Google Associate Google Workspace Administrator Practice Test - Questions Answers, Page 3

List of questions
Question 21

You are configuring email for your company's Google Workspace account. The company wants to prevent certain types of files from being sent or received as email attachments in the simplest and most cost-effective way. What should you do?
Adjust the maximum message size limit to prevent large files from being sent or received.
Enable the Security Sandbox in Gmail to automatically quarantine emails with suspicious attachments.
Scan all incoming and outgoing emails for malicious attachments by using an industry standard third-party email security solution.
Configure an attachment compliance rule in Gmail settings to block specific file types.
Configuring an attachment compliance rule in Gmail allows you to specifically block certain types of files from being sent or received as email attachments. This approach is simple and cost-effective because it leverages Google Workspace's built-in functionality without requiring third-party solutions or advanced configurations. You can easily specify which file types to block, ensuring that your organization is protected from undesirable attachments.
Question 22

Your organization has a Shared Drive with 150 users organized as a group. All users of the group need to be able to add and edit files, but the ability to move, delete, and share content must be limited to a single user. You need to configure the shared drive to meet these requirements efficiently.
What should you do?
Your organization has a Shared Drive with 150 users organized as a group. All users of the group need to be able to add and edit files, but the ability to move, delete, and share content must be limited to a single user. You need to configure the shared drive to meet these requirements efficiently.
What should you do?
Create a folder inside the shared drive. Share the files with the group by using the share function.
Create a folder inside the shared drive. Share the folder link with the group.
In the Admin console, assign Contributor access for the shared drive to each user. Assign Content Manager access for the shared drive to the single user.
In the Admin console, assign Contributor access for the shared drive to the group. Assign Content Manager access for the shared drive to the single user.
By assigning Contributor access to the group, all 150 users will be able to add and edit files in the shared drive. Assigning Content Manager access to the single user ensures that only that person has the ability to move, delete, and share content within the shared drive. This approach efficiently meets the requirement of limiting certain administrative privileges while allowing the group to collaborate on content.
Question 23

Your company wants to minimize distractions and inappropriate content in their Google Chat spaces. You need to give trusted employees the ability to remove messages and ban users from specific Chat spaces. What should you do?
Assign the trusted employees as moderators for the relevant Chat spaces.
Create a data loss prevention (DLP) rule that blocks inappropriate content from being shared
Use the security investigation tool to audit and monitor Chat messages.
Disable all Chat spaces except those specifically approved by management.
Assigning trusted employees as moderators for the relevant Chat spaces will give them the necessary privileges to remove messages and ban users when needed. This is the most efficient way to control inappropriate content and maintain a positive and productive environment within the spaces. Moderators can take action to address issues directly without requiring more complex or restrictive solutions.
Question 24

Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization's email address and their email address with the sub-agency domain name. What should you do?
Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization's email address and their email address with the sub-agency domain name. What should you do?
Redirect the acquired domain to Google's MX records and add the account as a ''send as'' address.
Set up the acquired agency as a secondary domain from the Manage domains page.
Set up the acquired agency as a user alias domain from the Manage domains page.
Set up the acquired agency as a secondary domain and swap it to the primary domain.
Setting up the acquired agency as a user alias domain allows users to have their new organization's email address while still being able to send and receive emails using their previous email address with the sub-agency domain. This approach efficiently ensures they can use both email addresses without requiring additional configuration for separate accounts.
Question 25

The current data storage limit for the sales organizational unit (OU) at your company is set at 10GB per user. A subset of sales representatives in that OU need 100GB of storage across shared services. You need to increase the storage for only the subset of sales representatives by using the least disruptive approach and the fewest configuration steps. What should you do?
Move the subset of users to a sub-OU, and assign a 100GB storage limit to that sub-OU.
Instruct the subset of users to store their documents in a Shared Drive with a 100GB limit.
Change the storage limit of the sales OU to 100GB.
Create a configuration group, and add the subset of users to that group. Set the group storage limit to 100GB.
By moving the subset of sales representatives to a sub-organizational unit (OU) and assigning a 100GB storage limit to that sub-OU, you can efficiently increase the storage for those users without affecting the rest of the sales team. This approach allows you to target the specific users that require more storage, maintaining minimal disruption and configuration steps.
Question 26

Your company's security team should be able to investigate unauthorized external file sharing. You need to ensure that the security team can use the security investigation tool and you must follow the principle of least privilege. What should you do?
Grant the super admin role to a delegate from the security team.
Create a pre-built reporting role. Assign the role to the security team alias.
Share the Drive audit log with the security team.
Create a custom admin role with security center privileges. Assign the role to the individual security team members.
By creating a custom admin role with security center privileges, you can ensure that the security team has the necessary access to investigate unauthorized external file sharing while adhering to the principle of least privilege. This approach provides the security team with the specific permissions they need without granting unnecessary broader privileges, such as those associated with the super admin role.
Question 27

Users at your company are reporting that they are not receiving some emails in their corporate Gmail account. You have checked the Google Workspace Status Dashboard and you found no service disruptions. You need to identify the root cause of the problem and resolve the mail delivery issues. What should you do? (Choose two.)
Use Email Log Search (ELS) to identify specific delivery failures.
Verify whether the organization's Mail Exchange (MX) records are correctly configured.
Check the users' spam folders to determine whether emails are being misdirected.
Investigate the Gmail log events for error messages or unusual patterns.
Check the senders' IP addresses in the inbound mail gateway.
Use Email Log Search (ELS): ELS allows you to trace email delivery and identify issues, such as undelivered or bounced messages. This is an essential tool for identifying the root cause of mail delivery issues.
Verify whether the organization's Mail Exchange (MX) records are correctly configured: Incorrect MX records could prevent emails from being delivered to the organization's Gmail accounts. It's important to verify that these records are set up properly to ensure smooth email delivery.
Question 28

You are designing a group structure for your company that will be used to grant access to a specific shared drive. You need this solution to automatically add and remove employees based on their job role. What should you do?
Create a security group. Add all employees with the desired job role. Grant the security group access to the shared drive.
Create a distribution list. Add all employees with the desired job role. Grant the distribution list access to the shared drive.
Create a dynamic group. Set the membership criteria to the desired job role. Grant the dynamic group access to the shared drive.
Create a configuration group. Add users on an exception basis. Grant the configuration group access to the shared drive.
A dynamic group automatically manages its membership based on user attributes, such as job role. This approach ensures that employees are automatically added or removed from the group based on their role, minimizing manual effort and ensuring that the group always reflects the current team composition. Granting this dynamic group access to the shared drive ensures that the right users have the appropriate permissions without requiring constant manual updates.
Question 29

You are migrating your organization's email to Google Workspace. Your organization uses the terramearth.com email domain. You need to configure Google Workspace to receive emails sent to terramearth.com. What should you do?
Add terramearth.com as a primary, secondary, or alias domain in Google Workspace. Update the Mail Exchange (MX) records with your domain registrar to direct mail flow to Google's mail servers.
Establish a Transport Layer Security (TLS) connection between your company's existing mail servers and Google's mail servers
Configure an email address in Google Workspace to capture emails sent to unverified domains, including terramearth.com.
Create a domain alias for terramearth.com in Google Workspace. Configure email forwarding to redirect emails to the new Google Workspace accounts.
To receive emails for your domain (terramearth.com) in Google Workspace, you need to add the domain to Google Workspace as either a primary, secondary, or alias domain, depending on your organization's requirements. After adding the domain, you must update the Mail Exchange (MX) records at your domain registrar to point to Google's mail servers. This step is essential to ensure that emails are correctly routed to Google Workspace.
Question 30

Your organization is migrating their current on-premises email solution to Google Workspace. You need to ensure that emails sent to your domain are correctly routed to Gmail. What should you do?
Change the Mail Exchange (MX) records in your current email domain's DNS settings to point to Google's mail servers.
Set up email forwarding from your on-premises email provider to Gmail.
Create a content compliance rule to filter and route incoming emails.
Configure SPF, DKIM, and DMARC records in your current email domain's DNS settings.
To ensure that emails sent to your domain are correctly routed to Gmail, you need to update the Mail Exchange (MX) records in your domain's DNS settings to point to Google's mail servers. This is a critical step in the migration process, as it ensures that all incoming email traffic is directed to Google Workspace after the switch.
Question