ExamGecko
Home Home / Google / Professional Google Workspace Administrator

Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 11

Question list
Search
Search

List of questions

Search

Related questions











Your company has acquired a new company in Japan and wants to add all employees of the acquisition to your existing Google Workspace domain. The new company will retain its original domain for email addresses and, due to the very sensitive nature of its work, the new employees should not be visible in the global directory. However, they should be visible within each company's separate directory. What should you do to meet these requirements?

A.
Create a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.
A.
Create a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.
Answers
B.
Under Directory Settings > Contact sharing, disable the contact sharing option and wait for 24 hours to allow the settings to propagate before creating the new employee accounts.
B.
Under Directory Settings > Contact sharing, disable the contact sharing option and wait for 24 hours to allow the settings to propagate before creating the new employee accounts.
Answers
C.
Redesign your OU organization to have 2 child OUs for each company directly under the root. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the OU.
C.
Redesign your OU organization to have 2 child OUs for each company directly under the root. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the OU.
Answers
D.
Create one dynamic group for each company based on a custom attribute defining the company. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the dynamic group.
D.
Create one dynamic group for each company based on a custom attribute defining the company. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the dynamic group.
Answers
Suggested answer: C

Explanation:

Organizational Units (OUs):

Create separate OUs for each company under the root OU.

This allows for customized settings and policies per company.

Visibility Settings:

Customize the directory visibility settings to ensure each company's users are only visible within their own directory.

Navigate to Directory Settings in the Admin console.

Set up visibility rules to apply to the specific OUs:

Go to Directory > Directory settings.

Click Visibility settings.

Select the OU for each company and customize the visibility settings accordingly.

Google Workspace Admin Help: Manage Directory Visibility

Google Workspace Admin Help: Set Up an Organizational Unit

You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?

A.
Train users to click on Not Spam button for emails.
A.
Train users to click on Not Spam button for emails.
Answers
B.
Add all users of your domain to an approved sender list.
B.
Add all users of your domain to an approved sender list.
Answers
C.
Force TLS for your domain.
C.
Force TLS for your domain.
Answers
D.
Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.
D.
Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.
Answers
Suggested answer: D

Explanation:

Inbound Gateway Configuration:

An inbound mail gateway ensures that all incoming emails are routed through specified servers.

Configuring the inbound gateway to recognize your Exchange server IP addresses prevents internal emails from being marked as spam.

Steps to Configure:

Go to the Google Admin console.

Navigate to Apps > Google Workspace > Gmail > Advanced settings.

Scroll to the 'Spam, Phishing, and Malware' section.

Configure the 'Inbound Gateway' settings:

Add your Exchange server IP addresses.

Ensure these addresses are listed as trusted sources.

Google Workspace Admin Help: Configure Inbound Mail Gateway

A user is reporting that after they sign in to Gmail, their labels are not loading and buttons are not responsive. What action should you take to troubleshoot this issue with the user?

A.
Collect full message headers for examination.
A.
Collect full message headers for examination.
Answers
B.
Check whether the issue occurs when the user authenticates on a different device or a new incognito window.
B.
Check whether the issue occurs when the user authenticates on a different device or a new incognito window.
Answers
C.
Check whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
C.
Check whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
Answers
D.
Check whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
D.
Check whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
Answers
Suggested answer: B

Explanation:

Testing on Different Device or Incognito Window:

This helps determine if the issue is related to the user's current device, browser, or cached data.

Incognito mode runs a clean session without extensions or cached data, which can help identify if browser settings or cache are causing the issue.

Steps to Test:

Ask the user to sign in to Gmail on a different device (e.g., another computer or mobile phone).

Alternatively, instruct the user to open a new incognito or private browsing window in their browser and sign in to Gmail.

Observe if the problem persists in these different environments.

Google Workspace Admin Help: Troubleshoot Gmail Issues

A retail company has high employee turnover due to the cyclical nature in the consumer space. The increase in leaked confidential content has created the need for a specific administrative role to monitor ongoing employee security investigations. What step should you take to increase the visibility of such investigations?

A.
Assign the 'Services Admin' role to an administrator with 'Super Admin' privileges.
A.
Assign the 'Services Admin' role to an administrator with 'Super Admin' privileges.
Answers
B.
Create a 'Custom Role' and add all the Google Vault privileges for a new administrator.
B.
Create a 'Custom Role' and add all the Google Vault privileges for a new administrator.
Answers
C.
Validate that the new administrator has access to Google Vault.
C.
Validate that the new administrator has access to Google Vault.
Answers
D.
Create a 'Custom Role' and add the ability to manage Google Vault matters, holds, searches, and exports.
D.
Create a 'Custom Role' and add the ability to manage Google Vault matters, holds, searches, and exports.
Answers
Suggested answer: D

Explanation:

Access Admin Console: Log in to the Google Admin console.

Navigate to Admin Roles: Go to Admin roles under Account settings.

Create Custom Role: Click on 'Create new role' and name it appropriately.

Assign Vault Privileges: Select the privileges related to Google Vault, including managing matters, holds, searches, and exports.

Assign Role to User: Assign this custom role to the designated administrator who will handle the security investigations.

Verify Access: Ensure that the new administrator has the necessary access to Google Vault to monitor and manage ongoing security investigations.

Google Workspace Admin Help - Create Custom Admin Roles

Google Workspace Admin Help - Google Vault Privileges

A subset of users from the finance and human resources (HR) teams need to share documents with an external vendor. However, external content sharing is prohibited for the entire finance team. What would be the most secure method to enable external sharing for this set of users?

A.
Download and attach the documents to a Gmail message, and send them to the external vendor.
A.
Download and attach the documents to a Gmail message, and send them to the external vendor.
Answers
B.
Move all users from the finance org unit to the HR org unit.
B.
Move all users from the finance org unit to the HR org unit.
Answers
C.
Enable 'Visitor Sharing' for the entire finance org unit.
C.
Enable 'Visitor Sharing' for the entire finance org unit.
Answers
D.
Create a group with the finance and HR users who need to share externally.
D.
Create a group with the finance and HR users who need to share externally.
Answers
Suggested answer: D

Explanation:

Create a Group: In the Google Admin console, navigate to Groups and create a new group for the specific users who need to share documents externally.

Add Members: Add the necessary users from the finance and HR teams to this group.

Set Group Sharing Settings: Configure the group's sharing settings to allow external sharing while keeping the broader organizational settings intact.

Educate Users: Inform the group members about the new sharing permissions and how to securely share documents with the external vendor.

Monitor Sharing Activity: Regularly monitor the group's sharing activity to ensure compliance with organizational policies.

Google Workspace Admin Help - Create and Manage Groups

Google Workspace Admin Help - Sharing Settings

As the newly hired Admin in charge of Google Workspace, you learn that the organization has been using Google Workspace for months and has configured several security rules for accessing Google Drive. A week after you start your role, users start to complain that they cannot access Google Drive anymore from one satellite office and that they receive an error message that ''a company policy is blocking access to this app.'' The users have no issue with Gmail or Google Calendar. While investigating, you learn that both this office's Internet Service Provider (ISP) and the global IP address when accessing the internet were changed over the weekend. What is the most logical reason for this issue?

A.
An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.
A.
An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.
Answers
B.
Under Drive and Docs > Sharing Settings, the ''Whitelisted domains'' list needs to be updated to add the new ISP domain.
B.
Under Drive and Docs > Sharing Settings, the ''Whitelisted domains'' list needs to be updated to add the new ISP domain.
Answers
C.
The Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range.
C.
The Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range.
Answers
D.
You need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access.
D.
You need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access.
Answers
Suggested answer: A

Explanation:

Access Context-Aware Access Settings: In the Google Admin console, go to Security > Context-Aware Access.

Review Access Levels: Check the existing access levels and policies applied to Google Drive.

Update IP Ranges: Update the IP range in the access levels to include the new IP addresses from the satellite office.

Apply Changes: Save and apply the changes to ensure that users in the satellite office can access Google Drive.

Verify Access: Test access from the satellite office to confirm that users can now access Google Drive without issues.

Google Workspace Admin Help - Context-Aware Access

Google Workspace Admin Help - Setting up Context-Aware Access

An end user informs you that they are having issues receiving mail from a specific sender that is external to your organization. You believe the issue may be caused by the external entity's SPF record being incorrectly configured. Which troubleshooting step allows you to examine the full message headers for the offending message to determine why the messages are not being delivered?

A.
Use the Postmaster Tools API to pull the message headers.
A.
Use the Postmaster Tools API to pull the message headers.
Answers
B.
Use the Email Log Search to directly review the message headers.
B.
Use the Email Log Search to directly review the message headers.
Answers
C.
Use the Security Investigation Tool to review the message headers.
C.
Use the Security Investigation Tool to review the message headers.
Answers
D.
Perform an SPF record check on the domain to determine whether their SPF record is valid.
D.
Perform an SPF record check on the domain to determine whether their SPF record is valid.
Answers
Suggested answer: B

Explanation:

Access Email Log Search: In the Google Admin console, navigate to Reports > Email Log Search.

Perform Search: Enter the details of the missing email, such as sender and recipient information, and the date range.

Review Results: Locate the specific email from the search results.

View Message Headers: Click on the email to view detailed information, including the full message headers.

Analyze Headers: Examine the headers to identify any issues with SPF records or other delivery problems.

Google Workspace Admin Help - Email Log Search

Google Workspace Admin Help - Trace Email with Email Log Search

A recent legal investigation requires all emails and Google Drive documents from a specific user to be retrieved. As the administrator, how can you fulfill the legal team's request?

A.
Use Security Investigation Tool to Search Google Drive events for all of the user's documents, and use Google Admin > Reports > Email Log Search to find their emails.
A.
Use Security Investigation Tool to Search Google Drive events for all of the user's documents, and use Google Admin > Reports > Email Log Search to find their emails.
Answers
B.
Search Google Drive for all of the user's documents, and ask them to forward all of their emails.
B.
Search Google Drive for all of the user's documents, and ask them to forward all of their emails.
Answers
C.
Use the Gmail API and Google Drive API to automatically collect and export data.
C.
Use the Gmail API and Google Drive API to automatically collect and export data.
Answers
D.
Utilize Google Vault to hold, search, and export data of interest.
D.
Utilize Google Vault to hold, search, and export data of interest.
Answers
Suggested answer: D

Explanation:

Access Google Vault: Go to the Google Vault interface.

Create a Matter: Create a new matter for the legal investigation.

Set Holds: Place holds on the specific user's email and Google Drive data to preserve the relevant information.

Conduct Searches: Use the search functionality in Google Vault to find all emails and documents related to the user.

Export Data: Once the relevant data is identified, export it for the legal team's review.

Review and Deliver: Ensure the exported data is complete and deliver it to the legal team as required.

Google Vault Help - Create, Search, and Export Matters

Google Vault Help - Export Data from Google Vault

What steps does an administrator need to take to enforce TLS with a particular domain?

A.
Enable email safety features with the receiving domain.
A.
Enable email safety features with the receiving domain.
Answers
B.
Set up secure transport compliance with the receiving domain.
B.
Set up secure transport compliance with the receiving domain.
Answers
C.
Configure an alternate secure route with the receiving domain.
C.
Configure an alternate secure route with the receiving domain.
Answers
D.
Set up DKIM authentication with the receiving domain.
D.
Set up DKIM authentication with the receiving domain.
Answers
Suggested answer: B

Explanation:

Secure Transport Compliance:

TLS (Transport Layer Security) ensures that emails are encrypted during transit between sending and receiving email servers.

Setting up secure transport compliance ensures that emails sent to or received from a particular domain use TLS.

Steps to Enforce TLS:

Navigate to the Google Admin console.

Go to Apps > Google Workspace > Gmail > Advanced settings.

In the 'Compliance' section, select 'Secure transport (TLS) compliance'.

Click 'Add setting' and configure the following:

Select the appropriate organizational unit.

Specify the receiving domain(s) for which TLS should be enforced.

Choose to enforce TLS for incoming, outgoing, or both types of messages.

Save the changes and apply them.

Google Workspace Admin Help: Set Up TLS Compliance

Your company's Google Workspace primary domain is ''mycompany.com,'' and it has acquired a startup that is using another cloud provider with a domain named ''mystartup.com.'' You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO's email address is [email protected], which also matches your company CEO's email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?

A.
Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
A.
Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
Answers
B.
Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
B.
Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
Answers
C.
Create a new Google Workspace domain with ''mystartup.com,'' and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
C.
Create a new Google Workspace domain with ''mystartup.com,'' and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
Answers
D.
Create the startup employees in the ''mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to ''mystartup.com,'' and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
D.
Create the startup employees in the ''mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to ''mystartup.com,'' and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
Answers
Suggested answer: A

Explanation:

Secondary Domain:

A secondary domain allows you to add another domain to your existing Google Workspace account without creating a separate account.

This is useful for managing users from different domains under a single Google Workspace instance.

Steps to Add a Secondary Domain:

Navigate to the Google Admin console.

Go to Account > Domains > Manage domains.

Click 'Add a domain' and select 'Add another domain'.

Enter the domain name (mystartup.com) and follow the prompts to verify domain ownership by updating DNS records.

Once verified, create users under the secondary domain:

Navigate to Directory > Users.

Click 'Add new user' and enter user information, selecting the secondary domain for their email address.

Ensure all existing security policies are applied by assigning the users to the appropriate organizational units.

Google Workspace Admin Help: Add a Domain

Total 197 questions
Go to page: of 20