Your company is using Google Workspace Business Standard. The company has five meeting rooms that are all registered as resources in Google Workspace and used on a daily basis by the employees when organizing meetings. The office layout was changed last weekend, and one of the meeting rooms is now a dedicated room for management. The CEO is complaining that anyone can book the room and requested this room to be used only by the management team and their executive assistants (EAs). No one else must be allowed to book it via Google Calendar. What should you do?

As a super administrator, modify the room calendar sharing settings, and limit it to the management and EAs group.

Delete the room from Google Workspace resources, and suggest using a spreadsheet shared with the management and EAs only for the room schedule.

As a super administrator, create a group calendar named ''Management Room,'' and share it only with the management and the EAs.

Move the room resource to the management and EAs group so that only they can use it.

You act as the Google Workspace Administrator for a company that has just acquired another organization. The acquired company will be migrated into your Workspace environment in 6 months. Management has asked you to ensure that the Google Workspace users you currently manage can efficiently access rich contact information in Workspace for all users. This needs to occur before the migration, and optimally without additional expenditure. What step do you take to populate contact information for all users?

Use the Domain Shared Contacts API to upload contact information for the acquired company's users.

Bulk-upload the contact information for these users via CSV into the Google Directory.

Use the Domain Shared Contacts API to upload contact information for the acquired company's users.

Provision and license Google Workspace accounts for the acquired company's users because they will need accounts in the future.

Prepare an uploadable file to be distributed to your end users that allows them to add the acquired company's user contact information to their personal contacts.

Your organization is about to expand by acquiring two companies, both of which are using Google Workspace. The CISO has mandated that strict 'No external content sharing' policies must be in place and followed. How should you securely configure sharing policies to satisfy both the CISO's mandate while allowing external sharing with the newly acquired companies?

Let users share files between the two companies by using the 'Trusted Domains' feature. Create an allowlist of the trusted domains, and choose sharing settings for the users.

Allow external sharing of Drive content for the IT group only.

Create a Drive DLP policy that will allow sharing to only domains on an allowlist.

Use shared drives to store the content, and share only individual files externally.

Let users share files between the two companies by using the 'Trusted Domains' feature. Create an allowlist of the trusted domains, and choose sharing settings for the users.

Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as ''view data for all teams'' to the HR group, but it is reporting an error when accessing the application. What should you do?

Confirm that the Work Insights app is turned ON for all employees.

Allocate the ''view data for all teams'' permission to all employees of the company.

Confirm that the Work Insights app is turned ON for all employees.

Confirm in Security > API controls > App Access Controls that Work Insights API is set to ''unrestricted.''

Confirm in Reports > BigQuery Export that the job is enabled.

A disgruntled employee has left your company and deleted all their email messages and files in Google Drive. The security team is aware that some intellectual property may have surfaced on a public social media site. What is the first step to start an investigation into this leak?

Instruct a Google Vault admin to create a matter, and place all the user data on 'hold.'

Delete the user's account in the Admin Console.

Transfer data between end user Workspace accounts.

Instruct a Google Vault admin to create a matter, and place all the user data on 'hold.'

Use Google Vault to export all the user data and share among the security team.

Your company has numerous locations throughout the world. Each of these locations has multiple office managers that field questions from employees through an email alias. Some questions have not been answered by an office manager How can you create a system to assign conversations to different receptionists using Workspace?

Create a Google Groups Collaborative Inbox.

Use App Script to design a ticketing system that marks conversation ownership.

Contract with a third-party solution, such as ServiceNow.

Create Google Tasks and assign them to receptionists to address unanswered questions.

As the Workspace Administrator, you have been asked to enable the help desk team to share incoming support requests from end users The help desk team has ten users who need to respond to support requests that are sent to a help desk email address. The users must be able to respond by email and assign ownership of tickets. Finally, the help desk team is highly mobile and will need to manage help desk tickets from their mobile devices. How would you provide this functionality for the help desk team?

Configure a Google Group as a collaborative inbox, and assign the required Groups permissions to the help desk team members.

Create a help desk Workspace mail account, and set the help desk team as mail delegates to the help desk account.

Create the help desk group as a Q&A Group, and add the 'Manager role to the help desk team users.

In Google Drive, create a help desk request form, and give the help desk team the ability to view the inbound requests.

Your company is using Google Workspace Business Plus edition, and the security team has reported several unsuccessful attempts to sign in to your Google Workspace domain from countries where you have no local employees. The affected accounts are from several executives in the main office.You are asked to take measures to mitigate this security risk. Although budget is not a concern, your company prefers a minimal financial outlay to fix the issue, which you are tasked with managing. Which two solutions would help you mitigate the risk at minimal cost?Choose 2 answers

Deploy 2-Step Verification for all users who have security keys.

Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

Deploy 2-Step Verification for all users who have security keys.

Deploy Google Cloud Armor on a dedicated project, and create a rule to allow access to Google Workspace only from specific locations.

Upgrade to Google Workspace Enterprise Plus for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

For all executives, create new accounts with random characters to match Google best practices, migrate data from the former accounts, and then delete them.

As a Google Workspace administrator for your organization, you are tasked with identifying how users are reporting their messages---whether spam, not spam, or phishing---for a specific time period. How do you find this information?

Use Reports API to query user Gmail activity.

Open Admin Console > Security > Dashboard > User Reports.

Open Admin Console > Security > Dashboard > Spam Filter- Phishing.

Use Reports API to query user Gmail activity.

Open Admin Console > Reporting > Email Log Search.

The nature of your organization's business makes your users susceptible to malicious email attachments. How should you implement a scan of all incoming email attachments?

In the security sandbox section, enable virtual execution of attachments for the entire organization.

Configure a safety rule to protect against encrypted attachments from untrusted senders

Configure a safety rule to protect against attachments with scripts from untrusted senders.

In the security sandbox section, enable virtual execution of attachments for (he targeted OU

In the security sandbox section, enable virtual execution of attachments for the entire organization.

You have enabled Automatic Room Replacement for your calendar resources, but it is not working for any instances of a conflict booking. What could be the issue?

Automatic Room Replacement does not work on recurring events.

This feature requires calendar event owners to have the Buildings and resources administrator privilege

The calendar resources do not have the Resource Category configured as CONFERENCE_ROOM

The events have more than 20 attendees.

A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?

Suspend the user's account, search all associated users data in Google Vault, and export the data.

Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.

Immediately suspend the user's account, search for all the email messages in question, and forward to the legal team.

Immediately suspend the user's account, assign an archived user license, and export data.

Suspend the user's account, search all associated users data in Google Vault, and export the data.

A user has reported that they did not receive an email from one of their normal correspondents. What information do you need to collect from the user to investigate the cause of the issue?

The email address of the sender and the subject and date/time of the missing message.

The type of device the individual is using, including the OS version, browser, and browser version.

The sender's domain so you can review their SPF and DKIM configuration.

The sender's IP address, mail client, and mail platform.

You are configuring a shared drive for the financial department of your organization. The financial team wants to allow members of the shared drive to add. edit, and move documents into the shared drive. It's important that the same users cannot remove or delete files. How can you configure access for these users to match the team's request?

Set up the shared drive, and add the users as Content Managers of the drive.

Set up the shared drive, and add the users as editors of the drive.

Set up the shared drive, and add the users as Contributors of the drive.

Set up the shared drive, and add the users as Managers of the drive.

Your organization has decided to enforce 2-Step Verification for a subset of users. Some of these users are now locked out of their accounts because they did not set up 2-Step Verification by the enforcement date. What corrective action should you take to allow the users to sign in again?

Move the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.

Disable 2-Step Verification per organizational unit so the affected users can sign in.

Move the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.

Disable 2-Step Verification organization-wide so all users can successfully sign in.

Move the affected users into the exception group permanently so they do not have to use 2-Step Verification going forward.

Your company is using Google Workspace Enterprise Standard. They have 200 meeting rooms defined for the main building and used daily by the 12,000 employees. Users are complaining they have difficulties finding a room available when searching within Google Calendar, even if several rooms are available (no one attending meetings in these rooms at that time). You have been asked to find a solution while minimizing the operational effort and avoiding any new expenses due to budget constraints. What should you do?

Set the option 'Allow calendar-based room release' for all targeted rooms.

Implement a third-party solution that will detect presence in the room and release it if nobody appears after a few minutes.

Create a Google App Script that will inspect each room calendar for the next 12 hours, check attendees status, and send the room administrator an alert email for releasing the room if all attendees have declined but the room has not.

Set the option 'Allow calendar-based room release' for all targeted rooms.

Upgrade to Google Workspace Enterprise Plus edition to benefit from additional features for automated machine learning (ML) based resources management.

Your company has just acquired a new group of users. They have been provisioned into the Google Workspace environment with your primary domain as their primary email address. These new users still need to receive emails from their previous domain. What is the best way to achieve this for these new users, without updating the information of preexisting users?

Add the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.

Add the acquired domain as an alias to the primary Google Workspace domain.

Add the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.

Update the Google-provided test domain to be the domain of the acquired company, and then update the email information of all new users with alias emails.

Without adding a domain, update each user's email information with the previous domain.

An administrator accidentally deleted several Workspace user accounts from the Google Admin Console two weeks ago. How can you recover the deleted user accounts?

Sign in to the Admin console as Super Admin, open user management, filter for 'recently deleted.' and recover.

Open a Google support ticket, and request a recovery of all recently deleted users.

Sign in to the Admin console as Help Desk Admin, open user management, filter for 'recently deleted.' and recover.

Sign in to the Admin console as Super Admin, open user management, filter for 'recently deleted.' and recover.

Create a matter, go to legal hold, and create a legal hold for the user accounts.

You need to protect your users from untrusted senders sending encrypted attachments via email. You must ensure that these messages are not delivered to users' mailboxes. What step should be taken?

Enable a safety rule to send these types of messages to a quarantine.

Use the security center to remove the messages from users' mailboxes

Use Google Vault to remove these messages from users mailboxes.

Enable a safety rule to send these types of messages to spam.

Enable a safety rule to send these types of messages to a quarantine.

Your organization uses a third-party product to filter mail before it arrives at your Workspace Domain. How should you configure Gmail to ensure that inbound messages are not seen as a spam attack due to the volume of mail being received from this product?

List the IP addresses of the product as an Inbound Gateway.

Add the product's IP addresses as an approved sender.

Allowlist the IP addresses of the third-party filtering product.

Add the product's IP addresses to your organization's SPF record.

List the IP addresses of the product as an Inbound Gateway.

Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices?Choose 2 answers

Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop > Only Allow Google Drive for desktop on authorized devices

Install the Google Endpoint Verification extension on machines using Drive for Desktop.

Create a company-owned device inventory using an asset tag.

Devices > Endpoints > Add a filter-> Management Type > Drive for desktop > Apply

Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop > Only Allow Google Drive for desktop on authorized devices

Install the Google Endpoint Verification extension on machines using Drive for Desktop.

Create a company-owned device inventory using serial numbers of devices.

You received this email from the head of marketing:Hello Workspace Admin:Next week, a new consultant will be starting on the 'massive marketing mailing' project. We want to ensure that they can view contact details of the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that you can help with?What are two of the steps you need to perform to fulfill this request?Choose 2 answers

Create an isolated OU for the consultants who need the restricted contacts access.

Create a group that includes the contacts that the consultant is allowed to view.

Create an isolated OU for the consultants who need the restricted contacts access.

Create a group that includes the contacts that the consultant is allowed to view.

Apply the role of owner to the consultant in the group settings.

Create the consultant inside under the marketing OU.

Ensure that you are assigned the Administrator Privilege of Services > Services settings, and ensure that Services > Contacts > Contacts Settings Message is set.

The human resources (HR) team needs a centralized place to share key documents with the entire organization while protecting confidential documents and mitigating the risk of losing documents when someone leaves. These documents must be editable by the HR team members. What is the best way to set this up?

Create a shared drive for non-confidential files, give the HR team content manager access, and give view access to the organization.

Have the HR lead create a folder in their MyDrive for the non-confidential files, give edit access to the HR team, and give view access to the organization.

Create a shared drive for the non-confidential files, give the HR team manager access, and give contributor access to the entire organization.

Create a shared drive for non-confidential files, give the HR team content manager access, and give view access to the organization.

Create a shared drive for all files, give the HR team content manager access, and give view access to the organization.

Your organization implemented Single Sign-On (SSO) for the multiple cloud-based services it uses. During authentication, one service indicates that access to the SSO provider is not possible due to invalid information. What should you do?

Verify that the Audience element in the SAML Response matches the assertion consumer service (ACS) URL

Update the validation certificate.

Verify that the Audience element in the SAML Response matches the assertion consumer service (ACS) URL

Run nslookup to confirm that the service exists.

Ensure that Microsoft's Active Directory Federation Services 2.0 sends encrypted SAML Responses in default configurations.

You have configured SSO using a third-party IDP with your Google Workspace domain. An end user has reported that they cannot sign in to Google Workspace after their username was changed in the third-party SSO product. They can sign in to their other internal applications that use SSO. and no other users are experiencing issues signing in. What could be causing the sign-in issue?

The SAML assertion provided by the third-party IDP is presenting a username that conflicts with the current username configured in Google Workspace.

The user's Google password was changed administratively, which is causing a sign-in failure.

The issued certificate for that user has been revoked and must be updated before the user can have another successful sign in.

The SAML assertion is providing the user's previous password attached to their old username.

You have configured Secure Transport (TLS) Compliance for all messages coming to and from an external domain. altostrat.com. that your end users communicate with via Gmail. What will your end users experience when messages are delivered to them from altostrat.com without TLS enabled?

The message will not be delivered to the end user in any form.

The message will be delivered to their spam folder.

The message will not be delivered to the end user in any form.

The user will receive a failure message informing them that the message could not be delivered to their inbox and that they will need to work with their Workspace administrator to resolve the issue.

A warning banner will appear on the message informing the user that the message was not sent securely.

A user joined your organization and is reporting that every time they start their computer they are asked to sign in. This behavior differs from what other users within the organization experience. Others are prompted to sign in biweekly. What is the first step you should take to troubleshoot this issue for the individual user?

Check the session length duration for the organizational unit the user is provisioned in.

Reset the user's sign-in cookies

Confirm that this user has their employee ID populated as a sign-in challenge.

Check the session length duration for the organizational unit the user is provisioned in.

Verify that 2-Step Verification is enforced for this user.

Four weeks ago. you exported data from Google Vault and emailed the PST export file to your legal admin. They accidentally deleted the PST file and need it sent again. What steps should you take to re-send the PST file to the legal admin?

Repeat the original search for the original timeframe, and export the data again.

Return to the Google Vault export page, and download the ZIP file again.

Return to the Email Log Search page, and download the PST file again.

Ask the legal admin to return to Google Vault to download the PST file again.

Repeat the original search for the original timeframe, and export the data again.

Your admin quarantine is becoming a burden to manage due to a consistently high influx of messages that match the content compliance rule Your security team will not allow you to remove or relax this rule, and as a result, you need assistance processing the messages in the quarantine. What is the first step you should take to enable others to help manage the quarantine, while maintaining security?

Give the users Services > Gmail > Access Admin Quarantine admin privileges.

Give the users super admin rights to view the admin quarantine.

Give the users Services > Gmail > Access Admin Quarantine admin privileges.

Configure the admin quarantine to allow end users to release messages.

Give the users Services > Security Center admin privileges.

Your organization is expected to start using Google Workspace Enterprise Standard in several countries. During the planning phase, the change management leadership team mandates that meeting rooms near each participant's office location should be suggested when someone creates a Google Calendar event, to simplify the user experience and avoid booking rooms when people would not be able to move easily. What should you do?

Define users' work locations by setting building ID. floor name, and floor section if applicable as the-buildings and rooms are defined.

Organize users for each location in separate organizational units (OUs). Add room resources to the corresponding OUs so that meeting rooms would be suggested accordingly.

Organize users for each location in separate Google Groups. Add room resources to the corresponding groups so that meeting rooms would be suggested accordingly.

Share each room only with the Dynamic Group defined per each user location so that they can only book the rooms nearby.

Define users' work locations by setting building ID. floor name, and floor section if applicable as the-buildings and rooms are defined.

The security team for your organization is concerned about phishlng attacks against your end user base. What two actions should you take to configure the strongest possible preventative measure against phishing attacks?Choose 2 answers

Configure spoofing and authentication controls to quarantine messages that are perceived as threats

Configure spoofing and authentication controls to warn end users about messages that are perceived as threats.

Configure spoofing and authentication controls to quarantine messages that are perceived as threats

Train end users to mark messages as spam when they see something suspicious.

Configure spoofing and authentication controls to warn end users about messages that are perceived as threats.

Enforce confidents mode for all messages sent and received from your Workspace domain

Force encryption on all inbound and outbound emails from your Workspace domain.

Your company is using macOS devices for all employees and has built a process to allow a Google account to be used as credentials (or the device Your company wants to manage newly acquired Windows 10 devices with Google Workspace endpoint management and have employees use their Google Workspace account as login credentials for Windows 10 Which steps should you take to enable this?Choose 2 answers

Install and configure Google Credential Provider for Windows (GCPW) on each device

Enable Windows device management in Devices > Mobile & endpoints > Settings > Windows settings

Install and configure Google Credential Provider for Windows (GCPW) on each device

Configure Chrome policies on Windows to push advanced device management policies

Enable Windows device management in Devices > Mobile & endpoints > Settings > Windows settings

Sync the Google Accounts and password to AD via Google Cloud Directory Sync V1 (GCDS)

Install and configure Password Sync on each Active Directory (AD) domain controller

A user does not follow their sign-in pattern and signs In from an unusual location As an admin, what should you do in response to this alert for this user during this investigation?

Investigate the account for unauthorized activity in the Login and Security Audit Log

Add Two Factor Authentication to the Domain

First suspend the account and then investigate

Enhance your security alerts for tracking sign-in patterns

Investigate the account for unauthorized activity in the Login and Security Audit Log

Users in your organization are routinely complaining that they receive messages containing words of profanity they find inappropriate in a professional setting. As the administrator what steps should you take to prevent the messages from being delivered to users mailboxes?

Configure an objectionable content rule

Configure an attachment compliance rule

Enable optical character recognition (OCR)

Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to preventusers from copying data from work to personal apps on iOS devices? (Choose Two)

Clear the 'allow users to copy data to personal apps' checkbox.

Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection Turn on 'Advanced Mobile Management.'

Clear the 'allow users to copy data to personal apps' checkbox.

Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection Turn on 'Advanced Mobile Management.'

Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Open Docs in Unmanaged Apps

Clear the 'allow items created with managed apps to open in unmanaged apps' checkbox.

You are the administrator of a domain that requires iOS mobile device management. What initial steps should be taken to ensure that you can properly manage end-user iOS devices?

Configure an Apple Push Certificate, and be sure to use a work address that can be accessed in the future.

Follow the prompts under 'company owned devices,' and select 'iOS Management.' Select the option to 'enforce management on iOS devices.'

Configure an Apple Push Certificate, and select 'certificate never expires.'

Configure an Apple Push Certificate, and be sure to use a work address that can be accessed in the future.

In the Admin console, navigate to iOS management, and enable the Apple Push Certificate connector.

Your executive team has asked you to export all available data for 1,200 of your 1,500 Google Workspace Domain users. How should you proceed to export the data with the least amount of effort?

Contact Google Cloud Support to enable the Data Export tool for your organization, because you have more than 1,000 users, then use the tool to export data for the domain, and remove any unnecessary user data.

Perform a search in Google Vault for the 500 users and export all of the results.

Create a shared drive for the exports. Instruct end users to manually use Google Takeout to export the data and place the exported files in the shared drive.

Contact Google Cloud support to perform the export for you.

Contact Google Cloud Support to enable the Data Export tool for your organization, because you have more than 1,000 users, then use the tool to export data for the domain, and remove any unnecessary user data.

Your organization has been using Google Workspace for almost a year, and your annual security and risk assessment initiative is approaching in preparation for the risk assessment you want to quickly review all the security-related settings for Gmail, Drive and Calendar and identify the ones that may be posing risk What should you do?

Review the Security health page in the Admin console

Review all the alerts in the Alert center

Review the Security health page in the Admin console

Review all settings for each organizational unit (OU) separately because it is the only way to see the security settings tor Workspace apps

Review the Gmail Drive, and Calendar reports in the Reporting section in the Admin console.

Your organization has a data loss prevention (DLP) rule to detect and warn users about external sharing of sensitive files in Google Drive You also want to prevent external users from downloading files with viewer permissions to their local machines What should you do?

Create a new DLP rule by using the existing content detector conditions but change the action for the new rule to Disable download. print, and copy for commenters and viewers

Do nothing. View-only Drive files automatically prevent the user from downloading the files

Modify the existing DLP rule to Disable download, print, and copy for commenters and viewers

Create a new DLP rule by using the existing content detector conditions but change the action for the new rule to Disable download. print, and copy for commenters and viewers

Create a new DLP rule and set the scope to the organizational unit or group that you want to restrict

Google Professional Google Workspace Administrator Practice Test 4

When reloading Gmail in Chrome, the web browser returns a 500 Error. As part of the troubleshooting process, Google support asks you to gather logs. How can this be accomplished?

Become a Premium Member for full access

Unlock Premium Member

Google Professional Google Workspace Administrator Practice Test 4

Question

Google Professional Google Workspace Administrator Practice Tests

Practice Tests