Google Professional Google Workspace Administrator Practice Test - Questions Answers
List of questions
Related questions
Question 1
You have configured your Google Workspace account on the scheduled release track to provide additional time to prepare for new product releases and determine how they will impact your users. There are some new features on the latest roadmap that your director needs you to test as soon as they become generally available without changing the release track for the entire organization.
What should you do?
Explanation:
https://support.google.com/a/answer/172177
Question 2
You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.
What should you do?
Explanation:
Enable the Groups Settings API:
In the Google Workspace Admin console, enable the Groups Settings API under 'Security' > 'API controls' > 'Manage Domain Wide Delegation'.
Authorize API Access:
Set up OAuth 2.0 authorization for your application to access the Groups Settings API.
Update Group Settings Programmatically:
Use the Groups Settings API to programmatically update settings for the Google Groups.
You can set parameters such as who can post, who can join, and external member settings.
Automate and Validate Updates:
Develop scripts or use tools to automate the update process for all groups.
Validate the changes to ensure that all groups have the correct settings as per your requirements.
Google Workspace Admin Help: Google Groups Settings API
Google Workspace Admin Help: Manage Groups for Business
.
Question 3
Your organization wants to grant Google Vault access to an external regulatory authority. In an effort to comply with an investigation, the external group needs the ability to view reports in Google Vault. What should you do?
Explanation:
Create External Accounts: In the Google Admin console, create new Google Workspace accounts for the external regulatory authority members.
Assign Vault Privileges: Navigate to the Admin roles and assign the necessary Google Vault privileges to these accounts, ensuring they have the access needed to view reports and data for the investigation.
Configure Security Settings: Ensure that the external users have secure access, potentially with additional security measures such as two-factor authentication.
Monitor Access: Regularly audit and monitor the activity of the external users to ensure compliance with your organization's data policies and security requirements.
Revoke Access When Done: Once the investigation is complete, promptly revoke access to ensure continued security of your data.
Google Vault Help - Assign Vault Privileges
Google Workspace Admin Help - Add Users
Question 4
Your organization recently bought 1.000 licenses for Cloud Identity Premium. The company's development team created an application in the enterprise service bus (ESB) that will read user data in the human resources information system (HRIS) and create accounts via the Google Directory REST API.
While doing the original test before production use, the team observes a 503 error coming from Google API response after a few users are created The team believes the ESB is not the cause, because it can perform 100 requests per second without any problems. What advice would you give the development team in order to avoid the issue?
Explanation:
Understand the Error:
A 503 error indicates that the service is unavailable, often due to temporary overloading or maintenance of the server.
This can happen when API rate limits are exceeded.
Exponential Back-Off Algorithm:
This algorithm helps manage retries after a request fails, by exponentially increasing the waiting time between retries.
Start with a short delay and increase it exponentially with each subsequent retry.
Implementation:
Modify the ESB application to include the exponential back-off algorithm.
Ensure that the retries are limited to a reasonable number to avoid indefinite looping.
This approach will help mitigate the temporary overloads by spreading out the request attempts.
Google Workspace Admin Help: Handle API Errors
Google Developers: Exponential Backoff
Question 5
You want to create a list of IP addresses that are approved to send email to your domain. To accomplish this, what section of the Google Workspace Admin console should you update?
Explanation:
Access Email Allowlist Settings:
Navigate to the Google Admin console.
Go to Apps > Google Workspace > Gmail > Spam, Phishing, and Malware.
Update Allowlist:
In the Spam section, find the 'Email allowlist' option.
Add the IP addresses that are approved to send email to your domain.
Save Changes:
Save the settings to ensure the allowlist is updated.
This configuration will allow emails from the specified IP addresses to bypass spam filters and be delivered to your domain.
Google Workspace Admin Help: Configure Email Allowlists
Question 6
The compliance team at your organization is conducting a legal investigation into some concerning sales activities of an employee eight months ago The compliance team contacted you for assistance on the situation You set up the default Google Vault retention rules so all data is retained only for one year You must assist the compliance team with the investigation What should you do1?
Explanation:
Assign Vault Administrator Role: In the Google Admin console, assign the compliance team members the Google Vault administrator role to give them the necessary permissions.
Access Google Vault: Have the compliance team access Google Vault.
Create a Matter: In Google Vault, create a new matter for the investigation.
Create a Hold: Within the matter, create a legal hold specifically targeting the employee's email and any other relevant data. This will preserve all the necessary information beyond the default retention period.
Review Data: The compliance team can now review the preserved data as part of their investigation.
Google Vault Help: Assign Vault privileges
Google Vault Help: Create and manage holds
Question 7
Your team is collaborating on a new project by using a Google Doc They are using Doc comments to add numerous questions and suggestions You want to ensure that sensitive data in the Doc comments does not appear in the recipients' inboxes when a user is notified that a comment has been assigned to them What should you do?
Explanation:
Create a Content Compliance Rule:
Access the Google Admin console.
Go to Apps > Google Workspace > Gmail > Compliance.
Click on 'Add another rule' to create a new content compliance rule.
Define the conditions to detect sensitive data within email content.
Set actions to quarantine or reject emails that contain sensitive information.
Turn Off Dynamic Email:
In the Admin console, go to Apps > Google Workspace > Gmail > User settings.
Turn off dynamic email for your organization or specific organizational units.
Save and Apply:
Save the compliance rule and dynamic email settings.
These configurations ensure that sensitive data in Doc comments does not appear in recipient inboxes.
Google Workspace Admin Help: Set up content compliance
Google Workspace Admin Help: Turn dynamic email on or off
Question 8
Your organization was recently targeted by a phishing attempt that affected several users You must efficiently determine the full extent of the phishing attempt and prevent further issues from occurring What should you do?
Explanation:
Use the Security Dashboard:
Access the Google Admin console and go to Security > Dashboard.
Review metrics and logs for phishing and spoofing activities.
Identify affected users and potential threats.
Use the Investigation Tool:
From the Security dashboard, access the investigation tool.
Search for and isolate malicious emails sent to affected users.
Take action to remove these emails.
Enable Advanced Protection:
In the Admin console, go to Apps > Google Workspace > Gmail > Safety.
Enable advanced phishing and malware protection features.
Deploy Password Alert Extension:
Ensure the Password Alert Chrome extension is deployed across the organization to help detect password compromises.
Google Workspace Admin Help: Security dashboard
Google Workspace Admin Help: Investigation tool
Google Workspace Admin Help: Phishing and malware protection
Google Workspace Admin Help: Deploy Password Alert
Question 9
Your organization has offices in Canada Italy and the United States You want to ensure that employees can access corporate Gmail and Drive from these three geographic locations only What should you do?
Explanation:
Enable Context-Aware Access:
In the Google Admin console, go to Security > Context-Aware Access.
Enable the context-aware access feature.
Create Access Levels:
Define access levels based on geographic locations (Canada, Italy, and the United States).
Use IP address ranges or other location indicators to specify these regions.
Assign Access Levels:
Assign the created access levels to the Google Workspace services, specifically corporate Gmail and Drive.
Ensure that only users accessing from the specified regions can access these services.
Apply and Monitor:
Save and apply the settings.
Monitor access logs to ensure compliance and security.
Google Workspace Admin Help: Set up context-aware access
Google Workspace Admin Help: Manage context-aware access levels
Question 10
Your organization has upgraded to a Google Workspace edition with Vault and has hired a new audit team You are configuring access for this audit team with these privileges
* Chief legal executive - reporting privileges
* Legal audit manager - full Vault privileges
* Data reviewer - searching privileges
You must enable access for these three roles What should you do?
Explanation:
Navigate to Admin Roles: Go to the Google Admin console and navigate to the 'Admin roles' section.
Create Admin Roles: Create three separate admin roles:
Chief Legal Executive: Assign reporting privileges only.
Legal Audit Manager: Assign full Vault privileges.
Data Reviewer: Assign searching privileges.
Assign Roles to Users: Assign the created roles to the respective users (Chief Legal Executive, Legal Audit Manager, Data Reviewer).
Set Up Google Vault Access: Ensure the Google Vault service is turned on for these users by navigating to 'Apps' > 'Google Workspace' > 'Google Vault' and verifying that the service is enabled for their organizational unit.
Manage admin roles
Google Vault permissions
Question