ExamGecko
Home / Google / ChromeOS Administrator / List of questions
Ask Question

Google ChromeOS Administrator Practice Test - Questions Answers

List of questions

Question 1

Report Export Collapse

You are asked why ChromeOS devices do not require additional antivirus software. How should you respond?

Every time ChromeOS updates, it automatically updates the antivirus software on the device
Every time ChromeOS updates, it automatically updates the antivirus software on the device
Every ChromeOS device is pre-installed with antivirus software which automatically updates during the life of the device
Every ChromeOS device is pre-installed with antivirus software which automatically updates during the life of the device
As part of a multi-layered security approach ChromeOS uses a read-only operating system which cannot be affected by viruses
As part of a multi-layered security approach ChromeOS uses a read-only operating system which cannot be affected by viruses
The Admin console automatically deploys antivirus software to enrolled ChromeOS devices and is included in the Chrome Enterprise/Education Upgrade
The Admin console automatically deploys antivirus software to enrolled ChromeOS devices and is included in the Chrome Enterprise/Education Upgrade
Suggested answer: C
Explanation:

ChromeOS is designed with multiple layers of security to protect against malware and viruses:

Read-only file system: Most of the operating system is stored in a read-only partition, making it difficult for malware to modify critical files.

Verified boot: Ensures the integrity of the operating system during bootup, preventing tampering by unauthorized software.

Sandboxing: Isolates different processes and websites, limiting the potential damage of any malware that manages to get through.

Automatic updates: Regularly delivers security patches and updates to address vulnerabilities.

While ChromeOS doesn't come with traditional antivirus software, its built-in security features provide robust protection against most threats.

asked 18/09/2024
Piyush Zope
41 questions

Question 2

Report Export Collapse

You want to restrict who can sign in to a managed device during working hours. Which two settings do you need to use?

Choose 2 answers

Single sign-on IdP redirection
Single sign-on IdP redirection
Device oft hours
Device oft hours
User Data (Ephemera))
User Data (Ephemera))
Family Link accounts
Family Link accounts
Suggested answer: B, D
Explanation:

Device off hours:This setting allows you to specify times when the device cannot be used,effectively restricting access to certain hours.

Family Link accounts:Family Link is a parental control app that allows you to manage a child's account and device usage.By requiring Family Link accounts,you can enforce sign-in restrictions for younger users.

Other options are incorrect because:

A:Single sign-on (SSO) redirection simplifies sign-in for authorized users,but doesn't inherently restrict access.

C:User Data (Ephemeral) controls whether user data is saved locally,but doesn't restrict sign-in.

https://support.google.com/chrome/a/answer/3523633

https://families.google.com/familylink/

asked 18/09/2024
Samantha Carpenter
29 questions

Question 3

Report Export Collapse

An admin wants to use a custom extension to install a client certificate on a ChromeOS device so that it can connect to the corporate WI-FI.

Which step Is necessary to accomplish this?

Install on the device via guest mode
Install on the device via guest mode
Distribute through the Chrome Web Store
Distribute through the Chrome Web Store
Force-install to the device
Force-install to the device
Encode the certificate in DER-encoded format
Encode the certificate in DER-encoded format
Suggested answer: C
Explanation:

To install a client certificate on a ChromeOS device for corporate Wi-Fi connectivity, it's necessary to force-install the custom extension containing the certificate. This ensures the extension is installed and activated on the device, enabling it to use the certificate for authentication. Here's how it works:

Custom Extension: The admin creates or obtains a custom extension that includes the client certificate.

Force-Installation: Using the Google Admin console, the admin configures a policy to force-install the extension on ChromeOS devices within the organization.

Device Activation: Once the device receives the policy, the extension is automatically installed and activated, even if the user doesn't manually add it.

Wi-Fi Authentication: The installed extension allows the device to use the client certificate for authentication when connecting to the corporate Wi-Fi network.

Option A is incorrect because guest mode installations are not persistent and won't apply the certificate to the device's Wi-Fi settings.

Option B is incorrect because distributing through the Chrome Web Store is not necessary for a custom extension intended for internal use.

Option D is incorrect because while the certificate encoding is important, it's not the primary step for enabling Wi-Fi authentication.

About ChromeOS device management: https://support.google.com/chrome/a/answer/1289314?hl=enpen_spark

asked 18/09/2024
Maxime SELLY
43 questions

Question 4

Report Export Collapse

An organization was recently hacked through an admin's choice of an operating system. Leadership decides to move to Chromebooks for their security.

While the organization waits for Chromebooks to be delivered, what will allow them to continue using their existing devices securely?

ChromeOS Readiness Guide
ChromeOS Readiness Guide
ChromeOS Managed Browser
ChromeOS Managed Browser
ChromeOS Bytes
ChromeOS Bytes
ChromeOS Flex
ChromeOS Flex
Suggested answer: D
Explanation:

ChromeOS Flex allows the organization to repurpose existing devices by installing a lightweight version of ChromeOS on them. This provides a secure and familiar environment while they await the delivery of new Chromebooks. Here's why it's the best choice:

Security: ChromeOS Flex inherits the security features of ChromeOS, such as sandboxing, verified boot, and automatic updates, mitigating the risks associated with the previous operating system.

Quick Deployment: ChromeOS Flex can be easily installed on existing hardware using a USB drive, minimizing downtime and allowing employees to continue working.

Familiar Interface: The user interface of ChromeOS Flex is similar to ChromeOS, ensuring a smooth transition for employees.

Option A is incorrect because the ChromeOS Readiness Guide is a resource for planning migration, not an immediate security solution.

Option B is incorrect because while ChromeOS Managed Browser enhances security within a browser, it doesn't address vulnerabilities in the underlying operating system.

Option C is incorrect because ChromeOS Bytes is a blog, not a software solution.

ChromeOS Flex: https://chromeenterprise.google/os/chromeosflex/

asked 18/09/2024
Marc-Antoine Meyssat
26 questions

Question 5

Report Export Collapse

Which site isolation policy will enable site isolation for your entire organization?

SitePerProcess
SitePerProcess
IsolateOfigins
IsolateOfigins
IsolatePerProcess
IsolatePerProcess
SiteOrigins
SiteOrigins
Suggested answer: A
Explanation:

The SitePerProcess policy enables site isolation for the entire organization. This means that each website opened in Chrome will run in its own dedicated process, improving security and stability by isolating potential vulnerabilities and preventing one compromised site from affecting others.

Option B (IsolateOrigins) and Option D (SiteOrigins) are not valid policy names.

Option C (IsolatePerProcess) is close but not the exact name of the policy.

Site Isolation in Google Chrome: https://www.chromium.org/Home/chromium-security/site-isolation/

asked 18/09/2024
sidra gray
34 questions

Question 6

Report Export Collapse

What is a feature of Verified Boot?

Makes sure that the firmware and OS have not been tampered with
Makes sure that the firmware and OS have not been tampered with
Protects anonymous guests from using the device
Protects anonymous guests from using the device
Eliminates the need for strict policy controls
Eliminates the need for strict policy controls
Prevents the user from accessing unauthorized websites
Prevents the user from accessing unauthorized websites
Suggested answer: A
Explanation:

Verified Boot is a security feature in ChromeOS that checks the integrity of the system during startup. It verifies that the firmware (low-level software) and the operating system haven't been modified or corrupted by unauthorized sources. If any tampering is detected, Verified Boot can initiate recovery processes to restore the system to a known good state.

Option B is incorrect because Verified Boot doesn't directly manage guest access.

Option C is incorrect because Verified Boot is a security layer that complements, not replaces, policy controls.

Option D is incorrect because website access control is handled by other mechanisms like web filtering or content restrictions.

asked 18/09/2024
Arpita Pattnayak
50 questions

Question 7

Report Export Collapse

You are using a third-party service for SSO. Users are confused when signing onto a Chrome device because they are asked for Google account details before being redirected to the sign-In screen for your SSO provider Which setting must be changed so managed devices open the SSO provider login page by default?

SAML single sign-on login frequency
SAML single sign-on login frequency
SAML single sign-on password synchronization flows
SAML single sign-on password synchronization flows
Single sign-on cookie behavior
Single sign-on cookie behavior
Single sign-on IdP redirection
Single sign-on IdP redirection
Suggested answer: D
Explanation:

The Single sign-on IdP redirection setting controls whether managed devices directly open the login page of the third-party SSO provider (Identity Provider) or first prompt for Google account credentials. By enabling this setting, you streamline the login process for users and eliminate the confusion caused by the extra Google account prompt.

Option A is incorrect because it controls the frequency of re-authentication for SAML SSO, not the initial login page.

Option B is incorrect because it relates to password synchronization between Google and the IdP, not the login page redirection.

Option C is incorrect because it deals with how cookies are handled for SSO, not the login page redirection.

asked 18/09/2024
Jim Apple
42 questions

Question 8

Report Export Collapse

The security team is requiring Wi-Fi connectivity to be disabled on ChromeOS devices. Using the Google Admin console, how would you configure ChromeOS devices to block all WI-FI connectivity and hide the WI-FI Icon?

Configure 'Restricted Wi-Fi Networks '
Configure 'Restricted Wi-Fi Networks '
Prevent WiMax connectivity
Prevent WiMax connectivity
Remove Wi-Fi from 'Enabled network interfaces '
Remove Wi-Fi from 'Enabled network interfaces '
Restrict 'Auto Connecting' to Wi-Fi
Restrict 'Auto Connecting' to Wi-Fi
Suggested answer: C
Explanation:

To completely disable Wi-Fi and hide the Wi-Fi icon on ChromeOS devices, you need to modify the 'Network' settings in the Google Admin console:

Go to 'Device Management' > 'Chrome Management' > 'Device Settings'.

Select the organizational unit (OU) containing the devices you want to manage.

Under 'Network', find 'Enabled network interfaces' and remove 'Wi-Fi' from the list.

Save the changes.

This will disable Wi-Fi adapters on the devices and hide the Wi-Fi icon, preventing users from connecting to Wi-Fi networks.

Why other options are incorrect:

A . Restricted Wi-Fi Networks: This setting only limits which networks users can connect to, not disable Wi-Fi entirely.

B . Prevent WiMax connectivity: WiMax is a different wireless technology and not relevant to Wi-Fi.

D . Restrict 'Auto Connecting' to Wi-Fi: This only prevents automatic connection to networks but doesn't disable Wi-Fi entirely.

asked 18/09/2024
JED MEDIA
37 questions

Question 9

Report Export Collapse

An organization has created organization units within the Google Admin console for additional management structure. What is the most effective way to manage each OU while not affecting the top-level OU policy?

Delete sublevel OUs and only work from the top level OU
Delete sublevel OUs and only work from the top level OU
Disable auto updates
Disable auto updates
Override the inheritance for a given policy
Override the inheritance for a given policy
Force inheritance from top level OU to all OUs
Force inheritance from top level OU to all OUs
Suggested answer: C
Explanation:

Overriding inheritance allows you to apply specific policies to individual OUs without affecting the policies of the parent OU or other sibling OUs. This gives you granular control over different groups of users or devices.

Other options are incorrect because:

A:Deleting sub-level OUs would remove the management structure and negate the purpose of having OUs.

B:Disabling auto-updates would prevent devices from receiving important security and feature updates.

D:Forcing inheritance would apply the top-level OU policy to all sub-OUs,preventing customization.

https://support.google.com/chrome/a/answer/187202

asked 18/09/2024
Kamil Stonjek
36 questions

Question 10

Report Export Collapse

You are a ChromeOS Administrator of a school district While working with a teacher in one of the schools, they mention they are having issues downloading files on their ChromeOS device. What are some ways you can help troubleshoot with the least amount of disruption to the user?

Run Diagnostics from the ChromeOS device to troubleshoot
Run Diagnostics from the ChromeOS device to troubleshoot
Check how much storage Is being used on the device then delete or move files that aren't needed anymore
Check how much storage Is being used on the device then delete or move files that aren't needed anymore
Reset the user's ChromeOS device to its original factory settings
Reset the user's ChromeOS device to its original factory settings
Check for system updates If any updates are available install them
Check for system updates If any updates are available install them
Suggested answer: B
Explanation:

When a teacher is having issues downloading files on their ChromeOS device, it's important to troubleshoot with minimal disruption. Here are steps to address the issue:

Check Storage: Start by checking the available storage on the device. If the storage is full or nearly full, it could prevent new files from being downloaded.

Manage Files: Guide the teacher to delete or move files that are no longer needed. This can be done through the Files app on the ChromeOS device.

Clear Cache: If storage isn't the issue, clearing the browser cache can sometimes resolve download problems.

Check Network: Ensure that the device has a stable internet connection, as an unstable connection can interrupt downloads.

Reference: The troubleshooting steps are based on common practices for resolving download issues on ChromeOS devices and Google's support documentation on fixing file download errors1. These steps are designed to resolve issues without causing significant disruption to the user's experience.

Insufficient Storage: A common reason for download failures on ChromeOS devices is insufficient storage space. Checking the available storage is a simple first step:

Click on the system tray (bottom right corner) and select the Settings gear icon.

In the Settings menu,navigate to the 'Device' section and select 'Storage Management.'

Review the storage usage.If it's nearly full,identify large files or unused apps that can be removed.

Guide the teacher on how to delete files or move them to Google Drive.

System Updates: Outdated software can sometimes lead to bugs or glitches. Ensuring the ChromeOS device is up-to-date is important:

In the Settings menu,navigate to the 'About ChromeOS' section.

Click on 'Check for updates.' If any updates are found,install them.

If updates are pending,ask the teacher to restart the device after the installation.

Additional Troubleshooting (If necessary):

Check Network Connectivity:Ensure the device is connected to a stable Wi-Fi network.Have the teacher try accessing a different website to verify internet access.

Clear Browser Cache:In the Chrome browser,open the Settings menu,navigate to 'Privacy and security,' and select 'Clear browsing data.' Clear the cache for the past hour or day.

Why Other Options Are Less Ideal:

A . Run Diagnostics:While diagnostics can be helpful,they are a more time-consuming step and might not be necessary if the issue is simply related to storage or updates.

C . Reset the Device:This is a drastic measure that should only be considered if other troubleshooting steps fail.It involves wiping the user's data and settings,which is disruptive.

asked 18/09/2024
Peter Unterasinger
42 questions
Total 60 questions
Go to page: of 6
Search

Related questions