Ask Question
Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 6
Question list
List of questions
Related questions
Question 51
Your-company.com recently bought 2500 Chrome devices and wants to distribute them to various teams globally. You decided that enterprise enrollment would be the best way to enforce company policies for managed Chrome devices. You discovered that Chrome devices currently end up in the top-level organization unit, and this needs to change to the organizational unit of the device administrator.
What should you do?
Explanation:
Change Enrollment Controls to Place Chrome device in user organization:
To ensure that newly enrolled Chrome devices are placed in the organizational unit (OU) of the device administrator rather than the top-level OU, you need to change the enrollment settings in Google Workspace.
In the Admin console, navigate to Devices > Chrome > Settings > Enrollment controls. Set the option to place Chrome devices in the user's organization during enrollment. This aligns the devices with the correct OU based on the enrolling user's OU.
Google Workspace Admin Help: Manage Chrome device enrollment
Google Workspace Admin Help: Enrollment settings
Question 52
A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.
You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user's busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs.
What two actions should be taken on this call with the user? (Choose two.)
Explanation:
Recording a HAR file (B):
HAR (HTTP Archive) files contain a detailed log of web browser's interaction with a site. Recording a HAR file while the user is composing a new email will provide detailed information about any network issues, errors, or delays in the communication between the user's browser and Gmail servers. This can help diagnose connectivity issues, session timeouts, or any other underlying problems that may prevent drafts from being saved.
Taking Screenshots (C):
Taking screenshots of the user's screen while composing an email can help visually capture any error messages, unusual behavior, or interface issues that the user might be experiencing. Screenshots provide a clear view of the user's environment, including the browser settings, extensions, and any prompts or notifications that appear during the email composition process.
Detailed Steps:
Recording a HAR File:
Instruct the user on how to open the Developer Tools in their browser (usually by pressing F12 or right-clicking on the page and selecting 'Inspect').
Navigate to the Network tab within Developer Tools.
Ensure the 'Preserve log' option is checked to retain the recorded log across different pages.
Start recording the HAR file before the user starts composing a new email.
After reproducing the issue, stop the recording and save the HAR file.
Have the user send the HAR file to you for analysis.
Taking Screenshots:
Guide the user on taking screenshots while they are composing a new email.
Ensure they capture key steps, including opening the compose window, typing the email, and any errors or unusual behavior that occurs.
The user can take multiple screenshots if necessary to provide a comprehensive view of the issue.
Ask the user to share these screenshots with you for further investigation.
Why the Other Options Are Less Effective:
A . Ask the user to send an email to you so you can check the headers:
This does not directly help diagnose why drafts are not being saved, as email headers mainly provide information about the routing and delivery of sent emails, not drafts.
D . Use the Email log search in the Admin panel:
Email log search is useful for tracking sent and received emails but does not provide insights into drafts or unsaved work.
E . Check the Users > App Users Activity report:
This report shows user activity but may not give specific details about the draft-saving process or connectivity issues faced during email composition.
Google Workspace Admin Help: Analyze connectivity issues using HAR files
Google Chrome DevTools: Network Analysis
Google Workspace Admin Help: User reports in the Admin console
Question 53
A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.
You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user's busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs.
What two actions should be taken on this call with the user? (Choose two.)
Explanation:
Recording a HAR file (B):
HAR (HTTP Archive) files contain a detailed log of web browser's interaction with a site. Recording a HAR file while the user is composing a new email will provide detailed information about any network issues, errors, or delays in the communication between the user's browser and Gmail servers. This can help diagnose connectivity issues, session timeouts, or any other underlying problems that may prevent drafts from being saved.
Taking Screenshots (C):
Taking screenshots of the user's screen while composing an email can help visually capture any error messages, unusual behavior, or interface issues that the user might be experiencing. Screenshots provide a clear view of the user's environment, including the browser settings, extensions, and any prompts or notifications that appear during the email composition process.
Detailed Steps:
Recording a HAR File:
Instruct the user on how to open the Developer Tools in their browser (usually by pressing F12 or right-clicking on the page and selecting 'Inspect').
Navigate to the Network tab within Developer Tools.
Ensure the 'Preserve log' option is checked to retain the recorded log across different pages.
Start recording the HAR file before the user starts composing a new email.
After reproducing the issue, stop the recording and save the HAR file.
Have the user send the HAR file to you for analysis.
Taking Screenshots:
Guide the user on taking screenshots while they are composing a new email.
Ensure they capture key steps, including opening the compose window, typing the email, and any errors or unusual behavior that occurs.
The user can take multiple screenshots if necessary to provide a comprehensive view of the issue.
Ask the user to share these screenshots with you for further investigation.
Why the Other Options Are Less Effective:
A . Ask the user to send an email to you so you can check the headers:
This does not directly help diagnose why drafts are not being saved, as email headers mainly provide information about the routing and delivery of sent emails, not drafts.
D . Use the Email log search in the Admin panel:
Email log search is useful for tracking sent and received emails but does not provide insights into drafts or unsaved work.
E . Check the Users > App Users Activity report:
This report shows user activity but may not give specific details about the draft-saving process or connectivity issues faced during email composition.
Google Workspace Admin Help: Analyze connectivity issues using HAR files
Google Chrome DevTools: Network Analysis
Google Workspace Admin Help: User reports in the Admin console
Question 54
The CEO of your company has indicated that messages from trusted contacts are being delivered to spam, and it is significantly affecting their work. The messages from these contacts have not always been classified as spam. Additionally, you recently configured SPF, DKIM, and DMARC for your domain. You have been tasked with troubleshooting the issue.
What two actions should you take? (Choose two.)
Explanation:
Obtain the Message Header: Ask the CEO to provide the full email header of the affected messages.
In Gmail, this can be done by opening the email, clicking on the three dots in the top right corner, and selecting 'Show original'.
Analyze the Header Using Google Workspace Toolbox:
Go to the Google Workspace Toolbox.
Paste the email header into the toolbox and analyze it to identify where the email might be flagged as spam and why.
Email Log Search:
Log into the Google Admin console at admin.google.com.
Navigate to Reports > Email Log Search.
Conduct a search using the sender's email address, date, and other relevant details to trace the message route.
Analyze the logs to see where and why the message might have been marked as spam.
Google Workspace Admin: Trace an email with email log search
Google Workspace Toolbox: Messageheader
Question 55
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
Explanation:
Admin Console: Log into the Google Admin console at admin.google.com.
Security Settings: Navigate to Security > Access and Data Control > API controls.
Audit Log:
Click on ''OAuth Token Audit Log''.
Review the log entries for any suspicious third-party applications that have access to your Google Workspace data.
Investigate:
Identify and investigate any suspicious activities or applications listed in the audit log.
Revoke access to any untrusted third-party applications.
Google Workspace Admin: View OAuth Token audit log
Question 56
Your company wants to provide secure access for its employees. The Chief Information Security Officer disabled peripheral access to devices, but wants to enable 2-Step verification. You need to provide secure access to the applications using Google Workspace.
What should you do?
Explanation:
2-Step Verification (2SV):
2-Step Verification adds an extra layer of security by requiring users to verify their identity using a second factor in addition to their password. This helps protect against unauthorized access, even if the password is compromised.
Google Authenticator:
Google Authenticator is a mobile app that generates time-based one-time passcodes (TOTP) for 2SV. It works even when the device is offline, providing a secure and reliable second factor for authentication.
Implementation Steps:
Enable 2-Step Verification:
Go to the Google Admin console (admin.google.com).
Navigate to Security > Authentication > 2-Step Verification.
Turn on 2-Step Verification for the organization.
Deploy Google Authenticator:
Instruct users to download the Google Authenticator app from their respective app stores (iOS or Android).
Provide guidance on setting up Google Authenticator with their Google Workspace accounts.
Users will scan a QR code provided during the setup process to link their account with the Authenticator app.
Advantages of Google Authenticator:
Security: It provides a highly secure method of 2-step verification as the codes are generated on the user's device and change every 30 seconds.
Ease of Use: It's easy to set up and use, with a straightforward user interface.
Offline Functionality: Codes can be generated even without internet access, ensuring consistent access to 2SV codes.
Why Other Options Are Less Suitable:
A . Enable additional security verification via email:
Email-based verification is less secure than app-based 2SV because email accounts can be more easily compromised.
C . Deploy browser or device certificates via Google Workspace:
While device certificates add security, they are typically used for device management and access control rather than for 2-step verification purposes.
D . Configure USB Yubikeys for all users:
USB Yubikeys are highly secure and suitable for 2SV, but they require physical distribution and management of hardware tokens, which can be logistically complex and costly. Given the context of disabled peripheral access, this option might contradict the policy of the Chief Information Security Officer.
Google Workspace Admin Help: Set up 2-Step Verification
Google Workspace Security: 2-Step Verification
Question 57
A company wants to distribute iOS devices to only the employees in the Sales OU. They want to be able to do the following on these devices:
Control password policies.
Make corporate apps available to the users.
Remotely wipe the device if it's lost or compromised
What two steps are required before configuring the device policies? (Choose two.)
Explanation:
Admin Console: Log into the Google Admin console at admin.google.com.
Enable Advanced Mobile Management for Sales OU:
Navigate to Devices > Mobile & endpoints > Settings.
Select the Sales OU and turn on Advanced Mobile Management.
Set Up an Apple Push Certificate:
Go to Devices > Mobile & endpoints > Apple certificates.
Follow the instructions to obtain and upload an Apple Push Certificate.
Device Policies:
After setting up the Apple Push Certificate, configure the desired device policies such as password policies, app distribution, and remote wipe capabilities.
Google Workspace Admin: Set up advanced mobile management
Google Workspace Admin: Set up an Apple Push Certificate
Question 58
Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.
What should you do?
Explanation:
Prepare Environment: Ensure you have a supported server to install Google Cloud Directory Sync (GCDS).
Download GCDS:
Download Google Cloud Directory Sync from the Google Workspace Downloads page.
Install GCDS:
Follow the installation instructions provided by Google to install GCDS on the server.
Configuration:
Configure GCDS to synchronize user data from Active Directory to Google Workspace.
Set up synchronization rules and schedules to ensure that user data is kept up to date automatically.
Testing and Deployment:
Test the synchronization to ensure that new user accounts are created accurately in Google Workspace.
Deploy GCDS in the production environment after successful testing.
Google Workspace Admin: About Google Cloud Directory Sync
Google Workspace Admin: Install and Set Up GCDS
Question 59
A company has thousands of Chrome devices and bandwidth restrictions. They want to distribute the Chrome device updates over a period of days to avoid traffic spikes that would impact the low bandwidth network.
Where should you enable this in the Chrome management settings?
Explanation:
Admin Console: Log into the Google Admin console at admin.google.com.
Devices Management: Navigate to Devices > Chrome > Settings.
Configuration:
Under the 'Chrome management' section, select 'User & browser settings'.
Choose the organizational unit where you want to apply this setting.
Auto-Updates Settings:
Scroll down to the 'Auto-update settings' section.
Enable the 'Randomly scatter auto-updates' option. This setting will spread out the updates over a period of time, reducing the load on your network.
Save Changes: Click 'Save' to apply the changes.
Google Workspace Admin: Manage automatic updates
Question 60
Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.
How should you accomplish this?
Explanation:
Google Calendar Live Stream:
When you create a Calendar event, you have the option to add a live stream. This feature allows participants to watch the event without having to actively join the meeting.
By adding the live stream to the Calendar invite and including the conference rooms, the rooms will automatically start the live stream at the scheduled time.
Adding Live Stream:
In the Google Calendar event, select the option to 'Add live stream'.
Add the conference rooms to the event as participants. These rooms will automatically connect to the live stream when the event starts.
Advantages:
This method ensures that participants in remote rooms can receive the training session without any manual intervention.
It simplifies the process for users, providing a seamless experience.
Google Workspace Admin Help: Add live streaming to an event
Google Meet hardware overview
Question