ExamGecko
Login
Ask Question

Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 2

List of questions

Question 11

Report
Export
Collapse

Employees at your organization frequently and mistakenly delete important emails that they receive from your payroll department The employees have to file support tickets for the IT team to find and restore these emails You must provide an automated solution that minimizes IT overhead and prevents these emails from being permanently deleted from their inboxes What should you do?

Create a content compliance rule that targets internal messages Use an advanced content match for the sender header to match the payroll department's email Quarantine the message so that administrators can review the email before they release it to the user
Create a content compliance rule that targets internal messages Use an advanced content match for the sender header to match the payroll department's email Quarantine the message so that administrators can review the email before they release it to the user
Create an Apps Script project that uses the Gmail API to find any recently deleted emails and automatically restore them to the inboxes Set the script trigger to be time-driven and run every hour
Create an Apps Script project that uses the Gmail API to find any recently deleted emails and automatically restore them to the inboxes Set the script trigger to be time-driven and run every hour
Create a content compliance rule that targets all internal messages that are sent from the payroll department Modify the message by prepending a custom subject line to all payroll emails so that employees know not to delete them
Create a content compliance rule that targets all internal messages that are sent from the payroll department Modify the message by prepending a custom subject line to all payroll emails so that employees know not to delete them
Create an activity rule by using Gmail log events with two conditions one for the event of an email deletion and another that matches the header address to the payroll department's email Create an action that restores messages Set the rule to run every hour
Create an activity rule by using Gmail log events with two conditions one for the event of an email deletion and another that matches the header address to the payroll department's email Create an action that restores messages Set the rule to run every hour
Suggested answer: D

Explanation:

Access Admin Console: Go to the Google Admin console and navigate to the 'Reports' section.

Activity Rule Setup: Select 'Manage Rules' and create a new rule.

Define Conditions:

Condition 1: Event equals 'Email Deletion'.

Condition 2: Header address matches the payroll department's email address.

Set Action: Define the action to restore the messages to the inbox.

Schedule the Rule: Set the rule to run every hour.

Test and Monitor: Ensure the rule is working as expected by monitoring the results and making adjustments if necessary.

Create and manage activity rules

Gmail API

asked 18/09/2024
Jim Balkwill
44 questions

Question 12

Report
Export
Collapse

You are the administrator for a 30.000-user organization. You have multiple Workspace licensing options available to end users in your domain, according to their work responsibilities. A user may be transitioned to a different license type multiple times in a given year. Your organization has a high turnover rate for employees. What is the most efficient way to manage your organization's licensing?

Use the Directory API to create a custom batch script that modifies the users license on a daily basis
Use the Directory API to create a custom batch script that modifies the users license on a daily basis
Create a license assignment rule in the Google Admin console to set user licensing based on directory attributes.
Create a license assignment rule in the Google Admin console to set user licensing based on directory attributes.
Use Google Cloud Directory Sync to modify user licensing with each sync, according to information available in the organization's LDAP
Use Google Cloud Directory Sync to modify user licensing with each sync, according to information available in the organization's LDAP
Update user licensing in the user portion of the Admin console on an as-needed basis.
Update user licensing in the user portion of the Admin console on an as-needed basis.
Suggested answer: B

Explanation:

To efficiently manage licensing in an organization with a high turnover rate and multiple license types, the best approach is to create a license assignment rule in the Google Admin console based on directory attributes. This method automates the process of assigning licenses according to the user's role and other directory attributes, ensuring that each user gets the appropriate license type without manual intervention. This approach is scalable and minimizes the administrative overhead associated with frequent changes in user roles and turnover.

Google Workspace Admin Help - Assign, change, or remove a user's license

Google Workspace Admin Help - Set up automated user provisioning to third-party applications

asked 18/09/2024
Sumit Dhar
47 questions

Question 13

Report
Export
Collapse

Your organization is planning to remove any dependencies on Active Directory (AD) from all Cloud applications they are using You are currently using Google Cloud Directory Sync (GCDS) with on-premises AD as a source to provision user accounts in Google Workspace. Your organization is also using a software-as-a-service (SaaS) human resources information system (HRIS) that offers integration via CSV export and Open API standard.

Additional requirements for the solution include:

* It should not require a subscription to any additional third-party service.

* The process must be automated from beginning to end.

You are tasked with the design and implementation of a solution to address user provisioning with these requirements.

What solution should you implement?

Set up Azure AD and federate on-premises AD with it. Provision user accounts from Azure AD with the Google-recommended process.
Set up Azure AD and federate on-premises AD with it. Provision user accounts from Azure AD with the Google-recommended process.
Modify the GCDS configuration to use the HRIS application as the data source and complete any necessary adjustments
Modify the GCDS configuration to use the HRIS application as the data source and complete any necessary adjustments
Export HRIS data to a CSV file every day. and build a solution to define the delta with the previous day; import the result as a CSV file via the Admin console.
Export HRIS data to a CSV file every day. and build a solution to define the delta with the previous day; import the result as a CSV file via the Admin console.
Build an application that will fetch updated data from the HRIS system via Open API. and then update Google Workspace with the Directory API accordingly.
Build an application that will fetch updated data from the HRIS system via Open API. and then update Google Workspace with the Directory API accordingly.
Suggested answer: D

Explanation:

Given the requirements to eliminate dependencies on Active Directory, automate the process, and avoid third-party subscriptions, the best solution is to build an application that will fetch updated data from the HRIS system via its Open API. This application will then use the Directory API to update Google Workspace user accounts accordingly. This approach leverages existing tools (HRIS Open API and Google Directory API), ensures full automation from start to end, and does not require additional subscriptions.

Google Workspace Admin Help - Directory API

Google Workspace Admin Help - Google Cloud Directory Sync overview

asked 18/09/2024
Mohamed Hany
42 questions

Question 14

Report
Export
Collapse

Multiple users across the organization are experiencing video degradation in Meet video calls. As an administrator, what steps should you take to start troubleshooting?

Troubleshoot network bandwidth for the organizer of the meeting.
Troubleshoot network bandwidth for the organizer of the meeting.
Push the Meet quality tool to end user devices and run local reports to determine connectivity issues.
Push the Meet quality tool to end user devices and run local reports to determine connectivity issues.
Locate the Meet quality tool, and review the output for issues with quality.
Locate the Meet quality tool, and review the output for issues with quality.
Update the Admin Console Meet settings to disable streaming.
Update the Admin Console Meet settings to disable streaming.
Suggested answer: C

Explanation:

To troubleshoot video degradation issues in Google Meet, the first step should be to locate the Meet Quality Tool and review the output for issues with quality. This tool provides detailed insights into the performance and quality of Meet calls, including network metrics, device performance, and user feedback. By analyzing this data, administrators can identify specific causes of degradation and take appropriate actions to resolve them.

Google Workspace Admin Help - Use the Google Meet quality tool

asked 18/09/2024
C/1094 WOLOGUEDE COTONOU – BENIN NDENDE
36 questions

Question 15

Report
Export
Collapse

Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.

What should you do?

Establish a new Google Workspace tenant with their own admin for each region.
Establish a new Google Workspace tenant with their own admin for each region.
Create an OU for each country. Create an admin role and assign an admin with that role per OU.
Create an OU for each country. Create an admin role and assign an admin with that role per OU.
Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.
Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.
Create a Team Drive per OU, and allow only country-specific administration of each folder.
Create a Team Drive per OU, and allow only country-specific administration of each folder.
Suggested answer: B

Explanation:

Create Organizational Units (OUs):

In the Google Workspace Admin console, go to 'Directory' > 'Organizational units'.

Create separate OUs for each country.

Assign Admin Roles:

Go to 'Admin roles' in the Admin console.

Create custom admin roles with permissions restricted to managing users, groups, and settings within their specific OU.

Ensure that the role does not grant permissions to manage other OUs.

Assign Country-Specific Admins:

Assign the newly created admin roles to the appropriate administrators, ensuring they have control only over their respective country's OU.

Google Workspace Admin Help: Create and manage organizational units

Google Workspace Admin Help: Admin roles

asked 18/09/2024
Sebastian Romero
45 questions

Question 16

Report
Export
Collapse

In your organization, users have been provisioned with either Google Workspace Enterprise, Google Workspace Business, or no license, depending on their job duties, and the cost of user licenses is paid out of each division's budget. In order to effectively manage the license disposition, team leaders require the ability to look up the type of license that is currently assigned, along with the last logon date, for their direct reports.

You have been tasked with recommending a solution to the Director of IT, and have gathered the following requirements:

Team leaders must be able to retrieve this data on their own (i.e., self-service).

Team leaders are not permitted to have any level of administrative access to the Google Workspace Admin panel.

Team leaders must only be able to look up data for their direct reports.

The data must always be current to within 1 week.

Costs must be mitigated.

What approach should you recommend?

Export log data to BigQuery with custom scopes.
Export log data to BigQuery with custom scopes.
Use a third-party tool.
Use a third-party tool.
Use App Script and filter views within a Google Sheet.
Use App Script and filter views within a Google Sheet.
Create an app using AppMaker and App Script.
Create an app using AppMaker and App Script.
Suggested answer: C

Explanation:

Develop an App Script:

Write an App Script to retrieve user data from the Google Workspace directory, including license type and last login date.

Ensure the script filters data based on the team leader's direct reports.

Create a Google Sheet:

Set up a Google Sheet to display the retrieved data.

Use filter views to restrict the data visible to each team leader, showing only their direct reports.

Automate Data Refresh:

Schedule the App Script to run periodically (e.g., once a week) to ensure the data is up-to-date.

Share with Team Leaders:

Share the Google Sheet with team leaders, ensuring they have view-only access to the relevant filter views.

Google Workspace Admin Help: App Script

Google Workspace Admin Help: Filter views in Google Sheets

asked 18/09/2024
Anna Pytka
32 questions

Question 17

Report
Export
Collapse

Your organization recently implemented context-aware access policies for Google Drive to allow users to access Drive only from corporate managed desktops. Unfortunately, some users can still access Drive from non-corporate managed machines. What preliminary checks should you perform to find out why the Context-Aware Access policy is not working as intended? (Choose two.)

Confirm that the user has a Google Workspace Enterprise Plus license.
Confirm that the user has a Google Workspace Enterprise Plus license.
Delete and recreate a new Context-Aware Access device policy.
Delete and recreate a new Context-Aware Access device policy.
Check whether device policy application is installed on users' devices.
Check whether device policy application is installed on users' devices.
Confirm that the user has at least a Google Workspace Business license.
Confirm that the user has at least a Google Workspace Business license.
Check whether Endpoint Verification is installed on users' desktops.
Check whether Endpoint Verification is installed on users' desktops.
Suggested answer: A, E

Explanation:

To ensure that the Context-Aware Access policy is working correctly, perform the following checks:

Confirm Google Workspace License:

Verify that the user has a Google Workspace Enterprise Plus license. Context-Aware Access is a feature available only to Enterprise Plus customers.

In the Admin console, navigate to Billing > Subscriptions and confirm the license type assigned to the user.

Check Endpoint Verification:

Ensure that Endpoint Verification is installed and active on users' desktops.

Go to the Admin console, navigate to Devices > Endpoint Verification.

Check the list of devices to confirm that Endpoint Verification is installed and reporting the status of users' devices.

Additional Steps:

Ensure that policies are correctly configured and applied to the relevant Organizational Units (OUs).

Verify that the Context-Aware Access policies are correctly set up in Security > Context-Aware Access.

By confirming the correct license and ensuring Endpoint Verification is installed, you can troubleshoot and resolve issues related to Context-Aware Access policy enforcement.

Set up Context-Aware Access

Endpoint Verification overview

asked 18/09/2024
Parita Malbari
48 questions

Question 18

Report
Export
Collapse

Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?

Add your partner domains IPs to the Inbound Gateway setting.
Add your partner domains IPs to the Inbound Gateway setting.
Change the spoofing protection to deliver the emails to spam instead of quarantining them.
Change the spoofing protection to deliver the emails to spam instead of quarantining them.
Add your partner sending IP addresses to an allowlist.
Add your partner sending IP addresses to an allowlist.
Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.
Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.
Suggested answer: D

Explanation:

Access Admin Console: Log into your Google Workspace Admin Console.

Navigate to Security Settings: Go to Security > Gmail > Safety.

Modify Spoofing Protection: Locate the spoofing protection settings.

Change Delivery Method: Change the setting from quarantining emails to delivering them to inboxes with a custom warning. This way, users can review the emails and determine if they are legitimate while still being alerted to potential issues.

Save Settings: Save the changes to apply the new delivery method.

Google Support: Protect against spoofing & identity deception

asked 18/09/2024
David Kimovec
33 questions

Question 19

Report
Export
Collapse

As the Workspace Administrator, you have been asked to delete a temporary Google Workspace user account in the marketing department. This user has created Drive documents in My Documents that the marketing manager wants to keep after the user is gone and removed from Workspace. The data should be visible only to the marketing manager. As the Workspace Administrator, what should you do to preserve this user's Drive data?

In the user deletion process, select ''Transfer'' in the data in other apps section and add the manager's email address.
In the user deletion process, select ''Transfer'' in the data in other apps section and add the manager's email address.
Use Google Vault to set a retention period on the OU where the users reside.
Use Google Vault to set a retention period on the OU where the users reside.
Before deleting the user, add the user to the marketing shared drive as a contributor and move the documents into the new location.
Before deleting the user, add the user to the marketing shared drive as a contributor and move the documents into the new location.
Ask the user to create a folder under MyDrive, move the documents to be shared, and then share that folder with the marketing team manager.
Ask the user to create a folder under MyDrive, move the documents to be shared, and then share that folder with the marketing team manager.
Suggested answer: A

Explanation:

Access Admin Console: Log into your Google Workspace Admin Console.

Navigate to User Management: Go to Directory > Users.

Select the User: Find and select the temporary user account you need to delete.

Initiate Deletion Process: Click on the user to open the account details and select the option to delete the user.

Transfer Data: During the deletion process, you will see an option to transfer data. Select ''Transfer'' in the data in other apps section and enter the marketing manager's email address.

Complete Deletion: Complete the user deletion process. The user's Drive documents will be transferred to the marketing manager's account.

Google Support: Delete a user from your organization

asked 18/09/2024
test fdf
47 questions

Question 20

Report
Export
Collapse

As a Google Workspace administrator for your organization, you are tasked with controlling which third-party apps can access Google Workspace data. Before implementing controls, as a first step in this process, you want to review all the third-party apps that have been authorized to access Workspace data. What should you do?

Open Admin Console > Security > API Controls > App Access Control > Manage Third Party App Access.
Open Admin Console > Security > API Controls > App Access Control > Manage Third Party App Access.
Open Admin Console > Security > API Controls > App Access Control > Manage Google Services.
Open Admin Console > Security > API Controls > App Access Control > Manage Google Services.
Open Admin Console > Security > Less Secure Apps.
Open Admin Console > Security > Less Secure Apps.
Open Admin Console > Security > API Controls > App Access Control > Settings.
Open Admin Console > Security > API Controls > App Access Control > Settings.
Suggested answer: A

Explanation:

Access Admin Console: Log into your Google Workspace Admin Console.

Navigate to Security Settings: Go to Security > API Controls.

Manage Third-Party App Access: Select 'App Access Control' and then click on 'Manage Third Party App Access'.

Review Authorized Apps: Here you will find a list of third-party apps that have been authorized to access your Google Workspace data.

Evaluate Access: Review the permissions and access scopes of each third-party app to determine if they should continue to have access or need to be restricted.

Google Support: Control which third-party & internal apps access Google Workspace data

asked 18/09/2024
fritz villanueva
48 questions
Total 199 questions
Go to page: of 20
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Your team is collaborating on a new project by using a Google Doc They are using Doc comments to add numerous questions and suggestions You want to ensure that sensitive data in the Doc comments does not appear in the recipients' inboxes when a user is notified that a comment has been assigned to them What should you do?
Your organization was recently targeted by a phishing attempt that affected several users You must efficiently determine the full extent of the phishing attempt and prevent further issues from occurring What should you do?
Your organization is part of a highly regulated industry with a very high turnover. In order to recycle licenses for new employees and comply with data retention regulations, it has been determined that certain Google Workspace data should be stored in a separate backup environment. How should you store data for this situation?
A user is reporting that external, inbound messages from known senders are repeatedly being incorrectly classified as spam. What steps should the admin take to prevent this behavior in the future?
Your business partner requests that a new custom cloud application be set up to log in without having separate credentials. What is your business partner required to provide in order to proceed?
Your organization recently bought 1.000 licenses for Cloud Identity Premium. The company's development team created an application in the enterprise service bus (ESB) that will read user data in the human resources information system (HRIS) and create accounts via the Google Directory REST API. While doing the original test before production use, the team observes a 503 error coming from Google API response after a few users are created The team believes the ESB is not the cause, because it can perform 100 requests per second without any problems. What advice would you give the development team in order to avoid the issue?
The compliance team at your organization is conducting a legal investigation into some concerning sales activities of an employee eight months ago The compliance team contacted you for assistance on the situation You set up the default Google Vault retention rules so all data is retained only for one year You must assist the compliance team with the investigation What should you do1?
You have configured your Google Workspace account on the scheduled release track to provide additional time to prepare for new product releases and determine how they will impact your users. There are some new features on the latest roadmap that your director needs you to test as soon as they become generally available without changing the release track for the entire organization. What should you do?
Your organization has offices in Canada Italy and the United States You want to ensure that employees can access corporate Gmail and Drive from these three geographic locations only What should you do?
You want to create a list of IP addresses that are approved to send email to your domain. To accomplish this, what section of the Google Workspace Admin console should you update?