Exam Details

  • Exam Code
    :GOOGLE-WORKSPACE-ADMINISTRATOR
  • Exam Name
    :Professional Google Workspace Administrator
  • Certification
    :Google Certifications
  • Vendor
    :Google
  • Total Questions
    :160 Q&As
  • Last Updated
    :May 19, 2025

Google Google Certifications GOOGLE-WORKSPACE-ADMINISTRATOR Questions & Answers

  • Question 101:

    Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password. What steps should you take to troubleshoot this issue?

    A. Reinstall Password Sync on all domain controllers.

    B. Reauthorize the Password Sync tool in the Google Workspace Admin Console.

    C. Confirm that the Password Sync service is running on all domain controllers.

    D. Reset the user's password in Active Directory.

  • Question 102:

    Your company is using macOS devices for all employees and has built a process to allow a Google account to be used as credentials (or the device Your company wants to manage newly acquired Windows 10 devices with Google Workspace endpoint management and have employees use their Google Workspace account as login credentials for Windows 10 Which steps should you take to enable this?

    Choose 2 answers

    A. Install and configure Google Credential Provider for Windows (GCPW) on each device

    B. Configure Chrome policies on Windows to push advanced device management policies

    C. Enable Windows device management in Devices > Mobile and endpoints > Settings > Windows settings

    D. Sync the Google Accounts and password to AD via Google Cloud Directory Sync V1 (GCDS)

    E. Install and configure Password Sync on each Active Directory (AD) domain controller

  • Question 103:

    Your organization is about to expand by acquiring two companies, both of which are using Google Workspace. The CISO has mandated that strict `No external content sharing' policies must be in place and followed. How should you securely configure sharing policies to satisfy both the CISO's mandate while allowing external sharing with the newly acquired companies?

    A. Allow external sharing of Drive content for the IT group only.

    B. Create a Drive DLP policy that will allow sharing to only domains on an allowlist.

    C. Use shared drives to store the content, and share only individual files externally.

    D. Let users share files between the two companies by using the `Trusted Domains' feature. Create an allowlist of the trusted domains, and choose sharing settings for the users.

  • Question 104:

    You are a Workspace Administrator with a mix of Business Starter and Standard Licenses for your users. A Business Starter User in your domain mentions that they are running out of Drive Storage Quota. Without deleting data from Drive, what two actions can you take to alleviate the quota concerns for this user? (Choose two.)

    A. Add other users as "Editors" on the Drive object, thus spreading the storage quota debt between all of them.

    B. Manually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.

    C. Make another user the "Owner" of the Drive objects, thus transferring the storage quota debt to them.

    D. Perform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.

    E. Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.

  • Question 105:

    Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales

    and Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company's Information Security policy empowers you, as a Google Workspace admin, to grant provisional access immediately if

    all of the following conditions are met:

    Access to the app is restricted to specific individuals by request only. The app does not have the ability to read or manage emails. Immediate notice is given to the Infosec team, followed by the submission of a security risk analysis report

    within 14 days.

    Which actions should you take first to ensure that you are compliant with Infosec policy?

    A. Move the Senior VP to a sub-OU before enabling Marketplace Settings > "Allow Users to Install Any App from Google Workspace Marketplace."

    B. Confirm that the Senior VP's OU has the following Gmail setting disabled before whitelisting the app: "Let users delegate access to their mailbox."

    C. Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.

    D. Search the Google Workspace support forum for feedback about the app to include in the risk analysis report.

  • Question 106:

    Your business partner requests that a new custom cloud application be set up to log in without having separate credentials. What is your business partner required to provide in order to proceed?

    A. Service provider logout URL

    B. Service provider ACS URL

    C. Identity Provider URL

    D. Service provider certificate

  • Question 107:

    Your company is using Google Workspace Business Plus edition, and the security team has reported several unsuccessful attempts to sign in to your Google Workspace domain from countries where you have no local employees. The affected accounts are from several executives in the main office.

    You are asked to take measures to mitigate this security risk. Although budget is not a concern, your company prefers a minimal financial outlay to fix the issue, which you are tasked with managing. Which two solutions would help you mitigate the risk at minimal cost?

    Choose 2 answers

    A. Deploy 2-Step Verification for all users who have security keys.

    B. Deploy Google Cloud Armor on a dedicated project, and create a rule to allow access to Google Workspace only from specific locations.

    C. Upgrade to Google Workspace Enterprise Plus for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

    D. Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

    E. For all executives, create new accounts with random characters to match Google best practices, migrate data from the former accounts, and then delete them.

  • Question 108:

    You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.

    What should you do?

    A. Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups.

    B. Update your configuration file and resync mailing lists with Google Cloud Directory Sync.

    C. Create and assign a custom admin role for all group owners so they can update settings.

    D. Use the Groups Settings API to update Google Groups with desired settings.

  • Question 109:

    Your organization is part of a highly regulated industry with a very high turnover. In order to recycle licenses for new employees and comply with data retention regulations, it has been determined that certain Google Workspace data should be stored in a separate backup environment.

    How should you store data for this situation?

    A. Use routing rules to dual-deliver mail to an on-premises SMTP server and Google Workspace.

    B. Write a script and use Google Workspace APIs to access and download user data.

    C. Use a third-party tool to configure secure backup of Google Workspace data.

    D. Train users to use Google Takeout and store their archives locally.

  • Question 110:

    Your organization has recently gone Google, but you are not syncing Groups yet. You plan to sync all of your Active Directory group objects to Google Groups with a single GCDS configuration. Which scenario could require an alternative deployment strategy?

    A. Some of your Active Directory groups have sensitive group membership.

    B. Some of the Active Directory groups do not have owners.

    C. Some of the Active Directory groups have members external to organization.

    D. Some of the Active Directory groups do not have email addresses.

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Google exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your GOOGLE-WORKSPACE-ADMINISTRATOR exam preparations and Google certification application, do not hesitate to visit our Vcedump.com to find your solutions here.