ExamGecko
Home Home / Google / Professional Google Workspace Administrator

Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 6

Question list
Search
Search

List of questions

Search

Related questions











Your-company.com recently bought 2500 Chrome devices and wants to distribute them to various teams globally. You decided that enterprise enrollment would be the best way to enforce company policies for managed Chrome devices. You discovered that Chrome devices currently end up in the top-level organization unit, and this needs to change to the organizational unit of the device administrator.

What should you do?

A.
Change Enrollment Permissions to only allow users in this organization to re-enroll existing devices.
A.
Change Enrollment Permissions to only allow users in this organization to re-enroll existing devices.
Answers
B.
Change Enrollment Controls to Place Chrome device in user organization.
B.
Change Enrollment Controls to Place Chrome device in user organization.
Answers
C.
Change Enrollment Controls to Keep Chrome device in current location.
C.
Change Enrollment Controls to Keep Chrome device in current location.
Answers
D.
Change Enrolment Permissions to not allow users in this organization to enroll new devices.
D.
Change Enrolment Permissions to not allow users in this organization to enroll new devices.
Answers
Suggested answer: B

Explanation:

Change Enrollment Controls to Place Chrome device in user organization:

To ensure that newly enrolled Chrome devices are placed in the organizational unit (OU) of the device administrator rather than the top-level OU, you need to change the enrollment settings in Google Workspace.

In the Admin console, navigate to Devices > Chrome > Settings > Enrollment controls. Set the option to place Chrome devices in the user's organization during enrollment. This aligns the devices with the correct OU based on the enrolling user's OU.

Google Workspace Admin Help: Manage Chrome device enrollment

Google Workspace Admin Help: Enrollment settings

A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.

You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user's busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs.

What two actions should be taken on this call with the user? (Choose two.)

A.
Ask the user to send an email to you so you can check the headers.
A.
Ask the user to send an email to you so you can check the headers.
Answers
B.
Record a HAR file of the user composing a new email.
B.
Record a HAR file of the user composing a new email.
Answers
C.
Take screenshots of the user's screen when composing an email.
C.
Take screenshots of the user's screen when composing an email.
Answers
D.
Use the Email log search in the Admin panel.
D.
Use the Email log search in the Admin panel.
Answers
E.
Check the Users > App Users Activity report.
E.
Check the Users > App Users Activity report.
Answers
Suggested answer: B, C

Explanation:

Recording a HAR file (B):

HAR (HTTP Archive) files contain a detailed log of web browser's interaction with a site. Recording a HAR file while the user is composing a new email will provide detailed information about any network issues, errors, or delays in the communication between the user's browser and Gmail servers. This can help diagnose connectivity issues, session timeouts, or any other underlying problems that may prevent drafts from being saved.

Taking Screenshots (C):

Taking screenshots of the user's screen while composing an email can help visually capture any error messages, unusual behavior, or interface issues that the user might be experiencing. Screenshots provide a clear view of the user's environment, including the browser settings, extensions, and any prompts or notifications that appear during the email composition process.

Detailed Steps:

Recording a HAR File:

Instruct the user on how to open the Developer Tools in their browser (usually by pressing F12 or right-clicking on the page and selecting 'Inspect').

Navigate to the Network tab within Developer Tools.

Ensure the 'Preserve log' option is checked to retain the recorded log across different pages.

Start recording the HAR file before the user starts composing a new email.

After reproducing the issue, stop the recording and save the HAR file.

Have the user send the HAR file to you for analysis.

Taking Screenshots:

Guide the user on taking screenshots while they are composing a new email.

Ensure they capture key steps, including opening the compose window, typing the email, and any errors or unusual behavior that occurs.

The user can take multiple screenshots if necessary to provide a comprehensive view of the issue.

Ask the user to share these screenshots with you for further investigation.

Why the Other Options Are Less Effective:

A . Ask the user to send an email to you so you can check the headers:

This does not directly help diagnose why drafts are not being saved, as email headers mainly provide information about the routing and delivery of sent emails, not drafts.

D . Use the Email log search in the Admin panel:

Email log search is useful for tracking sent and received emails but does not provide insights into drafts or unsaved work.

E . Check the Users > App Users Activity report:

This report shows user activity but may not give specific details about the draft-saving process or connectivity issues faced during email composition.

Google Workspace Admin Help: Analyze connectivity issues using HAR files

Google Chrome DevTools: Network Analysis

Google Workspace Admin Help: User reports in the Admin console

A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.

You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user's busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs.

What two actions should be taken on this call with the user? (Choose two.)

A.
Ask the user to send an email to you so you can check the headers.
A.
Ask the user to send an email to you so you can check the headers.
Answers
B.
Record a HAR file of the user composing a new email.
B.
Record a HAR file of the user composing a new email.
Answers
C.
Take screenshots of the user's screen when composing an email.
C.
Take screenshots of the user's screen when composing an email.
Answers
D.
Use the Email log search in the Admin panel.
D.
Use the Email log search in the Admin panel.
Answers
E.
Check the Users > App Users Activity report.
E.
Check the Users > App Users Activity report.
Answers
Suggested answer: B, C

Explanation:

Recording a HAR file (B):

HAR (HTTP Archive) files contain a detailed log of web browser's interaction with a site. Recording a HAR file while the user is composing a new email will provide detailed information about any network issues, errors, or delays in the communication between the user's browser and Gmail servers. This can help diagnose connectivity issues, session timeouts, or any other underlying problems that may prevent drafts from being saved.

Taking Screenshots (C):

Taking screenshots of the user's screen while composing an email can help visually capture any error messages, unusual behavior, or interface issues that the user might be experiencing. Screenshots provide a clear view of the user's environment, including the browser settings, extensions, and any prompts or notifications that appear during the email composition process.

Detailed Steps:

Recording a HAR File:

Instruct the user on how to open the Developer Tools in their browser (usually by pressing F12 or right-clicking on the page and selecting 'Inspect').

Navigate to the Network tab within Developer Tools.

Ensure the 'Preserve log' option is checked to retain the recorded log across different pages.

Start recording the HAR file before the user starts composing a new email.

After reproducing the issue, stop the recording and save the HAR file.

Have the user send the HAR file to you for analysis.

Taking Screenshots:

Guide the user on taking screenshots while they are composing a new email.

Ensure they capture key steps, including opening the compose window, typing the email, and any errors or unusual behavior that occurs.

The user can take multiple screenshots if necessary to provide a comprehensive view of the issue.

Ask the user to share these screenshots with you for further investigation.

Why the Other Options Are Less Effective:

A . Ask the user to send an email to you so you can check the headers:

This does not directly help diagnose why drafts are not being saved, as email headers mainly provide information about the routing and delivery of sent emails, not drafts.

D . Use the Email log search in the Admin panel:

Email log search is useful for tracking sent and received emails but does not provide insights into drafts or unsaved work.

E . Check the Users > App Users Activity report:

This report shows user activity but may not give specific details about the draft-saving process or connectivity issues faced during email composition.

Google Workspace Admin Help: Analyze connectivity issues using HAR files

Google Chrome DevTools: Network Analysis

Google Workspace Admin Help: User reports in the Admin console

The CEO of your company has indicated that messages from trusted contacts are being delivered to spam, and it is significantly affecting their work. The messages from these contacts have not always been classified as spam. Additionally, you recently configured SPF, DKIM, and DMARC for your domain. You have been tasked with troubleshooting the issue.

What two actions should you take? (Choose two.)

A.
Obtain the message header and analyze using Google Workspace Toolbox.
A.
Obtain the message header and analyze using Google Workspace Toolbox.
Answers
B.
Review the contents of the messages in Google Vault.
B.
Review the contents of the messages in Google Vault.
Answers
C.
Set up a Gmail routing rule to whitelist the sender.
C.
Set up a Gmail routing rule to whitelist the sender.
Answers
D.
Conduct an Email log search to trace the message route.
D.
Conduct an Email log search to trace the message route.
Answers
E.
Validate that your domain is not on the Spamhaus blacklist.
E.
Validate that your domain is not on the Spamhaus blacklist.
Answers
Suggested answer: A, C

Explanation:

Obtain the Message Header: Ask the CEO to provide the full email header of the affected messages.

In Gmail, this can be done by opening the email, clicking on the three dots in the top right corner, and selecting 'Show original'.

Analyze the Header Using Google Workspace Toolbox:

Go to the Google Workspace Toolbox.

Paste the email header into the toolbox and analyze it to identify where the email might be flagged as spam and why.

Email Log Search:

Log into the Google Admin console at admin.google.com.

Navigate to Reports > Email Log Search.

Conduct a search using the sender's email address, date, and other relevant details to trace the message route.

Analyze the logs to see where and why the message might have been marked as spam.

Google Workspace Admin: Trace an email with email log search

Google Workspace Toolbox: Messageheader

Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.

What log should you use?

A.
Admin audit log
A.
Admin audit log
Answers
B.
SAML audit log
B.
SAML audit log
Answers
C.
Drive usage audit log
C.
Drive usage audit log
Answers
D.
OAuth Token audit log
D.
OAuth Token audit log
Answers
Suggested answer: D

Explanation:

Admin Console: Log into the Google Admin console at admin.google.com.

Security Settings: Navigate to Security > Access and Data Control > API controls.

Audit Log:

Click on ''OAuth Token Audit Log''.

Review the log entries for any suspicious third-party applications that have access to your Google Workspace data.

Investigate:

Identify and investigate any suspicious activities or applications listed in the audit log.

Revoke access to any untrusted third-party applications.

Google Workspace Admin: View OAuth Token audit log

Your company wants to provide secure access for its employees. The Chief Information Security Officer disabled peripheral access to devices, but wants to enable 2-Step verification. You need to provide secure access to the applications using Google Workspace.

What should you do?

A.
Enable additional security verification via email.
A.
Enable additional security verification via email.
Answers
B.
Enable authentication via the Google Authenticator.
B.
Enable authentication via the Google Authenticator.
Answers
C.
Deploy browser or device certificates via Google Workspace.
C.
Deploy browser or device certificates via Google Workspace.
Answers
D.
Configure USB Yubikeys for all users.
D.
Configure USB Yubikeys for all users.
Answers
Suggested answer: B

Explanation:

2-Step Verification (2SV):

2-Step Verification adds an extra layer of security by requiring users to verify their identity using a second factor in addition to their password. This helps protect against unauthorized access, even if the password is compromised.

Google Authenticator:

Google Authenticator is a mobile app that generates time-based one-time passcodes (TOTP) for 2SV. It works even when the device is offline, providing a secure and reliable second factor for authentication.

Implementation Steps:

Enable 2-Step Verification:

Go to the Google Admin console (admin.google.com).

Navigate to Security > Authentication > 2-Step Verification.

Turn on 2-Step Verification for the organization.

Deploy Google Authenticator:

Instruct users to download the Google Authenticator app from their respective app stores (iOS or Android).

Provide guidance on setting up Google Authenticator with their Google Workspace accounts.

Users will scan a QR code provided during the setup process to link their account with the Authenticator app.

Advantages of Google Authenticator:

Security: It provides a highly secure method of 2-step verification as the codes are generated on the user's device and change every 30 seconds.

Ease of Use: It's easy to set up and use, with a straightforward user interface.

Offline Functionality: Codes can be generated even without internet access, ensuring consistent access to 2SV codes.

Why Other Options Are Less Suitable:

A . Enable additional security verification via email:

Email-based verification is less secure than app-based 2SV because email accounts can be more easily compromised.

C . Deploy browser or device certificates via Google Workspace:

While device certificates add security, they are typically used for device management and access control rather than for 2-step verification purposes.

D . Configure USB Yubikeys for all users:

USB Yubikeys are highly secure and suitable for 2SV, but they require physical distribution and management of hardware tokens, which can be logistically complex and costly. Given the context of disabled peripheral access, this option might contradict the policy of the Chief Information Security Officer.

Google Workspace Admin Help: Set up 2-Step Verification

Google Workspace Security: 2-Step Verification

A company wants to distribute iOS devices to only the employees in the Sales OU. They want to be able to do the following on these devices:

Control password policies.

Make corporate apps available to the users.

Remotely wipe the device if it's lost or compromised

What two steps are required before configuring the device policies? (Choose two.)

A.
Turn on Advanced Mobile Management for the domain.
A.
Turn on Advanced Mobile Management for the domain.
Answers
B.
Turn on Advanced Mobile Management for Sales OU
B.
Turn on Advanced Mobile Management for Sales OU
Answers
C.
Set up Device Approvals.
C.
Set up Device Approvals.
Answers
D.
Set up an Apple Push Certificate.
D.
Set up an Apple Push Certificate.
Answers
E.
Deploy Apple Certificate to every device.
E.
Deploy Apple Certificate to every device.
Answers
Suggested answer: B, D

Explanation:

Admin Console: Log into the Google Admin console at admin.google.com.

Enable Advanced Mobile Management for Sales OU:

Navigate to Devices > Mobile & endpoints > Settings.

Select the Sales OU and turn on Advanced Mobile Management.

Set Up an Apple Push Certificate:

Go to Devices > Mobile & endpoints > Apple certificates.

Follow the instructions to obtain and upload an Apple Push Certificate.

Device Policies:

After setting up the Apple Push Certificate, configure the desired device policies such as password policies, app distribution, and remote wipe capabilities.

Google Workspace Admin: Set up advanced mobile management

Google Workspace Admin: Set up an Apple Push Certificate

Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.

What should you do?

A.
Install Google Cloud Directory Sync on all Domain Controllers.
A.
Install Google Cloud Directory Sync on all Domain Controllers.
Answers
B.
Install Google Workspace Sync for Microsoft Outlook on all employees' computers.
B.
Install Google Workspace Sync for Microsoft Outlook on all employees' computers.
Answers
C.
Install Google Cloud Directory Sync on a supported server.
C.
Install Google Cloud Directory Sync on a supported server.
Answers
D.
Install Google Apps Manager to automate add-user scripts.
D.
Install Google Apps Manager to automate add-user scripts.
Answers
Suggested answer: C

Explanation:

Prepare Environment: Ensure you have a supported server to install Google Cloud Directory Sync (GCDS).

Download GCDS:

Download Google Cloud Directory Sync from the Google Workspace Downloads page.

Install GCDS:

Follow the installation instructions provided by Google to install GCDS on the server.

Configuration:

Configure GCDS to synchronize user data from Active Directory to Google Workspace.

Set up synchronization rules and schedules to ensure that user data is kept up to date automatically.

Testing and Deployment:

Test the synchronization to ensure that new user accounts are created accurately in Google Workspace.

Deploy GCDS in the production environment after successful testing.

Google Workspace Admin: About Google Cloud Directory Sync

Google Workspace Admin: Install and Set Up GCDS

A company has thousands of Chrome devices and bandwidth restrictions. They want to distribute the Chrome device updates over a period of days to avoid traffic spikes that would impact the low bandwidth network.

Where should you enable this in the Chrome management settings?

A.
Randomly scatter auto-updates.
A.
Randomly scatter auto-updates.
Answers
B.
Update over cellular.
B.
Update over cellular.
Answers
C.
Disable Auto update.
C.
Disable Auto update.
Answers
D.
Throttle the bandwidth.
D.
Throttle the bandwidth.
Answers
Suggested answer: A

Explanation:

Admin Console: Log into the Google Admin console at admin.google.com.

Devices Management: Navigate to Devices > Chrome > Settings.

Configuration:

Under the 'Chrome management' section, select 'User & browser settings'.

Choose the organizational unit where you want to apply this setting.

Auto-Updates Settings:

Scroll down to the 'Auto-update settings' section.

Enable the 'Randomly scatter auto-updates' option. This setting will spread out the updates over a period of time, reducing the load on your network.

Save Changes: Click 'Save' to apply the changes.

Google Workspace Admin: Manage automatic updates

Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.

How should you accomplish this?

A.
In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.
A.
In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.
Answers
B.
Room participants will need to start the meeting from the remote in the room.
B.
Room participants will need to start the meeting from the remote in the room.
Answers
C.
By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.
C.
By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.
Answers
D.
Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.
D.
Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.
Answers
Suggested answer: D

Explanation:

Google Calendar Live Stream:

When you create a Calendar event, you have the option to add a live stream. This feature allows participants to watch the event without having to actively join the meeting.

By adding the live stream to the Calendar invite and including the conference rooms, the rooms will automatically start the live stream at the scheduled time.

Adding Live Stream:

In the Google Calendar event, select the option to 'Add live stream'.

Add the conference rooms to the event as participants. These rooms will automatically connect to the live stream when the event starts.

Advantages:

This method ensures that participants in remote rooms can receive the training session without any manual intervention.

It simplifies the process for users, providing a seamless experience.

Google Workspace Admin Help: Add live streaming to an event

Google Meet hardware overview

Total 197 questions
Go to page: of 20