ExamGecko
Home Home / Google / ChromeOS Administrator

Google ChromeOS Administrator Practice Test - Questions Answers

Question list
Search
Search

List of questions

Search

Related questions











You are asked why ChromeOS devices do not require additional antivirus software. How should you respond?

A.
Every time ChromeOS updates, it automatically updates the antivirus software on the device
A.
Every time ChromeOS updates, it automatically updates the antivirus software on the device
Answers
B.
Every ChromeOS device is pre-installed with antivirus software which automatically updates during the life of the device
B.
Every ChromeOS device is pre-installed with antivirus software which automatically updates during the life of the device
Answers
C.
As part of a multi-layered security approach ChromeOS uses a read-only operating system which cannot be affected by viruses
C.
As part of a multi-layered security approach ChromeOS uses a read-only operating system which cannot be affected by viruses
Answers
D.
The Admin console automatically deploys antivirus software to enrolled ChromeOS devices and is included in the Chrome Enterprise/Education Upgrade
D.
The Admin console automatically deploys antivirus software to enrolled ChromeOS devices and is included in the Chrome Enterprise/Education Upgrade
Answers
Suggested answer: C

Explanation:

ChromeOS is designed with multiple layers of security to protect against malware and viruses:

Read-only file system: Most of the operating system is stored in a read-only partition, making it difficult for malware to modify critical files.

Verified boot: Ensures the integrity of the operating system during bootup, preventing tampering by unauthorized software.

Sandboxing: Isolates different processes and websites, limiting the potential damage of any malware that manages to get through.

Automatic updates: Regularly delivers security patches and updates to address vulnerabilities.

While ChromeOS doesn't come with traditional antivirus software, its built-in security features provide robust protection against most threats.

You want to restrict who can sign in to a managed device during working hours. Which two settings do you need to use?

Choose 2 answers

A.
Single sign-on IdP redirection
A.
Single sign-on IdP redirection
Answers
B.
Device oft hours
B.
Device oft hours
Answers
C.
User Data (Ephemera))
C.
User Data (Ephemera))
Answers
D.
Family Link accounts
D.
Family Link accounts
Answers
Suggested answer: B, D

Explanation:

Device off hours:This setting allows you to specify times when the device cannot be used,effectively restricting access to certain hours.

Family Link accounts:Family Link is a parental control app that allows you to manage a child's account and device usage.By requiring Family Link accounts,you can enforce sign-in restrictions for younger users.

Other options are incorrect because:

A:Single sign-on (SSO) redirection simplifies sign-in for authorized users,but doesn't inherently restrict access.

C:User Data (Ephemeral) controls whether user data is saved locally,but doesn't restrict sign-in.

https://support.google.com/chrome/a/answer/3523633

https://families.google.com/familylink/

An admin wants to use a custom extension to install a client certificate on a ChromeOS device so that it can connect to the corporate WI-FI.

Which step Is necessary to accomplish this?

A.
Install on the device via guest mode
A.
Install on the device via guest mode
Answers
B.
Distribute through the Chrome Web Store
B.
Distribute through the Chrome Web Store
Answers
C.
Force-install to the device
C.
Force-install to the device
Answers
D.
Encode the certificate in DER-encoded format
D.
Encode the certificate in DER-encoded format
Answers
Suggested answer: C

Explanation:

To install a client certificate on a ChromeOS device for corporate Wi-Fi connectivity, it's necessary to force-install the custom extension containing the certificate. This ensures the extension is installed and activated on the device, enabling it to use the certificate for authentication. Here's how it works:

Custom Extension: The admin creates or obtains a custom extension that includes the client certificate.

Force-Installation: Using the Google Admin console, the admin configures a policy to force-install the extension on ChromeOS devices within the organization.

Device Activation: Once the device receives the policy, the extension is automatically installed and activated, even if the user doesn't manually add it.

Wi-Fi Authentication: The installed extension allows the device to use the client certificate for authentication when connecting to the corporate Wi-Fi network.

Option A is incorrect because guest mode installations are not persistent and won't apply the certificate to the device's Wi-Fi settings.

Option B is incorrect because distributing through the Chrome Web Store is not necessary for a custom extension intended for internal use.

Option D is incorrect because while the certificate encoding is important, it's not the primary step for enabling Wi-Fi authentication.

About ChromeOS device management: https://support.google.com/chrome/a/answer/1289314?hl=enpen_spark

An organization was recently hacked through an admin's choice of an operating system. Leadership decides to move to Chromebooks for their security.

While the organization waits for Chromebooks to be delivered, what will allow them to continue using their existing devices securely?

A.
ChromeOS Readiness Guide
A.
ChromeOS Readiness Guide
Answers
B.
ChromeOS Managed Browser
B.
ChromeOS Managed Browser
Answers
C.
ChromeOS Bytes
C.
ChromeOS Bytes
Answers
D.
ChromeOS Flex
D.
ChromeOS Flex
Answers
Suggested answer: D

Explanation:

ChromeOS Flex allows the organization to repurpose existing devices by installing a lightweight version of ChromeOS on them. This provides a secure and familiar environment while they await the delivery of new Chromebooks. Here's why it's the best choice:

Security: ChromeOS Flex inherits the security features of ChromeOS, such as sandboxing, verified boot, and automatic updates, mitigating the risks associated with the previous operating system.

Quick Deployment: ChromeOS Flex can be easily installed on existing hardware using a USB drive, minimizing downtime and allowing employees to continue working.

Familiar Interface: The user interface of ChromeOS Flex is similar to ChromeOS, ensuring a smooth transition for employees.

Option A is incorrect because the ChromeOS Readiness Guide is a resource for planning migration, not an immediate security solution.

Option B is incorrect because while ChromeOS Managed Browser enhances security within a browser, it doesn't address vulnerabilities in the underlying operating system.

Option C is incorrect because ChromeOS Bytes is a blog, not a software solution.

ChromeOS Flex: https://chromeenterprise.google/os/chromeosflex/

Which site isolation policy will enable site isolation for your entire organization?

A.
SitePerProcess
A.
SitePerProcess
Answers
B.
IsolateOfigins
B.
IsolateOfigins
Answers
C.
IsolatePerProcess
C.
IsolatePerProcess
Answers
D.
SiteOrigins
D.
SiteOrigins
Answers
Suggested answer: A

Explanation:

The SitePerProcess policy enables site isolation for the entire organization. This means that each website opened in Chrome will run in its own dedicated process, improving security and stability by isolating potential vulnerabilities and preventing one compromised site from affecting others.

Option B (IsolateOrigins) and Option D (SiteOrigins) are not valid policy names.

Option C (IsolatePerProcess) is close but not the exact name of the policy.

Site Isolation in Google Chrome: https://www.chromium.org/Home/chromium-security/site-isolation/

What is a feature of Verified Boot?

A.
Makes sure that the firmware and OS have not been tampered with
A.
Makes sure that the firmware and OS have not been tampered with
Answers
B.
Protects anonymous guests from using the device
B.
Protects anonymous guests from using the device
Answers
C.
Eliminates the need for strict policy controls
C.
Eliminates the need for strict policy controls
Answers
D.
Prevents the user from accessing unauthorized websites
D.
Prevents the user from accessing unauthorized websites
Answers
Suggested answer: A

Explanation:

Verified Boot is a security feature in ChromeOS that checks the integrity of the system during startup. It verifies that the firmware (low-level software) and the operating system haven't been modified or corrupted by unauthorized sources. If any tampering is detected, Verified Boot can initiate recovery processes to restore the system to a known good state.

Option B is incorrect because Verified Boot doesn't directly manage guest access.

Option C is incorrect because Verified Boot is a security layer that complements, not replaces, policy controls.

Option D is incorrect because website access control is handled by other mechanisms like web filtering or content restrictions.

You are using a third-party service for SSO. Users are confused when signing onto a Chrome device because they are asked for Google account details before being redirected to the sign-In screen for your SSO provider Which setting must be changed so managed devices open the SSO provider login page by default?

A.
SAML single sign-on login frequency
A.
SAML single sign-on login frequency
Answers
B.
SAML single sign-on password synchronization flows
B.
SAML single sign-on password synchronization flows
Answers
C.
Single sign-on cookie behavior
C.
Single sign-on cookie behavior
Answers
D.
Single sign-on IdP redirection
D.
Single sign-on IdP redirection
Answers
Suggested answer: D

Explanation:

The Single sign-on IdP redirection setting controls whether managed devices directly open the login page of the third-party SSO provider (Identity Provider) or first prompt for Google account credentials. By enabling this setting, you streamline the login process for users and eliminate the confusion caused by the extra Google account prompt.

Option A is incorrect because it controls the frequency of re-authentication for SAML SSO, not the initial login page.

Option B is incorrect because it relates to password synchronization between Google and the IdP, not the login page redirection.

Option C is incorrect because it deals with how cookies are handled for SSO, not the login page redirection.

The security team is requiring Wi-Fi connectivity to be disabled on ChromeOS devices. Using the Google Admin console, how would you configure ChromeOS devices to block all WI-FI connectivity and hide the WI-FI Icon?

A.
Configure 'Restricted Wi-Fi Networks '
A.
Configure 'Restricted Wi-Fi Networks '
Answers
B.
Prevent WiMax connectivity
B.
Prevent WiMax connectivity
Answers
C.
Remove Wi-Fi from 'Enabled network interfaces '
C.
Remove Wi-Fi from 'Enabled network interfaces '
Answers
D.
Restrict 'Auto Connecting' to Wi-Fi
D.
Restrict 'Auto Connecting' to Wi-Fi
Answers
Suggested answer: C

Explanation:

To completely disable Wi-Fi and hide the Wi-Fi icon on ChromeOS devices, you need to modify the 'Network' settings in the Google Admin console:

Go to 'Device Management' > 'Chrome Management' > 'Device Settings'.

Select the organizational unit (OU) containing the devices you want to manage.

Under 'Network', find 'Enabled network interfaces' and remove 'Wi-Fi' from the list.

Save the changes.

This will disable Wi-Fi adapters on the devices and hide the Wi-Fi icon, preventing users from connecting to Wi-Fi networks.

Why other options are incorrect:

A . Restricted Wi-Fi Networks: This setting only limits which networks users can connect to, not disable Wi-Fi entirely.

B . Prevent WiMax connectivity: WiMax is a different wireless technology and not relevant to Wi-Fi.

D . Restrict 'Auto Connecting' to Wi-Fi: This only prevents automatic connection to networks but doesn't disable Wi-Fi entirely.

An organization has created organization units within the Google Admin console for additional management structure. What is the most effective way to manage each OU while not affecting the top-level OU policy?

A.
Delete sublevel OUs and only work from the top level OU
A.
Delete sublevel OUs and only work from the top level OU
Answers
B.
Disable auto updates
B.
Disable auto updates
Answers
C.
Override the inheritance for a given policy
C.
Override the inheritance for a given policy
Answers
D.
Force inheritance from top level OU to all OUs
D.
Force inheritance from top level OU to all OUs
Answers
Suggested answer: C

Explanation:

Overriding inheritance allows you to apply specific policies to individual OUs without affecting the policies of the parent OU or other sibling OUs. This gives you granular control over different groups of users or devices.

Other options are incorrect because:

A:Deleting sub-level OUs would remove the management structure and negate the purpose of having OUs.

B:Disabling auto-updates would prevent devices from receiving important security and feature updates.

D:Forcing inheritance would apply the top-level OU policy to all sub-OUs,preventing customization.

https://support.google.com/chrome/a/answer/187202

You are a ChromeOS Administrator of a school district While working with a teacher in one of the schools, they mention they are having issues downloading files on their ChromeOS device. What are some ways you can help troubleshoot with the least amount of disruption to the user?

A.
Run Diagnostics from the ChromeOS device to troubleshoot
A.
Run Diagnostics from the ChromeOS device to troubleshoot
Answers
B.
Check how much storage Is being used on the device then delete or move files that aren't needed anymore
B.
Check how much storage Is being used on the device then delete or move files that aren't needed anymore
Answers
C.
Reset the user's ChromeOS device to its original factory settings
C.
Reset the user's ChromeOS device to its original factory settings
Answers
D.
Check for system updates If any updates are available install them
D.
Check for system updates If any updates are available install them
Answers
Suggested answer: B

Explanation:

When a teacher is having issues downloading files on their ChromeOS device, it's important to troubleshoot with minimal disruption. Here are steps to address the issue:

Check Storage: Start by checking the available storage on the device. If the storage is full or nearly full, it could prevent new files from being downloaded.

Manage Files: Guide the teacher to delete or move files that are no longer needed. This can be done through the Files app on the ChromeOS device.

Clear Cache: If storage isn't the issue, clearing the browser cache can sometimes resolve download problems.

Check Network: Ensure that the device has a stable internet connection, as an unstable connection can interrupt downloads.

Reference: The troubleshooting steps are based on common practices for resolving download issues on ChromeOS devices and Google's support documentation on fixing file download errors1. These steps are designed to resolve issues without causing significant disruption to the user's experience.

Insufficient Storage: A common reason for download failures on ChromeOS devices is insufficient storage space. Checking the available storage is a simple first step:

Click on the system tray (bottom right corner) and select the Settings gear icon.

In the Settings menu,navigate to the 'Device' section and select 'Storage Management.'

Review the storage usage.If it's nearly full,identify large files or unused apps that can be removed.

Guide the teacher on how to delete files or move them to Google Drive.

System Updates: Outdated software can sometimes lead to bugs or glitches. Ensuring the ChromeOS device is up-to-date is important:

In the Settings menu,navigate to the 'About ChromeOS' section.

Click on 'Check for updates.' If any updates are found,install them.

If updates are pending,ask the teacher to restart the device after the installation.

Additional Troubleshooting (If necessary):

Check Network Connectivity:Ensure the device is connected to a stable Wi-Fi network.Have the teacher try accessing a different website to verify internet access.

Clear Browser Cache:In the Chrome browser,open the Settings menu,navigate to 'Privacy and security,' and select 'Clear browsing data.' Clear the cache for the past hour or day.

Why Other Options Are Less Ideal:

A . Run Diagnostics:While diagnostics can be helpful,they are a more time-consuming step and might not be necessary if the issue is simply related to storage or updates.

C . Reset the Device:This is a drastic measure that should only be considered if other troubleshooting steps fail.It involves wiping the user's data and settings,which is disruptive.

Total 60 questions
Go to page: of 6