You work for an international organization and your CEO frequently travels to other countries You need to enable email access and configure the account for multiple administrative assistants What should you do?

Create a group of administrative assistants Enable delegated access to the mailbox of the CEO for that group

Log into the Gmail account of the CEO Set up and share two separate email aliases

Enable users to specify what sender information is included in delegated messages sent from their account.

Create a group of administrative assistants Enable delegated access to the mailbox of the CEO for that group

Provide the executive administrative assistants with the account password of the CEO

Your organization is working on a confidential project with details that cannot be shared through email with anyone outside your organization You want to add controls in Gmail that prevent any mention of the project from being sent by employees Only the CEO and the CFO can send information about the project over email and without a delay What should you do?

Configure a Gmail Content compliance rule for outbound email that quarantines all email mentioning the project Bypass the rule by using the address list with the CEO and CFO email addresses.

Configure the Gmail Restrict delivery setting and add an allowlist with all domains that your employees are allowed to send emails to Include the CEO and CFO email addresses to the allowlist

Configure a Gmail Content compliance rule for outbound email that quarantines all email mentioning the project Bypass the rule by using the address list with the CEO and CFO email addresses.

Configure a Gmail Content compliance rule for outbound email that quarantines all email mentioning the project Manually review all quarantined emails and choose to deliver the ones sent by the CEO and CFO

Configure the Gmail Restrict delivery setting for all outgoing messages, except the internal emails Add the CEO and CFO email

An employee at your organization is resigning They are in charge of organizing and maintaining recurring team events You want to preserve the existing meetings and transfer ownership to the resigning employee's manager What should you do?

Transfer both the events and the resources owned by the resigning employee to their manager by using the Admin console

Assign an Archived User (AU) license for the resigning employee

Delete the existing calendar events and instruct the manager to create new events as the owner

Instruct the resigning employee to share free busy details for their calendar with their manager

Transfer both the events and the resources owned by the resigning employee to their manager by using the Admin console

Your organization has hired a recruiting firm that is responsible for reviewing resumes and job descriptions of prospective summer interns. Employees at your organization need to collaborate with the external firm on these documents. You must set permissions and ensure the recruiting firm employees can't remove the files. What should you do?

Create a Shared Drive and grant Contributor access to the HR team

Create a Google Group, add the HR team, and create a shared folder for content storage and editing

Enable client-side encryption for the organizational unit (OU) for which the HR team are members

Create a Shared Drive and grant Content Manager access to the HR team

Create a Shared Drive and grant Contributor access to the HR team

Users at your organization are reporting issues with Google Voice including disconnected calls and overall connection issues. You want to identify whether these issues affect just your organization or whether it's a global Google issue What should you do?

Verify if there is a service outage for Google Voice reported on the Google Workspace Status Dashboard

Use the Security Investigation Tool with Voice Log Events as the data source field In the search operator fields select Event is and Network Statistics (client) Analyze the packet loss

Verify if there is a service outage for Google Voice reported on the Google Workspace Status Dashboard

Use the Security investigation Tool with User Log Events as the data source field In the search operator fields select Event is and Call failed Analyze the packet loss

Verify if there is a service interruption for Google Voice reported on the Google Workspace Updates Blog website

A user named Alice is leaving your organization You need to transfer all of Alice's data from her Drive to Bob's Drive in the most simple and efficient manner possible What should you do?

Use the Google Admin console to move the files from Alice's Drive to Bob's Drive

Use the Google Takeout service to export Alice's data to a zip file and instruct Bob to import the zip file into his Drive

Use the Google Drive API to programmatically transfer the files from Alice's Drive to Bob's Drive

Instruct Alice to download all of her files from her Drive and upload them to Bob's Drive

You have enrolled a new Google Meet hardware device for an existing conference room in your building Your users report that the new hardware in the conference does not show the expected calendar events You need to investigate and fix the problem What should you do?

Make sure that the conference room resource calendar has been created and that the Meet Hardware is associated with that resource

Create a brand new resource calendar and associate the Meet Hardware with that new resource

Use the Meet Quality Tool in the control panel to search for the newly installed Meet Hardware

Make sure the Access permissions for the resource calendar is set to 'See all event details

You work at a large global holding firm with multiple companies that are united under one Google Workspace deployment. You must ensure that employees can only access documents at the company in which they are employed What should you do?

Set up Google Drive trust rules to prevent access to documents from individual companies

Create a User group for each company and change Google Drive sharing settings to block external sharing

Create an organizational unit (OU) for each company and disable file sharing.

Set up data loss prevention (DLP) rules to prevent specific documents from being shared

Set up Google Drive trust rules to prevent access to documents from individual companies

An employee at your organization is experiencing video call issues in Google Meet and they were unable to resolve the issues by themselves You need to troubleshoot the issue What should you do first?

View the Meet quality report of the employee

Ask your network administrator to add the dedicated Meet IP address range for your users

Restart the device of the employee

Check the Meet settings of the employee

Your organization is migrating to Google Workspace and wants to improve how newly created files are classified You must find a scalable solution to improve security and transparency on how to handle sensitive files What should you do?

Create classification labels enable automatic classification, and educate users

Set data loss prevention (DLP) policies to label data automatically disable label locking, and educate users

Create classification labels enable automatic classification, and educate users

Migrate data to Google Workspace map classifications and migrate with the Drive Labels API

Integrate with the Cloud DLP API map identifiers and classifications install the Google Drive label client and run the application

As a Workspace Administrator you want to keep an inventory of the computers and mobile devices your company owns in order to track details such as device type and who the device is assigned to. How should you add the devices to the company-owned inventory?

Download the company-owned inventory template CSV file from the Admin panel enter the serial number of the devices and upload the

completed file to the company-owned inventory in the admin panel B O Download the company-owned inventory template CSV file from the Admin panel enter the device OSs. and serial numbers and upload the

completed file to the company-owned inventory in the admin panel. C O Download the company-owned inventory template CSV file from the Admin panel enter the asset tags of the devices, and upload the

completed file to the company-owned inventory in the admin panel D O Download the company-owned inventory template CSV file from the Admin panel, enter the device OSs. and asset tags, and upload the

The Google Analytics service is set to OFF for your entire organization All users in the marketing team OU and a subset of users in the sales OU need access to Analytics The rest of the organization should not have access You must configure access in Additional Google services What should you do?

Enable Google Analytics for the marketing OU Create a group from the Admin console that includes the sales users, and set GoogleAnalytics to On for that group

Enable Google Analytics at the top of the OU structure

Enable Google Analytics for the marketing and sales OUs Create a group to deny access to Google Analytics and assign it to the sales users who should not have access

Enable Google Analytics for the marketing OU. Create a sub-OU for the sales users under the marketing OU

Enable Google Analytics for the marketing OU Create a group from the Admin console that includes the sales users, and set GoogleAnalytics to On for that group

Your organization has a strict requirement that your temporary employees can only send emails to and receive emails from specific external domains You must define a policy in Google Workspace that meets this requirement for users in the temporary employee organizational unit (OU) What should you do?

Add the allowed domains when configuring the restrict delivery setting in Gmail settings, and select the box to bypass for internal emails

Create a policy in Gmail settings that rewrites the recipient for outbound messages and quarantines incoming messages to review before delivery

Add the allowed domains when configuring the restrict delivery setting in Gmail settings, and select the box to bypass for internal emails

Restrict sending and receiving to Google Groups, and carefully curate the temporary employees' memberships

Configure the restrict delivery setting to limit domains that the temporary employees can communicate with Allow Google Docs sharing

Your default Vault retention policy for Gmail is set to 365 days Your legal department has just informed you that emails sent and received by the customer support department are sensitive and must be retained for only 30 days You must enforce this new retention policy in the simplest way What should you do?

Create a custom retention policy in Vault for Gmail for 30 days and apply it to the customer support organizational unit (OU)

Change the current default retention policy in Vault for Gmail to 30 days and apply it to the customer support organizational unit (OU) Configure a custom retention policy for Gmail for 365 days for your domain

Create two custom retention policies in Vault one for 30 days that is applied to the customer support organizational unit (OU) and one for 365 days that is applied to all other OUs in your directory

Change the current default retention policy for Gmail to 30 days Configure two custom retention policies in Vault one for 30 days that is applied to the customer support organizational unit (OU) and one for 365 days that is applied to all other OUs in your directory

Create a custom retention policy in Vault for Gmail for 30 days and apply it to the customer support organizational unit (OU)

Your organization has confidential internal content for which only authorized employees are allowed to access Access to this content is managed by using Google Groups Only administrators can create and manage membership You need to provide only the necessary functionality and follow the principle of least privilege What should you do?

Make a security group to apply access policies

Make a dynamic group so security team members are automatically added

Make a moderated group so all incoming communications can be monitored

Use a group as a collaborative inbox that allows easier sharing

Make a security group to apply access policies

An employee has left your organization and their Drive data must be retained for three years The retention rule has been set for three years You must ensure the employee's data is visible in Vault and accessible to the Vault Administrator in the most cost-effective way What should you do?

Assign an Archive User (AU) license to the user

Export the users Drive data from Vault, then delete the user.

Assign an Archive User (AU) license to the user

Change ownership of the Drive data to the user's Manager, then delete the user

Suspend the user until the end of the three-year period

Recently your organization has had an increase in messages marked as spam You need to quickly and efficiently obtain detailed information regarding each message What should you do?

Use the spam filter report in the security dashboard to see messages Google's spam filter marked as spam during a specific time period

Create an investigation by using a SQL query to search for all spam audit logs exported to BigQuery

Send an alert to all users to mark all suspicious Gmail messages as spam and review the Alert center messages

Use Google Vault to put all messages marked as spam in a legal hold and review the messages

Use the spam filter report in the security dashboard to see messages Google's spam filter marked as spam during a specific time period

You work for a midsize organization Your compliance and audit learn sees that users are frequently resetting their passwords You must provide accurate information and ensure that the compliance team is informed every time a user changes their password What should you do?

Check the User's password changed alert in the alert center and include the compliance team in the email notifications

Create a new alert by using user log events and check that event Login type is Google password and include the compliance team in the email notifications

Check the User's password changed alert in the alert center and include the compliance team in the email notifications

Disable user account recovery so users must contact you before a reset

Enable user account recovery and forward any alert to the compliance team through the alert center

Your global marketing team has over 500 employees. They recently started working with Google Analytics and want to move to managed accounts You decide to use Google Cloud Directory Sync (GCDS) to sync users from your current identity provider Your organization currently has no Google Workspace licenses linked to the Admin console You run GCDS for the first lime and receive the following error. 'Domain user limit reached ' You need to identify and fix the problem What should you do?

Ensure that there is a subscription available and enough licenses to sync the new users

Check if GCDS has the correct permissions to run a sync on your domain

Wait 48 hours until the domain is fully provisioned

Update the delete limits of GCDS and try again

Your organization has users in the United States and Europe For compliance reasons you want to ensure that user data is always stored in the region where the user is located What should you do?

Specify a data region policy for each Organizational Unit (OU) where users are grouped by location

Create two Google Groups titled 'United States' and 'Europe ' Assign users to either group based on location

Specify a data region policy for each Organizational Unit (OU) where users are grouped by location

Populate the Address field on each user record ensuring the country information is accurate

Do nothing No extra configuration is needed because user data is always stored in the region the user is located

Several users in your organization reported an issue with receiving emails from one particular external sender You want to troubleshoot the issue and determine whether Google received these emails What should you do?

Search for missing email messages by using email Log Search {ELS) and determine why messages weren't delivered

Check if your Google Workspace domain registration expired

Search for missing email messages by using email Log Search {ELS) and determine why messages weren't delivered

Update your MX records to make sure they point to Google mail servers

Open a support ticket with Google Workspace Support

You are configuring a customer relationship management (CRM) solution to integrate with Google Workspace services for the sales department at your organization The CRM solution is in the Google Workspace Marketplace and you deploy the specific CRM solution Employees report that there are no contacts and documents visible in the CRM solution You must identify and fix the problem What should you do?

Check the OAuth scopes and ensure that Drive and Gmail scopes are granted for the CRM solution

Check if Manage access to apps is set to Allow users to install and run any app from the Marketplace

Revoke all OAuth scopes and reinstall the CRM solution for just the sales department.

Check if the App distribution settings are set to ON for everyone in your organization

You have implemented a data loss prevention (DLP) policy for a specific finance organizational unit. You want to apply the same security policy to a shared drive owned by the finance department in the most efficient manner. What should you do?

Create a new DLP policy for shared drive users

In the Admin console sharing settings, select the finance organizational unit and deselect Allow users outside the domain to access files in shared drives

Assign the Shared Drive to the finance organizational unit

Create a new DLP policy for shared drive users

Change the scope of the policy to apply to all in the domain

Your organization has a group of users who interact with sensitive information and their accounts contain valuable files You need to protect these users from targeted online attacks What should you do?

Enroll all accounts for those users in the Advanced Protection Program

Enable 2-Step Verification for those users and recommend they use Google Authenticator

Enable 2-Step Verification for those users and recommend they use SMS codes

Disable password recovery for end users

Enroll all accounts for those users in the Advanced Protection Program

Your organization is moving from a legacy mail system to Google Workspace This move will happen in phases During the first phase, some of the users in the domain are set up to use a different identity provider (IdP) for logging in You need to set up multiple idPs for various users What should you do?

Create Security Assertion Markup Language (SAML) based single sign-on (SSO) profiles and assign them to specific organizational units or groups of users.

Enable single sign-on (SSO) with third-party identity providers and exclude the users who are using a different provider

Enable single sign-on (SSO) with Cloud Identity and use Cloud Directory Sync to manage multiple identity providers

Create Security Assertion Markup Language (SAML) based single sign-on (SSO) profiles and assign them to specific organizational units or groups of users.

Nothing Google uses cookies to establish a user's relationship to a device This will cover multiple identity providers

An employee at your organization is having trouble playing a video stored in Google Drive that is embedded in their Google Slides presentation You need to collect the necessary details to troubleshoot the issue What should you do?

Confirm that the source video is in a supported format and resolution and that the user has permission to play the video Have a screen share session to confirm the behavior

Instruct the employee to give you edit access to the presentation to review the revision history See if the error message changes when you delete and add the slides back

Check the Google Drive audit logs for any error entries on the Slides presentation Check the help center for the appropriate error message

Create a copy of the presentation to see if you can replicate the problem, and document any errors you see

The helpdesk at your organization reports that many users in multiple locations are not able to access Gmail, but can access other Workspace services. You must troubleshoot the issue What should you do first?

Check the Google Workspace status dashboard to see whether there is a disruption in Gmail service availability

Open a ticket with Google Support listing the affected users.

Check the Google Workspace status dashboard to see whether there is a disruption in Gmail service availability

Check the Google Workspace release calendar to ensure there's not a Gmail upgrade scheduled

Check network connectivity of the affected users

An employee has been leaking confidential salary information to an external party. You must use Vault to preserve the messages for an investigation. What should you do?

Create a matter and add a hold on the employee's email

Use the security investigation tool to find the messages Create a hold to preserve the messages

Create a custom retention policy Use the audit feature to view captured email logs

Use the search and export features to find all the messages sent externally

An employee at your company does not need access to their Workspace account while they are on leave for a year When they return you need to ensure they have access to their account and that all their data and current emails remain intact Also their shared documents must be available to other users You must accomplish this goal in the most cost-effective way What should you do?

Suspend their account in the Admin console

Delete the user after copying their emails and reassigning their documents to their manager

Remove the user license in the Admin console

After making a recent migration to Google Workspace, you updated your Google Cloud Directory Sync configuration to synchronize the global address list. Users are now seeing duplicate contacts in their global directory in Google Workspace. You need to resolve this issue.What should you do?

Update shared contact search rules to exclude internal users.

Train users to use Google Workspace's merge contacts feature.

Enable directory contact deduplication in the Google Workspace Admin panel.

Update shared contact search rules to exclude internal users.

Create a new global directory, and delete the original.

The organization has conducted and completed Security Awareness Training (SAT) for all employees. As part of a new security policy, employees who did not complete the SAT have had their accounts suspended. The CTO has requested to be informed of any accounts that have been re-enabled to ensure no one is in violation of the new security policy.What should you do?

Enable ''Suspended user made active'' rule - Other Recipients: CTO

Enable ''Suspicious login'' rule - Other Recipients: CTO

Enable ''Suspended user made active'' rule - Other Recipients: CTO

Enable ''Email settings changed'' rule - -Other Recipients: CTO

Enable ''Suspended user made active'' rule and select ''Deliver to'' Super Administrator(s)

As the Workspace Administrator, you have been asked to configure Google Cloud Directory Sync (GCDS) in order to manage Google Group memberships from an internal LDAP server. However, multiple Google Groups must have their memberships managed manually. When you run the GCDS sync, you notice that these manually managed groups are being deleted. What should you do to prevent these groups from being deleted?

In the GCDS configuration manager, update the group deletion policy setting to ''don't delete Google groups not found in LDAP.''

Use the Directory API to check and update the group's membership after the GCDS sync is completed.

Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.

In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to ''delete only active Google domain users not found in LDAP.''

Your marketing department needs an easy way for users to share items more appropriately. They want to easily link-share Drive files within the marketing department, without sharing them with your entire company. What should you do to fulfil this request? (Choose two.)

Create a shared drive for internal marketing use.

In the admin panel Drive settings, create a target audience that has all of marketing as members.

Create a shared drive that's shared internally organization-wide.

Update Drive sharing for the marketing department to restrict to internal.

Create a shared drive for internal marketing use.

Update the link sharing default to the marketing team when creating a document.

In the admin panel Drive settings, create a target audience that has all of marketing as members.

Your company has a broad, granular IT administration team, and you are in charge of ensuring proper administrative control. One of those teams, the security team, requires access to the Security Investigation Tool. What should you do?

Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.

Assign the pre-built security admin role to the security team members.

Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.

Assign the Super Admin Role to the security team members.

Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.

Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?

Clear the ''Allow items created with managed apps to open in unmanaged apps'' checkbox.

Navigate to ''Data Protection'' setting in Google Admin Console's Device management section and disable the ''Allow users to copy data to personal apps'' checkbox.

Disable ''Open Docs in Unmanaged Apps'' setting in Google Admin Console's Device management section.

Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.

Clear the ''Allow items created with managed apps to open in unmanaged apps'' checkbox.

The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in. What else can you do to increase your organization's defense-in-depth strategy?

Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.

Implement an IP block on the malicious user's IPs under Security Settings in the Admin Console.

Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.

Enforce higher complexity passwords by rolling it out to the affected users.

Use Mobile device management geo-fencing to prevent malicious actors from using these stolen credentials.

By using Account Activity reports, you have flagged several users who are uploading large files. You want to ensure you don't run out of pooled storage and you want to stop the abuse. What should you do first?

Place the flagged users in a configuration group and set storage limits for the group.

Email flagged users with a warning of possible abuse.

Place the flagged users in a configuration group and set storage limits for the group.

Use the Security Investigation Tool to set alerts on the flagged users.

Warn the flagged users, and purchase more pooled storage to avoid hitting storage quotas.

Samantha, an employee from your engineering department, has submitted a help desk ticket. She is unable to share a Google Doc file with Jason, her coworker in the marketing department. However, Samantha is able to share the same file with her colleagues in the engineering department. You must troubleshoot the issue. What should you do?

Verify that Samantha's Drive sharing settings in the Admin console allow sharing content outside her organization.

Instruct Samantha to export a PDF copy of the document and email it to Jason.

Verify that Samantha's Drive sharing settings in the Admin console allow sharing content outside her organization.

Confirm if a trust rule is preventing sharing with Jason or someone that belongs to the marketing department.

Confirm if there is a data protection rule that is preventing the sharing of this particular Google Doc.

Google Professional Google Workspace Administrator Practice Test 5

You work for an organization that is headquartered in Washington DC You want to reliably send email announcements to all employees in the area and update membership automatically What should you do?

Become a Premium Member for full access

Unlock Premium Member

Google Professional Google Workspace Administrator Practice Test 5

Question

Google Professional Google Workspace Administrator Practice Tests

Practice Tests