[2024] Google-Workspace-Administrator by Workspace Administrator Actual Free Exam Practice Test [Q26-Q46] – IT Certification Exam Questions & Answers

Rate this post

[2024] Google-Workspace-Administrator by Workspace Administrator Actual Free Exam Practice Test

Free Workspace Administrator Google-Workspace-Administrator Exam Question

To earn the Google-Workspace-Administrator certification, candidates must pass a rigorous exam that covers a wide range of topics related to Google Workspace administration. Google-Workspace-Administrator exam consists of multiple-choice questions, and candidates have two hours to complete it. Google-Workspace-Administrator exam is computer-based and can be taken at a Google testing center or remotely, from the comfort of your own home or office.

Google Cloud Certified – Professional Google Workspace Administrator exam is a comprehensive exam that tests an individual’s knowledge in managing and administering Google Workspace applications. Google-Workspace-Administrator exam covers a wide range of topics, including Google Workspace administration fundamentals, user and group management, security and compliance, and more. Google-Workspace-Administrator exam consists of multiple-choice questions and is designed to test an individual’s mastery of Google Workspace administration concepts.

QUESTION 26
Your cyber security team has requested that all email destined for external domains be scanned for credit card numbers, and if found, the email must be encrypted using your cloud-based third-party encryption provider.
You are responsible for configuring to meet this request.
What should you do?

Create a content compliance rule on outbound mail and internal-sending mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.

Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check “Encrypt message if not encrypted”.

Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.

Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check “Change route” to send to your third-party encryption provider to encrypt.

QUESTION 27
Your company is using Google Workspace Business Plus edition, and the security team has reported several unsuccessful attempts to sign in to your Google Workspace domain from countries where you have no local employees. The affected accounts are from several executives in the main office.
You are asked to take measures to mitigate this security risk. Although budget is not a concern, your company prefers a minimal financial outlay to fix the issue, which you are tasked with managing. Which two solutions would help you mitigate the risk at minimal cost?
Choose 2 answers

For all executives, create new accounts with random characters to match Google best practices, migrate

Deploy Google Cloud Armor on a dedicated project, and create a rule to allow access to Google Workspace only from specific locations.

Upgrade to Google Workspace Enterprise Plus for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

Deploy 2-Step Verification for all users who have security keys.

QUESTION 28
Your organization recently implemented context-aware access policies for Google Drive to allow users to access Drive only from corporate managed desktops. Unfortunately, some users can still access Drive from non-corporate managed machines. What preliminary checks should you perform to find out why the Context-Aware Access policy is not working as intended? (Choose two.)

Confirm that the user has a Google Workspace Enterprise Plus license.

Delete and recreate a new Context-Aware Access device policy.

Check whether device policy application is installed on users’ devices.

Confirm that the user has at least a Google Workspace Business license.

Check whether Endpoint Verification is installed on users’ desktops.

QUESTION 29
All Human Resources employees at your company are members of the “HR Department” Team Drive. The HR Director wants to enact a new policy to restrict access to the “Employee Compensation” subfolder stored on that Team Drive to a small subset of the team.
What should you do?

Use the Drive API to modify the permissions of the Employee Compensation subfolder.

Use the Drive API to modify the permissions of the individual files contained within the subfolder.

Move the contents of the subfolder to a new Team Drive with only the relevant team members.

Move the subfolder to the HR Director’s MyDrive and share it with the relevant team members.

QUESTION 30
You have configured Secure Transport (TLS) Compliance for all messages coming to and from an external domain. altostrat.com. that your end users communicate with via Gmail. What will your end users experience when messages are delivered to them from altostrat.com without TLS enabled?

The message will be delivered to their spam folder.

The message will not be delivered to the end user in any form.

The user will receive a failure message informing them that the message could not be delivered to their inbox and that they will need to work with their Workspace administrator to resolve the issue.

A warning banner will appear on the message informing the user that the message was not sent securely.

QUESTION 31
The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in. What else can you do to increase your organization’s defense-in-depth strategy?

Implement an IP block on the malicious user’s IPs under Security Settings in the Admin Console.

Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.

Enforce higher complexity passwords by rolling it out to the affected users.

Use Mobile device management geo-fencing to prevent malicious actors from using these stolen credentials.

QUESTION 32
Your-company.com recently started using Google Workspace. The CIO is happy with the deployment, but received notifications that some employees have issues with consumer Google accounts (conflict accounts).
You want to put a plan in place to address this concern.
What should you do?

Use the conflict account remove tool to remove the accounts from Google Workspace.

Rename the accounts to [email protected], and recreate the accounts.

Ask users to request a new Google Workspace account from your local admin.

Use the Transfer tool for unmanaged users to find the conflict accounts.

QUESTION 33
An end user informs you that they are having issues receiving mail from a specific sender that is external to your organization. You believe the issue may be caused by the external entity’s SPF record being incorrectly configured. Which troubleshooting step allows you to examine the full message headers for the offending message to determine why the messages are not being delivered?

Use the Postmaster Tools API to pull the message headers.

Use the Email Log Search to directly review the message headers.

Use the Security Investigation Tool to review the message headers.

Perform an SPF record check on the domain to determine whether their SPF record is valid.

QUESTION 34
You work at a large global holding firm with multiple companies that are united under one Google Workspace deployment. You must ensure that employees can only access documents at the company in which they are employed What should you do?

Create a User group for each company and change Google Drive sharing settings to block external sharing

Create an organizational unit (OU) for each company and disable file sharing.

Set up data loss prevention (DLP) rules to prevent specific documents from being shared

Set up Google Drive trust rules to prevent access to documents from individual companies

QUESTION 35
You recently started an engagement with an organization that is also using Google Workspace. The engagement will involve highly sensitive data, and the data needs to be protected from being shared with unauthorized parties both internally and externally. You need to ensure that this data is properly secured.
Which configuration should you implement?

Turn on external sharing with whitelisted domains, and add the external organization to the whitelist.

Provision accounts within your domain for the external users, and turn off external sharing for that Org.

Configure the Drive DLP rules to prevent the sharing of PII and PHI outside of your domain.

Create a Team Drive for this engagement, and limit the memberships and sharing settings.

QUESTION 36
The CEO of your company heard about new security and collaboration features and wants to know how to stay up to date. You are responsible for testing and staying up to date with new features, and have been asked to prepare a presentation for management.
What should you do?

Download the Google Workspace roadmap, and work together with a deployment specialist for new features.

Create a support ticket for the Google Workspace roadmap, and ask to enable the latest release of Google Workspace.

Subscribe to the Google Workspace release calendar, and Join the Google Cloud Connect Community.

Change Google Workspace release track to: Rapid Release for faster access to new features.

QUESTION 37
Your Accounts Payable department is auditing software license contracts companywide and has asked you to provide a report that shows the number of active and suspended users by organization unit, which has been set up to match the Regions and Departments within your company. You need to produce a Google Sheet that shows a count of all active user accounts and suspended user accounts by Org unit.
What should you do?

From the Admin Console Billing Menu, turn off auto-assign, and then click into Assigned Users and export the data to Sheets.

From the Admin Console Users Menu, download a list of all Users to Google Sheets, and join that with a list of ORGIDs pulled from the Reports API.

From the Google Workspace Reports Menu, run and download the Accounts Aggregate report, and export the data to Google Sheets.

From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.

QUESTION 38
What steps does an administrator need to take to enforce TLS with a particular domain?

Enable email safety features with the receiving domain.

Set up secure transport compliance with the receiving domain.

Configure an alternate secure route with the receiving domain.

Set up DKIM authentication with the receiving domain.

QUESTION 39
An employee at your organization is experiencing video call issues in Google Meet and they were unable to resolve the issues by themselves You need to troubleshoot the issue What should you do first?

View the Meet quality report of the employee

Ask your network administrator to add the dedicated Meet IP address range for your users

Restart the device of the employee

Check the Meet settings of the employee

QUESTION 40
As a team manager, you need to create a vacation calendar that your team members can use to share their time off. You want to use the calendar to visualize online status for team members, especially if multiple individuals are on vacation What should you do to create this calendar?

Request the creation of a calendar resource, configure the calendar to “Auto-accept invitations that do not conflict,” and give your team “See all event details” access.

Create a secondary calendar under your account, and give your team “Make changes to events” access.

Request the creation of a calendar resource, configure the calendar to “Automatically add all invitations to this calendar,” and give your team “See only free/busy” access.

Create a secondary calendar under your account, and give your team “See only free/busy” access

QUESTION 41
Your organization’s information security team has asked you to determine and remediate if a user ([email protected]) has shared any sensitive documents outside of your organization. How would you audit access to documents that the user shared inappropriately?

Open Security Investigation Tool-> Drive Log Events. Add two conditions: Visibility Is External, and Actor Is [email protected].

Have the super administrator use the Security API to audit Drive access.

As a super administrator, change the access on externally shared Drive files manually under [email protected].

Open Security Dashboard-> File Exposure Report-> Export to Sheet, and filter for [email protected].

QUESTION 42
Your company has an OU that contains your sales team and an OU that contains your market research team. The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties. The market research team also receives that email content, but they want it because it often contains interesting market analysis or competitive intelligence. Constant Contact is often used as the source of these messages. Your company also uses Constant Contact for your own mass email marketing. You need to set email controls at the Sales OU without affecting your own outgoing email or the market research OU.
What should you do?

Create a blocked senders list as the Sales OU that contains the mass email sender addresses, but bypass this setting for Constant Contact emails.

Create a blocked senders list at the root level, and then an approved senders list at the Market Research OU, both containing the mass email sender addresses.

Create a blocked senders list at the Sales OU that contains the mass email sender addresses.

Create an approved senders list at the Market Research OU that contains the mass email sender addresses.

QUESTION 43
Your company has just received a shipment of ten Chromebooks to be deployed across the company, four of which will be used by remote employees. In order to prepare them for use, you need to register them in Google Workspace.
What should you do?

Turn on the Chromebook and press Ctrl+Alt+E at the login screen to begin enterprise enrollment.

In Chrome Management | Device Settings, enable Forced Re-enrollment for all devices.

Turn on the chromebook and log in as a Chrome Device admin. Press Ctrl+Alt+E to begin enterprise enrollment.

Instruct the employees to log in to the Chromebook. Upon login, the auto enrollment process will begin.

QUESTION 44
The security team for your organization is concerned about phishlng attacks against your end user base. What two actions should you take to configure the strongest possible preventative measure against phishing attacks?
Choose 2 answers

Configure spoofing and authentication controls to quarantine messages that are perceived as threats

Train end users to mark messages as spam when they see something suspicious.

Configure spoofing and authentication controls to warn end users about messages that are perceived as threats.

Enforce confidents mode for all messages sent and received from your Workspace domain

Force encryption on all inbound and outbound emails from your Workspace domain.

QUESTION 45
Your organization has a data loss prevention (DLP) rule to detect and warn users about external sharing of sensitive files in Google Drive You also want to prevent external users from downloading files with viewer permissions to their local machines What should you do?

Do nothing. View-only Drive files automatically prevent the user from downloading the files

Modify the existing DLP rule to Disable download, print, and copy for commenters and viewers

Create a new DLP rule by using the existing content detector conditions but change the action for the new rule to Disable download. print, and copy for commenters and viewers

Create a new DLP rule and set the scope to the organizational unit or group that you want to restrict

QUESTION 46
You received this email from the head of marketing:
Hello Workspace Admin:
Next week, a new consultant will be starting on the “massive marketing mailing” project. We want to ensure that they can view contact details of the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that you can help with?
What are two of the steps you need to perform to fulfill this request?
Choose 2 answers

Create an isolated OU for the consultants who need the restricted contacts access.

Create a group that includes the contacts that the consultant is allowed to view.

Apply the role of owner to the consultant in the group settings.

Create the consultant inside under the marketing OU.

Ensure that you are assigned the Administrator Privilege of Services > Services settings, and ensure that Services > Contacts > Contacts Settings Message is set.