Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 12
List of questions
Related questions
Question 111
You are in charge of automating and configuring Google Cloud Directory Sync for your organization. Within the config manager, how can you proactively prevent applying widespread deletions within your Workspace environment if your company's LDAP undergoes a substantial modification?
Explanation:
Preventing Widespread Deletions:
Configuring deletion limits helps prevent accidental or mass deletions if there's a substantial change in the LDAP directory.
Steps to Configure Deletion Limits:
Open the Google Cloud Directory Sync (GCDS) Configuration Manager.
Go to 'General Settings' and locate the 'Deletion Limits' section.
Set the maximum number of deletions allowed per sync. This will pause the synchronization if the number of deletions exceeds the specified limit, allowing you to review and approve the changes manually.
Save the configuration and test the synchronization process to ensure the limits are properly applied.
Google Workspace Admin Help: GCDS Deletion Limits
Question 112
Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)
Explanation:
Additional GCDS Instance:
Running a separate instance of GCDS on another server allows you to manage synchronization for the acquired organization independently.
This avoids conflicts and simplifies management for different LDAP directories.
Multiple LDAP Version:
Upgrading to the multiple LDAP version of GCDS supports synchronizing data from multiple LDAP directories.
This is useful for handling different organizations with distinct LDAP setups.
Steps for Setting Up:
Install a second instance of GCDS on a separate server.
Configure the new instance with the acquired organization's LDAP details.
If using the multiple LDAP version, upgrade your existing GCDS setup and configure rules for both LDAP directories.
Test the synchronization to ensure proper setup and no conflicts.
Google Workspace Admin Help: Set Up GCDS
Question 113
A user reached out to the IT department about a Google Group that they own: [email protected]. The group is receiving mail, and each message is also delivered directly to the user's Gmail inbox. The user wants to be able to reply to messages directly from Gmail and have them sent on behalf of the group, not their individual account. Currently, their replies come from their individual account. What would you instruct the user to do?
Explanation:
Send from Group Email:
To send emails on behalf of a group, users must add the group's email address to their Gmail account and verify access.
This allows them to select the group email as the sender when composing or replying to messages.
Steps to Add Group Email:
The user should go to their Gmail settings by clicking the gear icon and selecting 'See all settings'.
Navigate to the 'Accounts and Import' tab.
Under 'Send mail as,' click 'Add another email address'.
Enter the group email address ([email protected]) and follow the verification process, which may involve receiving and entering a confirmation code.
Once verified, the user can select the group email address from the 'From' dropdown menu when composing or replying to messages.
Google Workspace Admin Help: Send Emails from a Group Alias
Question 114
Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites. What should you do?
Explanation:
Access Admin Console: Log in to the Google Admin console.
Navigate to Marketplace Settings: Go to Apps > Google Workspace Marketplace apps.
Update App Installation Settings: Modify the settings to block users from installing any apps from the Marketplace. This can be done by selecting 'Block all' under the 'User access to Google Workspace Marketplace apps' section.
Save Changes: Apply and save the changes to ensure that users are no longer able to install unauthorized add-ons.
Verify and Monitor: Verify that the settings are correctly applied and monitor to ensure no unauthorized add-ons are installed.
Google Workspace Admin Help - Manage Google Workspace Marketplace Apps
Question 115
Your organization has just completed migrating users to Workspace. Many employees are concerned about their legacy Microsoft Office documents, including issues of access, editing, and viewing. Which two practices should you use to alleviate user concerns without limiting Workspace collaboration features? (Choose two.)
Explanation:
Demonstrate Conversion: Show users how to convert Microsoft Office documents to Google file formats directly from Google Drive. This includes right-clicking on the Office file in Drive and selecting 'Open with' to choose the appropriate Google file editor.
Training Sessions: Conduct training sessions for employees to educate them on accessing and editing Office files in their native format using Google Drive, Google Workspace file editors (Docs, Sheets, Slides), and Drive for Desktop.
Use Drive for Desktop: Train users on how to use Google Drive for Desktop, which allows them to access and edit Microsoft Office files stored in Google Drive using their locally installed Office applications.
Support Documentation: Provide documentation and resources that detail the steps for both converting files and using Google Drive for Desktop.
Google Workspace Admin Help - Work with Microsoft Office Files
Google Drive Help - Use Google Drive for Desktop
Question 116
Your IT team is being asked to fulfill a query by your organization's legal department that requires an MBOX file that will be shared to a third-party partner for eDiscovery. The query must be run on multiple users. Legal has no admin rights to Google Vault. What should you do to fulfil the request?
Explanation:
Access Google Vault: Go to Google Vault.
Create a Matter: Create a new matter in Google Vault for the legal query.
Search for Data: Use the search functionality to query the required data across multiple user accounts based on the legal department's requirements.
Run Export: After verifying the search results, run an export of the data to an MBOX file format.
Share Export: Provide the exported MBOX file to the legal department for their eDiscovery process.
Google Vault Help - Create and Manage Matters
Google Vault Help - Export Search Results
Question 117
Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password. What steps should you take to troubleshoot this issue?
Explanation:
Check Service Status: Verify that the Password Sync service is running on all domain controllers by accessing the Services panel on each domain controller.
Restart Service if Necessary: If the service is not running, restart it and ensure it is set to start automatically.
Review Logs: Check the event logs on the domain controllers for any errors related to Password Sync.
Sync Test: Perform a password change on a test user account and verify that the change is synchronized with Google Workspace.
Google Workspace Admin Help - Set Up Password Sync
Google Workspace Admin Help - Troubleshoot Password Sync
Question 118
Your sales team, which is organized as its own organizational unit, is prone to receiving malicious attachments. What action should you take, as an administrator, to apply an additional layer of protection in the admin console for your sales team without disrupting business operation?
Explanation:
Access Admin Console: Log in to the Google Admin console.
Navigate to Security Settings: Go to Security > Sandbox.
Configure Security Sandbox: Enable the security sandbox feature and apply it to the sales team's organizational unit.
Policy Setup: Configure policies to ensure that email attachments received by the sales team are automatically analyzed in the security sandbox.
Monitor and Review: Regularly monitor the sandbox reports and adjust the settings as needed to maintain protection without disrupting business operations.
Google Workspace Admin Help - Security Sandbox
Google Workspace Admin Help - Advanced Phishing and Malware Protection
Question 119
Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners. How best would you achieve this?
Explanation:
Create a Configuration Group:
Navigate to the Google Admin console.
Go to Directory > Groups.
Click 'Create Group' and enter the group details.
Add the approved users from the marketing and sales teams as members of this group.
Enable External Sharing for the Group:
Go to Apps > Google Workspace > Drive and Docs > Sharing settings.
Scroll down to 'Sharing options for specific groups'.
Select the newly created group.
Enable external sharing for this group.
Save the changes.
This ensures that only the specified users can share documents externally, while the rest of the organization remains restricted.
Google Workspace Admin Help: Share Drive and Docs with Specific Groups
Question 120
As a Workspace Administrator, you want to keep an inventory of the computers and mobile devices your company owns in order to track details such as device type and who the device is assigned to. How should you add the devices to the company-owned inventory?
Explanation:
Download Inventory Template:
Navigate to the Google Admin console.
Go to Devices > Company-owned inventory.
Click 'Download CSV template' to get the template file.
Enter Device Information:
Open the CSV template file.
Enter the Device OS and serial number for each company-owned device.
Upload the CSV File:
Return to the Company-owned inventory section in the Admin console.
Click 'Upload CSV' and select the completed template file.
Confirm and upload the file to update the inventory.
This process ensures that all company-owned devices are tracked accurately in the Google Workspace admin panel.
Google Workspace Admin Help: Add Company-owned Devices
Question