An admin wants to use a custom extension to install a client certificate on a ChromeOS device so that it can connect to the corporate WI-FI.Which step Is necessary to accomplish this?

Install on the device via guest mode

Distribute through the Chrome Web Store

Encode the certificate in DER-encoded format

What is a feature of Verified Boot?

Makes sure that the firmware and OS have not been tampered with

Protects anonymous guests from using the device

Eliminates the need for strict policy controls

Prevents the user from accessing unauthorized websites

You are using a third-party service for SSO. Users are confused when signing onto a Chrome device because they are asked for Google account details before being redirected to the sign-In screen for your SSO provider Which setting must be changed so managed devices open the SSO provider login page by default?

SAML single sign-on login frequency

SAML single sign-on password synchronization flows

The security team is requiring Wi-Fi connectivity to be disabled on ChromeOS devices. Using the Google Admin console, how would you configure ChromeOS devices to block all WI-FI connectivity and hide the WI-FI Icon?

Remove Wi-Fi from 'Enabled network interfaces '

Configure 'Restricted Wi-Fi Networks '

Remove Wi-Fi from 'Enabled network interfaces '

Restrict 'Auto Connecting' to Wi-Fi

An organization has created organization units within the Google Admin console for additional management structure. What is the most effective way to manage each OU while not affecting the top-level OU policy?

Override the inheritance for a given policy

Delete sublevel OUs and only work from the top level OU

Override the inheritance for a given policy

Force inheritance from top level OU to all OUs

You are a ChromeOS Administrator of a school district While working with a teacher in one of the schools, they mention they are having issues downloading files on their ChromeOS device. What are some ways you can help troubleshoot with the least amount of disruption to the user?

Check how much storage Is being used on the device then delete or move files that aren't needed anymore

Run Diagnostics from the ChromeOS device to troubleshoot

Check how much storage Is being used on the device then delete or move files that aren't needed anymore

Reset the user's ChromeOS device to its original factory settings

Check for system updates If any updates are available install them

Help Desk administrators need a limited set of privileges to perform actions in the Google Admin console. How should an administrator grant these permissions while conforming to the practice of least privilege?

Create a new custom admin role and assign

Create a Service Desk Group and add Service Desk admins to the group

Create a new custom admin role and assign

Grant service desk administrators the Services Admin Role

Allow Help Desk administrators full access to manage users

A large marketing company hires interns in the IT department. The interns should see only info from ChromeOS devices but should not be able to manage or update any device.How should an admin assign this role to Interns?How should an admin assign this role to interns?

Create Custom role under Chrome management and assign Telemetry API role

Create a custom services admin role and enable 2FA

Create Custom role under Chrome management and assign Telemetry API role

Create Custom role under Chrome management and assign Settings rote

Create Custom role under Chrome management and assign Manage ChromeOS devices role K.

To use Verified Access in your organization, you need to have a Chrome extension that calls Verified Access API on the client devices. Where can you go to get this extension?

Independent software vendor (ISV) or Google Verified Access API

Independent software vendor (ISV) repository

You're in charge of deploying video conferencing equipment and it has been decided that you will leverage ChromeOS devices. What initial considerations should you make when deciding on devices?

A form factor compatible for both remote and site workers is required

Deploying instructional guides to all users on setup configuration, and use of new equipment

A form factor compatible for both remote and site workers is required

A precise time window on how to apply security patches and updates to all devices

Devices must have 8GB of RAM and obey supported processor models

A ChromeOS Administrator has deployed ChromeOS devices in their organization. How can the company evaluate the compatibility with future updates following Google's best practices while still gaining access to new features when they launch?

Enable 'Auto Updates' on all devices on the 'Stable channel*, but let the employees in the IT department run their devices on the 'Beta channel* so they have time to evaluate and adapt the environment to each update before it reaches Stable

Disable ''Auto Updates'' on all devices and let the admin test the newest release on the 'Stable channel' on their own device before rolling it out organization-wide

Set 5% of the organization across several departments on the 'Beta channel'1, and configure the rest of the fleet to receive auto updates on the 'Stable channel'

Set the entire fleet to update in accordance with the 'Long-term Support (LTS) channel'

Which management feature makes ChromeOS devices a popular choice for IT administrators in educational organizations and enterprises?Which management feature makes ChromeOS devices enterprises?

Centralized management through Admin console

Secure management through on prem infrastructure

Remote BIOS controls and firmware update

Centralized management through Admin console

Inability to remotely control and monitor devices

What should an administrator do to view the number and type of ChromeOS upgrades purchased and in use by their domain?

Verify upgrades on devices page

Check reports page for upgrades

As a ChromeOS Administrator, you have been asked to enroll all of your devices into a specific device OU using Zero-Touch Enrollment (ZTE). What are the next steps?

Generate a ZTE pre-provision enrollment token for your specified device OU

Give the company domain name to your Chrome Partner to enable ZTF

Generate a ZTE pre-provision enrollment token for your specified device OU

Give the company domain name to your Chrome Partner to enable ZTF

Generate a ZTE pre-provision enrollment token directly for your domain root OU

Generate a ZTE pre-provision enrollment token for your specified user OU

Use a dedicated ZTE Admin account for device enrollment

What is the recommended way to provision users from an on-prem Active Directory environment into the Google Admin console?

Azure AD Google Cloud/G Suite Connector

To allow remote users to securely connect to an internal network, the organization you're supporting is using a VPN. The organization would like you to configure the ChromeOS devices so that the Android VPN clients deployed are automatically configured with the correct hostname. How should you configure this in the Admin Console according to Google best practice?

Add a managed configuration using JSON to the Android app

Download the Android app on a ChromeOS device, add the hostname manually then re-upload the app in the organization's private Google Play Store and deploy it lo all ChromeOS devices

Contact the VPN provider and ask them to provide you with a custom installable client with the correct configuration pre-configured Then deploy that installable

Add a managed configuration using JSON to the Android app

Upload a JSON file with the configuration into the Google Play Store

Your customer is deploying ChromeOS devices in their environment and requires those ChromeOS devices to adhere to web filtering via TLS (or SSL) Inspection. What recommendations should you make to your customer in setting up the requirements for ChromeOS devices?

Configure a hostname allowlist, set up a TLS (or SSL) certificate, then verify TLS (or SSL) inspection is working

Reach out lo Google Workspace Security and Compliance for tailored configurations for your customer

Configure a transparent proxy, set up your allowlist to use * google com. then verify TLS (or SSL) inspection is working

ChromeOS devices are preconfigured to adhere to company TLS (or SSL) inspection by default and can therefore be deployed with no additional configuration

As a ChromeOS Administrator, you are tasked with blocking incognito mode in the ChromeOS Browser. How would you prevent users from using incognito mode?

Navigate to 'Users & Browser Security Settings' and set the 'Disallow incognito mode' policy

Go ,0 'User & Browser Settings' to restrict sign-in to pattern and 'Disallow incognito mode '

From 'Device Settings' change Kiosk settings to 'Disallow incognito mode '

ln 'Enrollment Settings' disable vended access and incognito mode (or content protection

A customer deploys a large number of ChromeOS devices and would like to start the process of turning on Zero-Touch Enrollment (ZTE) to streamline their deployment process. As an administrator, what would be required to enable ZTE?

identify OU to place devices during enrollment

Create a pre-provisioning token

How would you deploy a Progressive Web Application to all managed user accounts?

Force-install the Progressive Web Application URL in the 'Chrome Apps & extensions' page

Set up Chrome Imprivata shared apps & extensions to force-install the Progressive Web Application URL

Go to 'User & Browser Settings' and add the Progressive Web Application URL in the 'Legacy Browser Support' site list

Open 'Additional Google services' to force-install the Progressive Web Application URL

How would you deploy your 'Terms of Services' page to all managed ChromeOS devices?

Go to 'User & Browser and 'Managed Guest Session' settings to upload your terms of service

Navigate to 'Chrome Verified Access' and enable the policy for content protection

Go to 'User & Browser and 'Managed Guest Session' settings to upload your terms of service

ln 'User & Browser Settings' upload the 'Terms of Service' as a wallpaper

Navigate to 'User & Browser' and 'Managed Guest Session' settings to upload your custom avatar

You are setting up ChromeOS devices in a public library and need to prevent your ChromeOS devices from sleeping when not in use. How would you set up your policy to achieve this?

In 'Power management settings' apply 'Do not allow device to sleep/shut down when idle on the sign-in screen '

In 'User & Browser Settings' for Power and shutdown set the policy to 'Do not allow wake locks '

In 'Power management settings' set the policy to 'Only allow users to turn off the device using the physical power button '

In 'Managed Guest Session settings' set the maximum user session length to 'unlimited '

The security department has been informed that a ChromeOS device was stolen out of an employee's car. What should you do in the Admin console to ensure the device Is rendered Inoperable while still maintaining management of the device?

Tag the ChromeOS device as stolen

Deprovision the ChromeOS device

Your organization's security protocols require you to ensure that any unattended devices log the user out after 24 hours. You have 1000 ChromeOS devices to manage. How would you Implement this with the least amount of admin effort?

Enable the 'User and Browser Settings' and update 'Maximum user session length* to any time up to 24 hours

Create a corporate policy stating (he users are to manually sign out after the end of every shift

You can remotely access each device and sign out of the user account using Chrome Remote Desktop

Force-install a custom app to each device in question that notifies the user that they need to sign out of their device after 24 hours

At a specific location in your organization, users cannot log in to their ChromeOS devices. The ChromeOS Administrator has also noticed that devices have not synced in the past 24 hours. You have updated policies In the Admin console for your fleet of ChromeOS devices, but the devices are not getting the updated policies. What is a probable change in the environment that can cause these issues?

Your network administrator has blocked all network traffic to Google services

A different location enrolled a large number of new devices

Your network administrator has blocked all network traffic to Google services

Your root Certificate Authority expired

Your organization's licenses have recently expired

What are two ways customers can open a support case for ChromeOS? Choose 2 answers

Contact the device manufacturer

File case through Customer Care Portal

Chat support via the Admin console

Contact the device manufacturer

File feedback on the device with Alt + Shift +1

File case through Customer Care Portal

Send an email to ChromeOS support

You have a number of applications that you rely upon. You want to ensure that your applications continue to run smoothly with each new version of Chrome. What should you do?

Implement a QA strategy and put their IT group and 5% of users on the beta channel of ChromeOS so they can find and report bugs early for upcoming Chrome releases

Ask users to provide feedback on the applications within a week of a new Chrome release

Advise them to take no action All applications are automatically supported on the latest version of Chrome

Always install the latest version of those applications when they become available so they are always compatible with the latest version of Chrome

Implement a QA strategy and put their IT group and 5% of users on the beta channel of ChromeOS so they can find and report bugs early for upcoming Chrome releases

You want to enterprise enroll a device that has existing consumer accounts. What should you do first?

Delete all consumer accounts, and then follow the same steps for enrolling a brand new device

Contact Google support to convert the device into an enterprise device

Delete all consumer accounts, and then follow the same steps for enrolling a brand new device

follow the same steps for enrolling a brand new device

You have been tasked with selecting a 3rd party IdP to allow logging into ChromeOS devices. Your ChromeOS devices are displaying an 'Unable to sign in to Google' message. How should you troubleshoot this?

Ensure the Identity provider is using an SAML compliant connection

Check Multi-Factor Authentication for the user account in the Google Admin console

Disable the SSO connection in the Google Admin console

Apply the SSO certificate lo the ChromeOS device

As an administrator, you would like the ability to see and test upcoming changes to the Google Admin console. How would an admin get access to pre-release features and upcoming ChromeOS device management changes to the Admin console?

Register for the Chrome Enterprise Trusted Tester Program

Enroll in the ChromeOS Factory Software Platform

Join the Chrome Enterprise BETA Testing

Register for the Chrome Enterprise Trusted Tester Program

Create a ChromeQS Developer Account

Google ChromeOS Administrator Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

You are asked why ChromeOS devices do not require additional antivirus software. How should you respond?

Every time ChromeOS updates, it automatically updates the antivirus software on the device

Every ChromeOS device is pre-installed with antivirus software which automatically updates during the life of the device

As part of a multi-layered security approach ChromeOS uses a read-only operating system which cannot be affected by viruses

The Admin console automatically deploys antivirus software to enrolled ChromeOS devices and is included in the Chrome Enterprise/Education Upgrade

Comment (0)

Google ChromeOS Administrator Practice Test 1

Question

Google ChromeOS Administrator Practice Tests

Practice Tests