Associate Google Workspace Administrator Practice Tests

Practice Tests