ExamGecko
Home Home / Google / Professional Google Workspace Administrator

Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 12

Question list
Search
Search

List of questions

Search

Related questions











You are in charge of automating and configuring Google Cloud Directory Sync for your organization. Within the config manager, how can you proactively prevent applying widespread deletions within your Workspace environment if your company's LDAP undergoes a substantial modification?

A.
Manually run Google Cloud Directory Sync only after performing a simulated sync.
A.
Manually run Google Cloud Directory Sync only after performing a simulated sync.
Answers
B.
Specify the minimum and maximum number of objects to synchronize in each configuration item.
B.
Specify the minimum and maximum number of objects to synchronize in each configuration item.
Answers
C.
Configure the tool to delete users only when run from the config manager.
C.
Configure the tool to delete users only when run from the config manager.
Answers
D.
Configure limits for the maximum number of deletions on each synchronization.
D.
Configure limits for the maximum number of deletions on each synchronization.
Answers
Suggested answer: D

Explanation:

Preventing Widespread Deletions:

Configuring deletion limits helps prevent accidental or mass deletions if there's a substantial change in the LDAP directory.

Steps to Configure Deletion Limits:

Open the Google Cloud Directory Sync (GCDS) Configuration Manager.

Go to 'General Settings' and locate the 'Deletion Limits' section.

Set the maximum number of deletions allowed per sync. This will pause the synchronization if the number of deletions exceeds the specified limit, allowing you to review and approve the changes manually.

Save the configuration and test the synchronization process to ensure the limits are properly applied.

Google Workspace Admin Help: GCDS Deletion Limits

Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)

A.
Provide your current GCDS instance with admin credentials to the recently acquired organization's LDAP directory.
A.
Provide your current GCDS instance with admin credentials to the recently acquired organization's LDAP directory.
Answers
B.
Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.
B.
Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.
Answers
C.
Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended.
C.
Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended.
Answers
D.
Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.
D.
Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.
Answers
E.
Upgrade to the multiple LDAP version of GCDS.
E.
Upgrade to the multiple LDAP version of GCDS.
Answers
Suggested answer: D, E

Explanation:

Additional GCDS Instance:

Running a separate instance of GCDS on another server allows you to manage synchronization for the acquired organization independently.

This avoids conflicts and simplifies management for different LDAP directories.

Multiple LDAP Version:

Upgrading to the multiple LDAP version of GCDS supports synchronizing data from multiple LDAP directories.

This is useful for handling different organizations with distinct LDAP setups.

Steps for Setting Up:

Install a second instance of GCDS on a separate server.

Configure the new instance with the acquired organization's LDAP details.

If using the multiple LDAP version, upgrade your existing GCDS setup and configure rules for both LDAP directories.

Test the synchronization to ensure proper setup and no conflicts.

Google Workspace Admin Help: Set Up GCDS

A user reached out to the IT department about a Google Group that they own: [email protected]. The group is receiving mail, and each message is also delivered directly to the user's Gmail inbox. The user wants to be able to reply to messages directly from Gmail and have them sent on behalf of the group, not their individual account. Currently, their replies come from their individual account. What would you instruct the user to do?

A.
Create a new content compliance rule that matches the user's outgoing messages with the group copied, and have it modify the sender to be the group address.
A.
Create a new content compliance rule that matches the user's outgoing messages with the group copied, and have it modify the sender to be the group address.
Answers
B.
Add the group as an email address that can be sent from within Gmail, and verify that the user has access. They can then choose to reply from the group.
B.
Add the group as an email address that can be sent from within Gmail, and verify that the user has access. They can then choose to reply from the group.
Answers
C.
Add the user's individual account as a delegate to the group's inbox. They can then toggle between the accounts and use the Gmail interface on behalf of the group.
C.
Add the user's individual account as a delegate to the group's inbox. They can then toggle between the accounts and use the Gmail interface on behalf of the group.
Answers
D.
Set the group address to be the default sender within the group's posting policies.
D.
Set the group address to be the default sender within the group's posting policies.
Answers
Suggested answer: B

Explanation:

Send from Group Email:

To send emails on behalf of a group, users must add the group's email address to their Gmail account and verify access.

This allows them to select the group email as the sender when composing or replying to messages.

Steps to Add Group Email:

The user should go to their Gmail settings by clicking the gear icon and selecting 'See all settings'.

Navigate to the 'Accounts and Import' tab.

Under 'Send mail as,' click 'Add another email address'.

Enter the group email address ([email protected]) and follow the verification process, which may involve receiving and entering a confirmation code.

Once verified, the user can select the group email address from the 'From' dropdown menu when composing or replying to messages.

Google Workspace Admin Help: Send Emails from a Group Alias

Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites. What should you do?

A.
Modify your Marketplace Settings to block users from installing any app from the Marketplace.
A.
Modify your Marketplace Settings to block users from installing any app from the Marketplace.
Answers
B.
Set all API services to ''restricted access'' and ensure that all connected apps have limited access.
B.
Set all API services to ''restricted access'' and ensure that all connected apps have limited access.
Answers
C.
Remove all client IDs and scopes from the list of domain-wide delegation API clients.
C.
Remove all client IDs and scopes from the list of domain-wide delegation API clients.
Answers
D.
Block each connected app's access.
D.
Block each connected app's access.
Answers
Suggested answer: A

Explanation:

Access Admin Console: Log in to the Google Admin console.

Navigate to Marketplace Settings: Go to Apps > Google Workspace Marketplace apps.

Update App Installation Settings: Modify the settings to block users from installing any apps from the Marketplace. This can be done by selecting 'Block all' under the 'User access to Google Workspace Marketplace apps' section.

Save Changes: Apply and save the changes to ensure that users are no longer able to install unauthorized add-ons.

Verify and Monitor: Verify that the settings are correctly applied and monitor to ensure no unauthorized add-ons are installed.

Google Workspace Admin Help - Manage Google Workspace Marketplace Apps

Your organization has just completed migrating users to Workspace. Many employees are concerned about their legacy Microsoft Office documents, including issues of access, editing, and viewing. Which two practices should you use to alleviate user concerns without limiting Workspace collaboration features? (Choose two.)

A.
Configure Context-Aware Access policies to block access to Microsoft Office applications.
A.
Configure Context-Aware Access policies to block access to Microsoft Office applications.
Answers
B.
Demonstrate the ability to convert Office documents to native Google file format from Drive.
B.
Demonstrate the ability to convert Office documents to native Google file format from Drive.
Answers
C.
Demonstrate and train users to use the Workspace Migrate tool.
C.
Demonstrate and train users to use the Workspace Migrate tool.
Answers
D.
Deliver training sessions that show the methods to access and edit native Office files in Drive, the Workspace file editors, and Drive for Desktop.
D.
Deliver training sessions that show the methods to access and edit native Office files in Drive, the Workspace file editors, and Drive for Desktop.
Answers
E.
Continue to use installed Office applications along with Google Drive for Desktop.
E.
Continue to use installed Office applications along with Google Drive for Desktop.
Answers
Suggested answer: B, D

Explanation:

Demonstrate Conversion: Show users how to convert Microsoft Office documents to Google file formats directly from Google Drive. This includes right-clicking on the Office file in Drive and selecting 'Open with' to choose the appropriate Google file editor.

Training Sessions: Conduct training sessions for employees to educate them on accessing and editing Office files in their native format using Google Drive, Google Workspace file editors (Docs, Sheets, Slides), and Drive for Desktop.

Use Drive for Desktop: Train users on how to use Google Drive for Desktop, which allows them to access and edit Microsoft Office files stored in Google Drive using their locally installed Office applications.

Support Documentation: Provide documentation and resources that detail the steps for both converting files and using Google Drive for Desktop.

Google Workspace Admin Help - Work with Microsoft Office Files

Google Drive Help - Use Google Drive for Desktop

Your IT team is being asked to fulfill a query by your organization's legal department that requires an MBOX file that will be shared to a third-party partner for eDiscovery. The query must be run on multiple users. Legal has no admin rights to Google Vault. What should you do to fulfil the request?

A.
Create a Google Vault matter for each user account, and share the matters to the legal admin.
A.
Create a Google Vault matter for each user account, and share the matters to the legal admin.
Answers
B.
Create a Google Vault matter, search for data, and run an export for the legal department.
B.
Create a Google Vault matter, search for data, and run an export for the legal department.
Answers
C.
Use the Investigation Too! to search for the data requested, and export for the legal department.
C.
Use the Investigation Too! to search for the data requested, and export for the legal department.
Answers
D.
Search for the data in Gmail, and export for the legal department.
D.
Search for the data in Gmail, and export for the legal department.
Answers
Suggested answer: B

Explanation:

Access Google Vault: Go to Google Vault.

Create a Matter: Create a new matter in Google Vault for the legal query.

Search for Data: Use the search functionality to query the required data across multiple user accounts based on the legal department's requirements.

Run Export: After verifying the search results, run an export of the data to an MBOX file format.

Share Export: Provide the exported MBOX file to the legal department for their eDiscovery process.

Google Vault Help - Create and Manage Matters

Google Vault Help - Export Search Results

Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password. What steps should you take to troubleshoot this issue?

A.
Reinstall Password Sync on all domain controllers.
A.
Reinstall Password Sync on all domain controllers.
Answers
B.
Reauthorize the Password Sync tool in the Google Workspace Admin Console.
B.
Reauthorize the Password Sync tool in the Google Workspace Admin Console.
Answers
C.
Confirm that the Password Sync service is running on all domain controllers.
C.
Confirm that the Password Sync service is running on all domain controllers.
Answers
D.
Reset the user's password in Active Directory.
D.
Reset the user's password in Active Directory.
Answers
Suggested answer: C

Explanation:

Check Service Status: Verify that the Password Sync service is running on all domain controllers by accessing the Services panel on each domain controller.

Restart Service if Necessary: If the service is not running, restart it and ensure it is set to start automatically.

Review Logs: Check the event logs on the domain controllers for any errors related to Password Sync.

Sync Test: Perform a password change on a test user account and verify that the change is synchronized with Google Workspace.

Google Workspace Admin Help - Set Up Password Sync

Google Workspace Admin Help - Troubleshoot Password Sync

Your sales team, which is organized as its own organizational unit, is prone to receiving malicious attachments. What action should you take, as an administrator, to apply an additional layer of protection in the admin console for your sales team without disrupting business operation?

A.
Configure an attachment compliance rule to send any emails with attachments received by users within the sales team organizational unit to an administrator quarantine.
A.
Configure an attachment compliance rule to send any emails with attachments received by users within the sales team organizational unit to an administrator quarantine.
Answers
B.
Configure an attachment compliance rule to strip any attachments received by users within the sales team organizational unit.
B.
Configure an attachment compliance rule to strip any attachments received by users within the sales team organizational unit.
Answers
C.
Configure the security sandbox feature on the sales team organizational unit.
C.
Configure the security sandbox feature on the sales team organizational unit.
Answers
D.
Update the Email Allowlist in the admin console to only include IP addresses of known senders.
D.
Update the Email Allowlist in the admin console to only include IP addresses of known senders.
Answers
Suggested answer: C

Explanation:

Access Admin Console: Log in to the Google Admin console.

Navigate to Security Settings: Go to Security > Sandbox.

Configure Security Sandbox: Enable the security sandbox feature and apply it to the sales team's organizational unit.

Policy Setup: Configure policies to ensure that email attachments received by the sales team are automatically analyzed in the security sandbox.

Monitor and Review: Regularly monitor the sandbox reports and adjust the settings as needed to maintain protection without disrupting business operations.

Google Workspace Admin Help - Security Sandbox

Google Workspace Admin Help - Advanced Phishing and Malware Protection

Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners. How best would you achieve this?

A.
Create a configuration group with the approved users as members, and use it to create a target audience.
A.
Create a configuration group with the approved users as members, and use it to create a target audience.
Answers
B.
Enable external sharing for the marketing and sales organizational units.
B.
Enable external sharing for the marketing and sales organizational units.
Answers
C.
Enable external sharing only to allowlisted domains provided by marketing and sales teams.
C.
Enable external sharing only to allowlisted domains provided by marketing and sales teams.
Answers
D.
Create a configuration group with the approved users as members, and enable external sharing for this group.
D.
Create a configuration group with the approved users as members, and enable external sharing for this group.
Answers
Suggested answer: D

Explanation:

Create a Configuration Group:

Navigate to the Google Admin console.

Go to Directory > Groups.

Click 'Create Group' and enter the group details.

Add the approved users from the marketing and sales teams as members of this group.

Enable External Sharing for the Group:

Go to Apps > Google Workspace > Drive and Docs > Sharing settings.

Scroll down to 'Sharing options for specific groups'.

Select the newly created group.

Enable external sharing for this group.

Save the changes.

This ensures that only the specified users can share documents externally, while the rest of the organization remains restricted.

Google Workspace Admin Help: Share Drive and Docs with Specific Groups

As a Workspace Administrator, you want to keep an inventory of the computers and mobile devices your company owns in order to track details such as device type and who the device is assigned to. How should you add the devices to the company-owned inventory?

A.
Download the company owned inventory template CSV file from the admin panel, enter the serial number of the devices, and upload it back to the company owned inventory in the admin panel.
A.
Download the company owned inventory template CSV file from the admin panel, enter the serial number of the devices, and upload it back to the company owned inventory in the admin panel.
Answers
B.
Download the company owned inventory template CSV file from the admin panel, enter the Device OS, serial number and upload it back to the company owned inventory in the admin panel.
B.
Download the company owned inventory template CSV file from the admin panel, enter the Device OS, serial number and upload it back to the company owned inventory in the admin panel.
Answers
C.
Download the company owned inventory template CSV file from the admin panel, enter the asset tag of the devices, and upload it back to the company owned inventory in the admin panel.
C.
Download the company owned inventory template CSV file from the admin panel, enter the asset tag of the devices, and upload it back to the company owned inventory in the admin panel.
Answers
D.
Download the company owned inventory template CSV file from the admin panel, enter the Device OS, asset tag and upload it back to the company owned inventory in the admin panel.
D.
Download the company owned inventory template CSV file from the admin panel, enter the Device OS, asset tag and upload it back to the company owned inventory in the admin panel.
Answers
Suggested answer: B

Explanation:

Download Inventory Template:

Navigate to the Google Admin console.

Go to Devices > Company-owned inventory.

Click 'Download CSV template' to get the template file.

Enter Device Information:

Open the CSV template file.

Enter the Device OS and serial number for each company-owned device.

Upload the CSV File:

Return to the Company-owned inventory section in the Admin console.

Click 'Upload CSV' and select the completed template file.

Confirm and upload the file to update the inventory.

This process ensures that all company-owned devices are tracked accurately in the Google Workspace admin panel.

Google Workspace Admin Help: Add Company-owned Devices

Total 197 questions
Go to page: of 20