Google GOOGLE-WORKSPACE-ADMINISTRATOR Online Practice Questions and Exam Preparation

Google GOOGLE-WORKSPACE-ADMINISTRATOR Online Questions & Answers

• Question 1:

  User A is a Basic License holder. User B is a Business License holder. These two users, along with many additional users, are in the same organizational unit at the same company. When User A attempts to access Drive, they receive the following error: "We are sorry, but you do not have access to Google Docs Editors. Please contact your Organization Administrator for access." User B is not presented with the same error and accesses the service without issues.

  How do you provide access to Drive for User A?

  A. Select User A in the Directory, and under the Apps section, check whether Drive and Docs is disabled. If so, enable it in the User record.
  B. In Apps > Google Workspace > Drive and Docs, select the organizational unit the users are in and enable Drive for the organizational unit.
  C. In Apps > Google Workspace, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.
  D. Select User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.
  C. In Apps > Google Workspace, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.

  ---

  Explanation/Reference:

  https://support.google.com/a/answer/9050643

• Question 2:

  Your company has decided to change SSO providers. Instead of authenticating into Google Workspace and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.

  What two features are essential to reconfigure in Google Workspace? (Choose two.)

  A. Apps > add SAML apps to your domain.
  B. Reconfigure user provisioning via Google Cloud Directory Sync.
  C. Replace the third-party IDP verification certificate.
  D. Disable SSO with third party IDP.
  E. Enable API Permissions for Google Cloud Platform.
  A. Apps > add SAML apps to your domain.
  D. Disable SSO with third party IDP.

  ---

  Explanation/Reference:

  Reference: https://support.google.com/a/answer/60224?hl=en

• Question 3:

  Your company has just acquired a new group of users. They have been provisioned into the Google Workspace environment with your primary domain as their primary email address. These new users still need to receive emails from their previous domain. What is the best way to achieve this for these new users, without updating the information of pre-existing users?

  A. Add the acquired domain as an alias to the primary Google Workspace domain.
  B. Add the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.
  C. Update the Google-provided test domain to be the domain of the acquired company, and then update the email information of all new users with alias emails.
  D. Without adding a domain, update each user's email information with the previous domain.
  A. Add the acquired domain as an alias to the primary Google Workspace domain.

• Question 4:

  After migrating to Google Workspace, your legal team requests access to search all email and create litigation holds for employees who are involved with active litigation. You need to help the legal team meet this request. What should you do?

  A. Add the legal team to the User Management Admin system role.
  B. Add the legal team to the Google Vault Google Group.
  C. Create a custom role with Google Vault access, and add the legal team.
  D. Create a matter in Google Vault, and share with the legal team.
  C. Create a custom role with Google Vault access, and add the legal team.

  ---

  Explanation/Reference:

  Reference: https://gsuite.google.com/products/vault/

• Question 5:

  Your company recently decided to use a cloud-based ticketing system for your customer care needs. You are tasked with rerouting email coming into your customer care address, [email protected] to the cloud platform's email address, [email protected]. As a security measure, you have mail forwarding disabled at the domain level.

  What should you do?

  A. Create a mail contact in the Google Workspace directory that has an email address of [email protected]
  B. Create a rule to forward mail in the [email protected] mailbox to [email protected]
  C. Create a recipient map in the Google Workspace Admin console that maps [email protected] to [email protected]
  D. Create a content compliance rule in the Google Workspace Admin console to change route to [email protected]
  C. Create a recipient map in the Google Workspace Admin console that maps [email protected] to [email protected]

  ---

  Explanation/Reference:

  Disable automatic forwarding https://support.google.com/a/answer/2491924?hl=en Redirect incoming messages to another email address https://support.google.com/a/answer/4524505?hl=en (Optional) To send the message to the original recipient as well as the new address, under Routing options, check the Also route to original destination box.

• Question 6:

  An end user informs you that they are having issues receiving mail from a specific sender that is external to your organization. You believe the issue may be caused by the external entity's SPF record being incorrectly configured. Which troubleshooting step allows you to examine the full message headers for the offending message to determine why the messages are not being delivered?

  A. Use the Postmaster Tools API to pull the message headers.
  B. Use the Email Log Search to directly review the message headers.
  C. Use the Security Investigation Tool to review the message headers.
  D. Perform an SPF record check on the domain to determine whether their SPF record is valid.
  C. Use the Security Investigation Tool to review the message headers.

  ---

  Explanation/Reference:

  https://support.google.com/a/answer/9300435?hl=en#zippy=%2Cstep-view-the-email-message-and-take-action%2Cstep-provide-justification-to-view-messages%2Cstep-get-started-with-your-investigation

• Question 7:

  Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners. How best would you achieve this?

  A. Create a configuration group with the approved users as members, and use it to create a target audience.
  B. Enable external sharing for the marketing and sales organizational units.
  C. Enable external sharing only to allowlisted domains provided by marketing and sales teams.
  D. Create a configuration group with the approved users as members, and enable external sharing for this group.
  D. Create a configuration group with the approved users as members, and enable external sharing for this group.

  ---

  Explanation/Reference:

• Question 8:

  You have enabled Automatic Room Replacement for your calendar resources, but it is not working for any instances of a conflict booking. What could be the issue?

  A. Automatic Room Replacement does not work on recurring events.
  B. This feature requires calendar event owners to have the Buildings and resources administrator privilege
  C. The calendar resources do not have the Resource Category configured as CONFERENCE_ROOM
  D. The events have more than 20 attendees.
  A. Automatic Room Replacement does not work on recurring events.

• Question 9:

  A recent legal investigation requires all emails and Google Drive documents from a specific user to be retrieved. As the administrator, how can you fulfill the legal team's request?

  A. Use Security Investigation Tool to Search Google Drive events for all of the user's documents, and use Google Admin > Reports > Email Log Search to find their emails.
  B. Search Google Drive for all of the user's documents, and ask them to forward all of their emails.
  C. Use the Gmail API and Google Drive API to automatically collect and export data.
  D. Utilize Google Vault to hold, search, and export data of interest.
  D. Utilize Google Vault to hold, search, and export data of interest.

• Question 10:

  You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.

  What should you do?

  A. Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups.
  B. Update your configuration file and resync mailing lists with Google Cloud Directory Sync.
  C. Create and assign a custom admin role for all group owners so they can update settings.
  D. Use the Groups Settings API to update Google Groups with desired settings.
  B. Update your configuration file and resync mailing lists with Google Cloud Directory Sync.

  ---

  Explanation/Reference: