Google Professional Google Workspace Administrator Practice Test - Questions Answers, Page 15
List of questions
Question 141

Your organization uses a third-party product to filter mail before it arrives at your Workspace Domain. How should you configure Gmail to ensure that inbound messages are not seen as a spam attack due to the volume of mail being received from this product?
Explanation:
To ensure that inbound messages from the third-party filtering product are not seen as a spam attack, you should list the IP addresses of the product as an Inbound Gateway. This configuration tells Gmail that the emails coming from these IP addresses are trusted and should not be flagged as spam due to the volume of mail being received.
Google Workspace Admin Help - Configure an inbound mail gateway
Google Workspace Admin Help - Prevent email spoofing and spam using the Inbound Gateway setting
Question 142

Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices?
Choose 2 answers
Explanation:
To restrict Drive for desktop to only company-owned devices, you should:
Go to Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop and select Only Allow Google Drive for desktop on authorized devices. This setting ensures that only authorized devices can use Drive for desktop.
Install the Google Endpoint Verification extension on machines using Drive for Desktop. This extension helps manage and verify devices, ensuring that only company-owned devices are allowed access.
Google Workspace Admin Help - Set up Drive for desktop
Google Workspace Admin Help - Google Endpoint Verification
Question 143

You received this email from the head of marketing:
Hello Workspace Admin:
Next week, a new consultant will be starting on the 'massive marketing mailing' project. We want to ensure that they can view contact details of the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that you can help with?
What are two of the steps you need to perform to fulfill this request?
Choose 2 answers
Explanation:
To fulfill the request from the head of marketing, you need to:
Create an isolated Organizational Unit (OU) for the consultants who need restricted contact access. This helps in managing and applying specific policies to the consultants without affecting other users.
Create a group that includes the contacts the consultant is allowed to view. This group will contain the marketing team members' contact details, ensuring that the consultant has access only to these specific contacts.
Google Workspace Admin Help - Manage user access to contacts
Google Workspace Admin Help - Create and manage groups
Question 144

The human resources (HR) team needs a centralized place to share key documents with the entire organization while protecting confidential documents and mitigating the risk of losing documents when someone leaves. These documents must be editable by the HR team members. What is the best way to set this up?
Explanation:
To meet the HR team's requirements, the best approach is to create a shared drive for non-confidential files, give the HR team content manager access, and give view access to the organization. This setup ensures that the HR team can edit documents while the entire organization can view them. Confidential documents can be stored in a separate location with restricted access to mitigate risks.
Google Workspace Admin Help - Create shared drives
Google Workspace Admin Help - Shared drives access levels
Question 145

Your organization implemented Single Sign-On (SSO) for the multiple cloud-based services it uses. During authentication, one service indicates that access to the SSO provider is not possible due to invalid information. What should you do?
Explanation:
If a service indicates that access to the SSO provider is not possible due to invalid information, you should verify that the Audience element in the SAML Response matches the assertion consumer service (ACS) URL. This check ensures that the SAML Response is directed to the correct service, resolving the issue with authentication.
Google Workspace Admin Help - Troubleshoot SSO issues
Google Workspace Admin Help - SAML SSO setup
Question 146

You have configured SSO using a third-party IDP with your Google Workspace domain. An end user has reported that they cannot sign in to Google Workspace after their username was changed in the third-party SSO product. They can sign in to their other internal applications that use SSO. and no other users are experiencing issues signing in. What could be causing the sign-in issue?
Explanation:
The sign-in issue arises because the SAML assertion provided by the third-party IDP is presenting a username that conflicts with the current username configured in Google Workspace. When a username is changed in the third-party IDP, it must be synchronized with Google Workspace. If this synchronization does not happen, Google Workspace will not recognize the updated username and will prevent the user from signing in.
Verify that the username in the SAML assertion matches the username in Google Workspace.
If there is a mismatch, update the username in Google Workspace to match the SAML assertion.
Ensure that future changes in the third-party IDP are reflected in Google Workspace.
Google Workspace Admin Help: Troubleshoot single sign-on
Question 147

You have configured Secure Transport (TLS) Compliance for all messages coming to and from an external domain. altostrat.com. that your end users communicate with via Gmail. What will your end users experience when messages are delivered to them from altostrat.com without TLS enabled?
Explanation:
When Secure Transport (TLS) Compliance is configured and a message is sent from altostrat.com without TLS, the message will not be delivered to the end user in any form. Google Workspace enforces TLS to ensure the security of email communications, and if the required security is not met, the message is blocked.
Confirm that TLS is correctly configured for the domain altostrat.com.
Inform users and administrators of the importance of TLS compliance.
Check the email logs to verify if messages from altostrat.com are being rejected due to the lack of TLS.
Google Workspace Admin Help: Set up TLS for your domain or organization
Question 148

A user joined your organization and is reporting that every time they start their computer they are asked to sign in. This behavior differs from what other users within the organization experience. Others are prompted to sign in biweekly. What is the first step you should take to troubleshoot this issue for the individual user?
Explanation:
The first step to troubleshoot this issue is to check the session length duration for the organizational unit the user is provisioned in. Differences in session length settings can cause variations in how often users are prompted to sign in.
Go to the Admin console.
Navigate to Security > Settings.
Under Session control, check the session length settings for the organizational unit.
Adjust the session length duration if necessary to match the organization's standard setting.
Google Workspace Admin Help: Control session length
Question 149

Four weeks ago. you exported data from Google Vault and emailed the PST export file to your legal admin. They accidentally deleted the PST file and need it sent again. What steps should you take to re-send the PST file to the legal admin?
Question 150

Your admin quarantine is becoming a burden to manage due to a consistently high influx of messages that match the content compliance rule Your security team will not allow you to remove or relax this rule, and as a result, you need assistance processing the messages in the quarantine. What is the first step you should take to enable others to help manage the quarantine, while maintaining security?
Question