100% Guaranteed Results Google-Workspace-Administrator Unlimited 103 Questions [2025]
Google-Workspace-Administrator Dumps PDF - Want To Pass Google-Workspace-Administrator Fast
NEW QUESTION # 10
Your organization recently bought 1,000 licenses for Cloud Identity Premium. The company's development team created an application in the enterprise service bus (ESB) that will read user data in the human resources information system (HRIS) and create accounts via the Google Directory REST API.
While doing the original test before production use, the team observes a 503 error coming from Google API response after a few users are created. The team believes the ESB is not the cause, because it can perform 100 requests per second without any problems. What advice would you give the development team in order to avoid the issue?
- A. Switch from REST API to gRPC protocol for performance improvement.
- B. Use an exponential back-off algorithm to retry failed requests.
- C. Use the batch request architecture, because it can pack 1,000 API calls in one HTTP request.
- D. Use the domain-wide delegation API to avoid the limitation per account.
Answer: B
Explanation:
https://developers.google.com/admin-sdk/admin-settings/limits
NEW QUESTION # 11
You are the administrator of a domain that requires iOS mobile device management. What initial steps should be taken to ensure that you can properly manage end-user iOS devices?
- A. In the Admin console, navigate to iOS management, and enable the Apple Push Certificate connector.
- B. Configure an Apple Push Certificate, and select "certificate never expires."
- C. Configure an Apple Push Certificate, and be sure to use a work address that can be accessed in the future.
- D. Follow the prompts under "company owned devices," and select "iOS Management." Select the option to "enforce management on iOS devices."
Answer: C
Explanation:
To manage end-user iOS devices, you need to configure an Apple Push Certificate, which allows Google to communicate with your devices and enforce security policies1. The certificate expires annually, so you need to renew it before it expires1. You should use a work address that can be accessed in the future, because you will receive email notifications from Apple when the certificate is about to expire1. The other options are incorrect because:
There is no option to "enforce management on iOS devices" under "company owned devices" in the Admin console2.
You cannot select "certificate never expires" when configuring an Apple Push Certificate. The certificate always expires after one year1.
There is no option to enable the Apple Push Certificate connector in the Admin console. You need to download the public key from Google and upload it to Apple Business Manager or Apple School Manager2.
NEW QUESTION # 12
As the newly hired Admin in charge of Google Workspace, you learn that the organization has been using Google Workspace for months and has configured several security rules for accessing Google Drive. A week after you start your role, users start to complain that they cannot access Google Drive anymore from one satellite office and that they receive an error message that "a company policy is blocking access to this app." The users have no issue with Gmail or Google Calendar. While investigating, you learn that both this office's Internet Service Provider (ISP) and the global IP address when accessing the internet were changed over the weekend. What is the most logical reason for this issue?
- A. An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.
- B. Under Drive and Docs > Sharing Settings, the "Whitelisted domains" list needs to be updated to add the new ISP domain.
- C. The Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range.
- D. You need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access.
Answer: A
NEW QUESTION # 13
Your Finance team has to share quarterly financial reports in Sheets with an external auditor. The external company is not a Workspace customer and allows employees to access public sites such as Gmail and Facebook. How can you provide the ability to securely share content to collaborators that do not have a Google Workspace or consumer (Gmail) account?
- A. Attach the Sheet file to an email message, and send to the external auditor.
- B. Allow external sharing with the auditor using the 'Trusted Domains' feature.
- C. Use the 'Publish' feature in the Sheets editor to share the contents externally.
- D. Enable the 'Visitor Sharing' feature, and demonstrate it to the Finance team.
Answer: D
Explanation:
Enable Visitor Sharing: In the Google Admin console, go to Apps > Google Workspace > Drive and Docs > Sharing settings. Enable the 'Visitor Sharing' feature.
Configure Visitor Sharing: Ensure that the sharing settings allow sharing with external users who do not have a Google account.
Demonstrate to Finance Team: Conduct a training session with the Finance team to demonstrate how to use the Visitor Sharing feature securely.
Share Reports: When sharing the quarterly financial reports, use the Visitor Sharing option to generate a secure sharing link that can be accessed by the external auditor without requiring a Google account.
Monitor and Review: Regularly review shared documents to ensure that access is being appropriately managed and that the security of shared data is maintained.
Reference:
Google Workspace Admin Help - Visitor Sharing
Google Workspace Admin Help - Sharing Settings
NEW QUESTION # 14
Your organization is preparing to deploy Workspace and will continue using your company's existing identity provider for authentication and single sign-on (SSO). In order to migrate data from an external system, you were required to provision each user's account in advance. Your IT team and select users (~5% of the organization) have been using Workspace for configuration and testing purposes. The remainder of the organization can technically access their accounts now, but the IT team wants to block their access until the migrations are complete. What should your organization do?
- A. Use Context-Aware Access to simultaneously block access to all services for all users and allow access to all services for the allowed users.
- B. Suspend users that the organization does not wish to have access.
- C. Add the users to the OU with all services disabled.
- D. Remove Google Workspace license to prevent users from accessing their accounts now.
Answer: A
Explanation:
"Depending on what you're migrating, you need to turn on the relevant service (Gmail for email, Directory for contacts, and Google Calendar for calendar events)."
- https://support.google.com/a/answer/9158145?hl=en
NEW QUESTION # 15
Several users in your organization reported an issue with receiving emails from one particular external sender You want to troubleshoot the issue and determine whether Google received these emails What should you do?
- A. Open a support ticket with Google Workspace Support
- B. Check if your Google Workspace domain registration expired
- C. Update your MX records to make sure they point to Google mail servers
- D. Search for missing email messages by using email Log Search {ELS) and determine why messages weren't delivered
Answer: D
Explanation:
Step by Step Comprehensive Detailed Explanation:
* Access Email Log Search: Sign in to the Google Admin console and navigate to "Reports" then
"Audit" and select "Email Log Search."
* Perform a Search: Enter the details of the external sender and the date range to search for the missing
* emails.
* Analyze Results: Review the search results to see if the emails were received, bounced, or filtered.
* Determine Cause: Identify any issues such as delivery errors or spam filtering that might have affected the emails.
References:
* Google Workspace Admin Help: Email Log Search
NEW QUESTION # 16
As the Workspace Administrator, you have been asked to delete a temporary Google Workspace user account in the marketing department. This user has created Drive documents in My Documents that the marketing manager wants to keep after the user is gone and removed from Workspace. The data should be visible only to the marketing manager. As the Workspace Administrator, what should you do to preserve this user's Drive data?
- A. Ask the user to create a folder under MyDrive, move the documents to be shared, and then share that folder with the marketing team manager.
- B. In the user deletion process, select "Transfer" in the data in other apps section and add the manager's email address.
- C. Use Google Vault to set a retention period on the OU where the users reside.
- D. Before deleting the user, add the user to the marketing shared drive as a contributor and move the documents into the new location.
Answer: B
Explanation:
https://support.google.com/a/answer/6223444?hl=en#zippy=%2Ctransfer-user-drive-or-google-data:~:text=You%20can%20transfer,Tap%20Transfer.
NEW QUESTION # 17
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. Drive usage audit log
- B. SAML audit log
- C. OAuth Token audit log
- D. Admin audit log
Answer: C
Explanation:
Admin Console: Log into the Google Admin console at admin.google.com.
Security Settings: Navigate to Security > Access and Data Control > API controls.
Audit Log:
Click on "OAuth Token Audit Log".
Review the log entries for any suspicious third-party applications that have access to your Google Workspace data.
Investigate:
Identify and investigate any suspicious activities or applications listed in the audit log.
Revoke access to any untrusted third-party applications.
Reference
Google Workspace Admin: View OAuth Token audit log
NEW QUESTION # 18
Your organization uses a third-party product to filter mail before it arrives at your Workspace Domain. How should you configure Gmail to ensure that inbound messages are not seen as a spam attack due to the volume of mail being received from this product?
- A. Add the product's IP addresses to your organization's SPF record.
- B. Add the product's IP addresses as an approved sender.
- C. List the IP addresses of the product as an Inbound Gateway.
- D. Allowlist the IP addresses of the third-party filtering product.
Answer: C
Explanation:
To ensure that inbound messages from the third-party filtering product are not seen as a spam attack, you should list the IP addresses of the product as an Inbound Gateway. This configuration tells Gmail that the emails coming from these IP addresses are trusted and should not be flagged as spam due to the volume of mail being received.
Reference:
Google Workspace Admin Help - Configure an inbound mail gateway
Google Workspace Admin Help - Prevent email spoofing and spam using the Inbound Gateway setting
NEW QUESTION # 19
Your organization's legal team is conducting a legal review of an employee. The default retention period for your organization is indefinite. You must assist your legal team with retrieving the employee's emails for a one month period. What should you do?
- A. Create a new retention rule inside Google Vault. Specify Gmail and the timeframe to retain messages.
- B. Specify the time frame and user by using Google Vault's audit reports. Export the report as a CSV file.
- C. Create a new Matter inside Google Vault. Specify Gmail, the user, and the timeframe to retrieve messages.
- D. Restore the user's deleted Gmail messages from the Admin console and export the user's inbox messages by using an API.
Answer: C
Explanation:
Every legal search regarding an employee needs to start with a new Matter creation in Google Vault. Given the retention policy is indefinite, all the employees' data is intact.
NEW QUESTION # 20
The organization has conducted and completed Security Awareness Training (SAT) for all employees. As part of a new security policy, employees who did not complete the SAT have had their accounts suspended. The CTO has requested to be informed of any accounts that have been re-enabled to ensure no one is in violation of the new security policy.
What should you do?
- A. Enable "Suspended user made active" rule - Other Recipients: CTO
- B. Enable "Suspended user made active" rule and select "Deliver to" Super Administrator(s)
- C. Enable "Email settings changed" rule - -Other Recipients: CTO
- D. Enable "Suspicious login" rule - Other Recipients: CTO
Answer: A
Explanation:
Access Admin Console: Log into your Google Workspace Admin Console.
Navigate to Alert Center: Go to Security > Alert Center.
Enable Alert Rule: Find and enable the "Suspended user made active" rule.
Configure Recipients: In the alert rule settings, add the CTO as an additional recipient under the "Other Recipients" section.
Save Settings: Save the configuration. The CTO will now receive notifications whenever a suspended user's account is re-enabled, ensuring compliance with the new security policy.
Reference
Google Support: Alert Center
NEW QUESTION # 21
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to preventusers from copying data from work to personal apps on iOS devices?
(Choose Two)
- A. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Open Docs in Unmanaged Apps
- B. Clear the "allow items created with managed apps to open in unmanaged apps" checkbox.
- C. Clear the "allow users to copy data to personal apps" checkbox.
- D. Turn on "Advanced Mobile Management."
- E. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection
Answer: C,E
Explanation:
To prevent users from copying content from a Google app in their work account to a personal account or third-party app on iOS devices, follow these steps:
* Sign in to the Google Admin console: Use an account with super administrator privileges.
* Navigate to Mobile and endpoint management: Go to Devices > Mobile and endpoints > Settings > iOS settings.
* Data sharing settings:
* In the iOS settings, go to "Data Sharing."
* Under "Data Protection," clear the checkbox for "Allow users to copy data to personal apps." This ensures that data cannot be copied from managed Google apps to unmanaged personal apps.
* Enable Advanced Mobile Management:
* Navigate to Devices > Mobile and endpoint management.
* Turn on "Advanced Mobile Management" to enforce the data protection policies on iOS devices.
References:
* Google Workspace Admin Help - Manage iOS settings
* Google Workspace Admin Help - Advanced mobile device management
NEW QUESTION # 22
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. Drive usage audit log
- B. SAML audit log
- C. OAuth Token audit log
- D. Admin audit log
Answer: C
NEW QUESTION # 23
Your company's compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company's account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.
Which combination of attributes will meet this objective?
- A. Name the rule > select Outbound > select If ALL of the following match > add two expressions:
one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject. - B. Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions:
one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject. - C. Name the rule > select Outbound > select If ANY of the following match > add two expressions:
one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject - D. Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions:
one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
Answer: A
Explanation:
https://www.shieldq.com/en-gb/Google-apps-content-compliance
NEW QUESTION # 24
A user is reporting that external, inbound messages from known senders are repeatedly being incorrectly classified as spam. What steps should the admin take to prevent this behavior in the future?
- A. Instruct the user to add the senders to their contacts.
- B. Add the sender's domain to an allowlist via approved senders in the Admin Console.
- C. Update the spam settings in the Admin Console to be less aggressive.
- D. Modify the SPF record for your internal domain to include the IPs of the external user's mail servers.
Answer: B
Explanation:
https://support.google.com/a/answer/60752?hl=en#:~:text=Approved%20senders%20list%E2%80%94,settings%20in%20Google%20Workspace.
NEW QUESTION # 25
You work at a large organization that prohibits employees from using Google Sites. However, a task force comprised of three people from five different departments has recently been formed to work on a project assigned by the Office of the CIO. You need to allow the users in this task force to temporarily use Google Sites. You want to use the least disruptive and most efficient approach. What should you do?
- A. Create a configuration group for the task force's 15 users. Grant Google Sites access to the group.
- B. Create an access group for the task force's 15 users. Grant Google Sites access to the group.
- C. Turn Google Sites access on for each of the 15 users in the task force.
- D. Place the 15 task force users into a new organizational unit (OU). Turn on Google Sites access for the OU.
Answer: D
Explanation:
Creating a new organizational unit (OU) for the task force members and turning on Google Sites access for that OU is the least disruptive and most efficient approach. It allows you to target only the users in the task force, granting them temporary access to Google Sites without impacting the rest of the organization. This solution also provides clear control over the access, which can be easily modified when the task force's work is completed.
NEW QUESTION # 26
Your corporate LDAP contains the email addresses of several hundred non-employee business partners. You want to sync these contacts to Google Workspace so they appear in Gmail's address autocomplete for all users in the domain.
What are two options to meet this requirement? (Choose two.)
- A. Use the Directory API to upload a .csv file containing the contacts.
- B. Develop a custom application to call the Domain Shared Contacts API.
- C. Configure GCDS to populate a Group with external members.
- D. Configure GCDS to synchronize shared contacts.
- E. Use the People API to upload a .csv file containing the contacts.
Answer: B,D
Explanation:
* Develop Custom Application:
* Use the Domain Shared Contacts API to create a custom application.
* The application should read the contacts from your corporate LDAP and upload them to Google Workspace.
* This will ensure that these contacts appear in the address autocomplete for all users.
* Configure Google Cloud Directory Sync (GCDS):
* Install and configure GCDS on a supported server.
* Set up synchronization to include shared contacts from your LDAP directory.
* This will automatically keep the contacts updated and available in Gmail's address autocomplete.
References
* Google Workspace Admin: Google Cloud Directory Sync
* Google Workspace Admin: Domain Shared Contacts API
NEW QUESTION # 27
Your company has a broad, granular IT administration team, and you are in charge of ensuring proper administrative control. One of those teams, the security team, requires access to the Security Investigation Tool. What should you do?
- A. Assign the Super Admin Role to the security team members.
- B. Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.
- C. Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.
- D. Assign the pre-built security admin role to the security team members.
Answer: B
Explanation:
https://support.google.com/a/answer/9043255#:~:text=To%20give%20access%20only%20to%20the%20investigation%20tool%2C%20check%20the%20individual%20boxes%20for%C2%A0Investigation%20Tool%20privileges.%20You%20can%20add%20specific%20privileges%20for%20access%20to%20different%20types%20of%20data%20(for%20example%2C%20Gmail%2C%20Drive%2C%20Device%2C%20and%20User)%3A
NEW QUESTION # 28
Several customers have reported receiving fake collection notices from your company. The emails were received from [email protected], which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.
What two actions should you take? (Choose two.)
- A. Configure a Sender Policy Framework (SPF) record for your domain.
- B. Disable mail delegation for the [email protected] account.
- C. Configure Domain Keys Identified Mail (DKIM) to authenticate email.
- D. Disable "Allow users to automatically forward incoming email to another address."
- E. Change the password for suspected compromised account [email protected].
Answer: A,C
Explanation:
https://support.google.com/a/answer/33786?hl=en
https://support.google.com/a/answer/174124?hl=en
NEW QUESTION # 29
You are managing the buildings and resources for your organization. You need to create several conference rooms with a capacity of 10 people each, equipped with a whiteboard and projector, and wheelchair accessible. You want to ensure the process is efficient. What should you do?
- A. Automate room creation by using a third-party app from the Google Workspace Marketplace.
- B. Create each conference room individually in the Google Admin console. Add the features for each room.
- C. Create a CSV file and add all resources. Write a script using the Workspace API to reference the CSV file and create all the resources.
- D. Use the Google Admin console to bulk upload the rooms. Create a resource with the specified features and apply the features to that resource.
Answer: C
Explanation:
Using a CSV file to list all the conference rooms and a script to automate their creation via the Workspace API is the most efficient solution. This approach allows you to batch-create the rooms with the specified attributes (capacity, whiteboard, projector, wheelchair accessible) without manually inputting each room individually. It minimizes manual effort and ensures consistency across all room configurations.
NEW QUESTION # 30
The legal department at your organization is working on a time-critical merger and acquisition (M&A) deal.
They urgently require access to specific email communications from an employee who is currently on leave.
The organization's current retention policy is set to indefinite. You need to retrieve the required emails for the legal department in a manner that ensures data privacy. What should you do?
- A. Use Google Vault to create a matter specific to the M&A deal. Search for relevant emails within the employee's mailbox. Export and share relevant emails with your legal department.
- B. Temporarily grant the legal department access to the employee's email account with a restricted scope that is limited to the M&A-related emails.
- C. Instruct the IT department to directly access and forward the relevant emails to the legal department.
- D. Ask a colleague with delegate access to the employee's mailbox to identify and forward the relevant emails to the legal department.
Answer: A
Explanation:
Using Google Vault to create a matter specific to the M&A deal allows for legal, secure, and privacy- compliant retrieval of emails. You can search for the specific emails related to the merger and acquisition, export them, and share them with the legal department without granting direct access to the employee's mailbox. This approach ensures both data privacy and compliance with organizational policies.
NEW QUESTION # 31
Your company provides shared Chromebook workstations for employees to access sensitive company data.
You must configure the devices to ensure no sensitive data is stored locally and that browsing data is cleared after each use. What should you do?
- A. Enable the Manage Guest Session functionality, and set the maximum user session length.
- B. Disable offline access for all Workspace apps. Enable incognito mode for Chrome browsing sessions.
- C. Force ephemeral mode in Chrome. Disable offline access for sensitive Workspace apps like Docs, Sheets, and Drive.
- D. Force ephemeral mode in Chrome. Allow offline access for all Workspace apps with strict expiration times.
Answer: C
Explanation:
Enablingephemeral modein Chrome ensures that all browsing data is cleared after each session, and nothing is stored locally on the Chromebook. Disabling offline access for sensitive Workspace apps, such as Docs, Sheets, and Drive, ensures that users cannot download or store sensitive data locally. This combination provides a secure environment, preventing the retention of any sensitive data on the device after use.
NEW QUESTION # 32
Your company works regularly with a partner. Your employees regularly send emails to your partner's employees. You want to ensure that the Partner contact information available to your employees will allow them to easily select Partner names and reduce sending errors.
What should you do?
- A. Create shared contacts in the Directory using the Directory API.
- B. Educate users on creating personal contacts for the Partner Employees.
- C. Add a secondary domain for the Partner Company and create user entries for each Partner user.
- D. Create shared contacts in the Directory using the Domain Shared Contacts API.
Answer: D
Explanation:
https://developers.google.com/admin-sdk/domain-shared-contacts
NEW QUESTION # 33
......
The Google Google-Workspace-Administrator examination is known as the Google Cloud Certified - Professional Google Workspace Administrator. It is a comprehensive exam that requires candidates to demonstrate their understanding of the Google Workspace administration, including advanced topics such as integrating Google Workspace with other tools and services, managing security and compliance, and managing users and groups. Google-Workspace-Administrator exam is designed to be challenging to ensure that only the most competent and knowledgeable individuals earn the certification.
Google Workspace Administrator certification exam is designed for professionals who are responsible for managing and administering Google Workspace applications and services. Google-Workspace-Administrator exam is intended to validate the knowledge and skills required to effectively manage and maintain Google Workspace environments. Google Cloud Certified - Professional Google Workspace Administrator certification is recognized worldwide as a valuable credential in the field of IT administration.
Updated Verified Google-Workspace-Administrator Q&As - Pass Guarantee: https://www.dumpstillvalid.com/Google-Workspace-Administrator-prep4sure-review.html
Google-Workspace-Administrator Practice Exam Dumps - 99% Marks In Google Exam: https://drive.google.com/open?id=1ryqN6E84etFHyjSHGaJAPLnD_q6tG3CL
