Latest Nov 02, 2023 Google-Workspace-Administrator Brain Dump: A Study Guide with Tips & Tricks for passing Exam
Google-Workspace-Administrator Question Bank: Free PDF Download Recently Updated Questions
To become a certified Google Workspace Administrator, you must pass the Google-Workspace-Administrator exam, which consists of multiple choice and scenario-based questions. Google-Workspace-Administrator exam is available online and can be taken from anywhere with an internet connection. Google-Workspace-Administrator exam is timed and must be completed within a specified period. Once you pass the exam, you will receive a certificate that is valid for two years. To maintain your certification, you must pass the exam again before the certificate expires.
NEW QUESTION # 80
The application development team has come to you requesting that a new, internal, domain-owned Google Workspace app be allowed to access Google Drive APIs. You are currently restricting access to all APIs using approved whitelists, per security policy. You need to grant access for this app.
What should you do?
- A. Add OAuth Client ID to Google Drive Trusted List.
- B. Whitelist the app in the Google Workspace Marketplace.
- C. Enable "trust domain owned apps" setting.
- D. Enable all API access for Google Drive.
Answer: A
NEW QUESTION # 81
A retail company has high employee turnover due to the cyclical nature in the consumer space. The increase in leaked confidential content has created the need for a specific administrative role to monitor ongoing employee security investigations. What step should you take to increase the visibility of such investigations?
- A. Create a 'Custom Role' and add all the Google Vault privileges for a new administrator.
- B. Assign the 'Services Admin' role to an administrator with 'Super Admin' privileges.
- C. Create a 'Custom Role' and add the ability to manage Google Vault matters, holds, searches, and exports.
- D. Validate that the new administrator has access to Google Vault.
Answer: C
NEW QUESTION # 82
Your Chief Information Security Officer is concerned about phishing. You implemented 2 Factor Authentication and forced hardware keys as a best practice to prevent such attacks. The CISO is curious as to how many such email phishing attempts you've avoided since putting the 2FA+Hardware Keys in place last month.
Where do you find the information your CISO is interested in seeing?
- A. Apps > Google Workspace > Gmail > Phishing Attempts
- B. Security > Advanced Security Settings > Phishing Attempts
- C. Security > Dashboard > Spam Filter: Phishing
- D. Reporting > Reports > Phishing
Answer: C
Explanation:
https://support.google.com/a/answer/7491892?hl=en
NEW QUESTION # 83
How can you monitor increases in user reported Spam as identified by Google?
- A. Review post-delivery activity in the BigQuery Export.
- B. Review spike in user-reported spam in the Alert center.
- C. Review post-delivery activity in the Email logs.
- D. Review user-reported spam in the Investigation Tool.
Answer: B
Explanation:
https://support.google.com/a/answer/9104586?hl=en
NEW QUESTION # 84
Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)
- A. Provide your current GCDS instance with admin credentials to the recently acquired organization's LDAP directory.
- B. Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.
- C. Upgrade to the multiple LDAP version of GCDS.
- D. Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended.
- E. Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.
Answer: B,D
Explanation:
https://support.google.com/a/answer/7177266?hl=en#zippy=%2Ccan-i-sync-gcds-from-multiple-ldap-directories GCDS can only sync from a single LDAP directory. If you have multiple LDAP directories, it is recommended that you consolidate your LDAP server data into a single directory. You need to run 2 separate GCDS instances while creating exclusion rules to prevent suspensions/deletions.
NEW QUESTION # 85
Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.
What should you do?
- A. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.
- B. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain
- C. Access the Security Menu> API Reference > disable all API Access.
- D. Access the Security Menu > API Permissions > choose Drive and Disable All Access.
Answer: A
NEW QUESTION # 86
HR informs you that a user has been terminated and their account has been suspended. The user is part of a current legal investigation, and HR requires the user's email data to remain on hold. The terminated user's team is actively working on a critical project with files owned by the user. You need to ensure that the terminated user's content is appropriately kept before provisioning their license to a new user.
What two actions should you take? (Choose two.)
- A. Delete the account, freeing up a Google Workspace License.
- B. Move project files to a Team Drive or transfer ownership.
- C. Extend the legal hold on the user's email data.
- D. Assign the terminated user account an Archive User license.
- E. Rename the account to the new user starting next week.
Answer: B,D
Explanation:
https://support.google.com/a/answer/9048836
NEW QUESTION # 87
Your company recently decided to use a cloud-based ticketing system for your customer care needs. You are tasked with rerouting email coming into your customer care address, [email protected] to the cloud platform's email address, [email protected]. As a security measure, you have mail forwarding disabled at the domain level.
What should you do?
- A. Create a content compliance rule in the Google Workspace Admin console to change route to your- [email protected]
- B. Create a recipient map in the Google Workspace Admin console that maps [email protected] to [email protected]
- C. Create a rule to forward mail in the [email protected] mailbox to your- [email protected]
- D. Create a mail contact in the Google Workspace directory that has an email address of your- [email protected]
Answer: B
Explanation:
Disable automatic forwarding https://support.google.com/a/answer/2491924?hl=en Redirect incoming messages to another email address https://support.google.com/a/answer/4524505?hl=en (Optional) To send the message to the original recipient as well as the new address, under Routing options, check the Also route to original destination box.
NEW QUESTION # 88
You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.
What two actions should you take? (Choose two.)
- A. Create a hold on the user's mailbox in Google Vault
- B. Create a matter using Google Vault, and share the matter with the litigation team members.
- C. Copy the user's data to a secondary account.
- D. Move the user to their own Organization Unit, and set a custom retention policy
- E. Reset the user's password, and share the new password with the litigation team.
Answer: A,B
Explanation:
https://support.google.com/vault/answer/2473591
NEW QUESTION # 89
Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password. What steps should you take to troubleshoot this issue?
- A. Reset the user's password in Active Directory.
- B. Reinstall Password Sync on all domain controllers.
- C. Reauthorize the Password Sync tool in the Google Workspace Admin Console.
- D. Confirm that the Password Sync service is running on all domain controllers.
Answer: D
Explanation:
https://support.google.com/a/answer/11237847?hl=en&ref_topic=4498019
The network password is determined to be with AD. In this case, you must verify that password sync is installed on all domain controllers. This is the initial troubleshooting. After this troubleshooting, the logs of these connectors are taken
https://www.youtube.com/watch?v=P-r8bvivZuM
NEW QUESTION # 90
Your company has just acquired a new group of users. They have been provisioned into the Google Workspace environment with your primary domain as their primary email address. These new users still need to receive emails from their previous domain. What is the best way to achieve this for these new users, without updating the information of preexisting users?
- A. Without adding a domain, update each user's email information with the previous domain.
- B. Add the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.
- C. Add the acquired domain as an alias to the primary Google Workspace domain.
- D. Update the Google-provided test domain to be the domain of the acquired company, and then update the email information of all new users with alias emails.
Answer: C
NEW QUESTION # 91
Your organization's Sales Department uses a generic user account ([email protected]) to manage requests. With only one employee responsible for managing the departmental account, you are tasked with providing the department with the most efficient means to allow multiple employees various levels of access and manage requests from a common email address.
What should you do?
- A. Delegate email access to department employees.
- B. Configure a Google Group as a collaborative inbox.
- C. Configure a Google Group, and set the Access Level to Announcement Only.
- D. Configure a Google Group as an email list.
Answer: B
Explanation:
https://support.google.com/a/answer/167430?hl=en
NEW QUESTION # 92
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?
- A. Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.
- B. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
- C. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
- D. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
Answer: C
Explanation:
"Inherited permissions can't be removed from a file or folder in a shared drive". ref: https://developers.google.com/drive/api/v3/manage-sharing
NEW QUESTION # 93
Your organization has just completed migrating users to Workspace. Many employees are concerned about their legacy Microsoft Office documents, including issues of access, editing, and viewing. Which two practices should you use to alleviate user concerns without limiting Workspace collaboration features? (Choose two.)
- A. Demonstrate the ability to convert Office documents to native Google file format from Drive.
- B. Deliver training sessions that show the methods to access and edit native Office files in Drive, the Workspace file editors, and Drive for Desktop.
- C. Continue to use installed Office applications along with Google Drive for Desktop.
- D. Demonstrate and train users to use the Workspace Migrate tool.
- E. Configure Context-Aware Access policies to block access to Microsoft Office applications.
Answer: A,B
NEW QUESTION # 94
Your organization is planning to remove any dependencies on Active Directory (AD) from all Cloud applications they are using You are currently using Google Cloud Directory Sync (GCDS) with on-premises AD as a source to provision user accounts in Google Workspace. Your organization is also using a software-as-a-service (SaaS) human resources information system (HRIS) that offers integration via CSV export and Open API standard.
Additional requirements for the solution include:
* It should not require a subscription to any additional third-party service.
* The process must be automated from beginning to end.
You are tasked with the design and implementation of a solution to address user provisioning with these requirements.
What solution should you implement?
- A. Modify the GCDS configuration to use the HRIS application as the data source and complete any necessary adjustments
- B. Build an application that will fetch updated data from the HRIS system via Open API. and then update Google Workspace with the Directory API accordingly.
- C. Export HRIS data to a CSV file every day. and build a solution to define the delta with the previous day; import the result as a CSV file via the Admin console.
- D. Set up Azure AD and federate on-premises AD with it. Provision user accounts from Azure AD with the Google-recommended process.
Answer: B
NEW QUESTION # 95
Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new "G-Team." A "G-Team' is composed of a Google Group and a Team Drive/ Secondary Calendar that is shared using that Google Group.
What two design decisions are required to implement this workflow securely? (Choose two.)
- A. You will need a Cloud SQL instance to store "G-Team' data.
- B. The Google Form will need to be limited to internal users only.
- C. The Apps Script will need to run as a Google Workspace admin.
- D. The Apps Script will need to run on a timed interval to process new entries.
- E. The Google Form will need to enforce Group naming conventions.
Answer: B,C
NEW QUESTION # 96
The human resources (HR) team needs a centralized place to share key documents with the entire organization while protecting confidential documents and mitigating the risk of losing documents when someone leaves. These documents must be editable by the HR team members. What is the best way to set this up?
- A. Create a shared drive for non-confidential files, give the HR team content manager access, and give view access to the organization.
- B. Create a shared drive for the non-confidential files, give the HR team manager access, and give contributor access to the entire organization.
- C. Create a shared drive for all files, give the HR team content manager access, and give view access to the organization.
- D. Have the HR lead create a folder in their MyDrive for the non-confidential files, give edit access to the HR team, and give view access to the organization.
Answer: A
NEW QUESTION # 97
Your company is using Google Workspace Enterprise Standard. They have 200 meeting rooms defined for the main building and used daily by the 12,000 employees. Users are complaining they have difficulties finding a room available when searching within Google Calendar, even if several rooms are available (no one attending meetings in these rooms at that time). You have been asked to find a solution while minimizing the operational effort and avoiding any new expenses due to budget constraints. What should you do?
- A. Implement a third-party solution that will detect presence in the room and release it if nobody appears after a few minutes.
- B. Upgrade to Google Workspace Enterprise Plus edition to benefit from additional features for automated machine learning (ML) based resources management.
- C. Set the option "Allow calendar-based room release" for all targeted rooms.
- D. Create a Google App Script that will inspect each room calendar for the next 12 hours, check attendees status, and send the room administrator an alert email for releasing the room if all attendees have declined but the room has not.
Answer: C
NEW QUESTION # 98
Your sales team, which is organized as its own organizational unit, is prone to receiving malicious attachments. What action should you take, as an administrator, to apply an additional layer of protection in the admin console for your sales team without disrupting business operation?
- A. Configure an attachment compliance rule to strip any attachments received by users within the sales team organizational unit.
- B. Update the Email Allowlist in the admin console to only include IP addresses of known senders.
- C. Configure an attachment compliance rule to send any emails with attachments received by users within the sales team organizational unit to an administrator quarantine.
- D. Configure the security sandbox feature on the sales team organizational unit.
Answer: D
Explanation:
https://support.google.com/a/answer/7676854?hl=en#:~:text=As%20an%20administrator,malicious%20attachments.
NEW QUESTION # 99
In the years prior to your organization moving to Google Workspace, it was relatively common practice for users to create consumer Google accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners who were on Google Workspace.) You were able to address active employees' use of consumer accounts during the rollout, and you are now concerned about blocking former employees who could potentially still have access to those services even though they don't have access to their corporate email account.
What should you do?
- A. Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed account.
- B. Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google Workspace and Other Google Services disabled.
- C. Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts, so they can clean up the respective access control lists.
- D. Contact Google Enterprise Support to provide a list of all accounts on your domain(s) that access non-Google Workspace Google services and have them blocked.
Answer: A
Explanation:
https://support.google.com/a/answer/6178640?hl=en
NEW QUESTION # 100
......
New Google-Workspace-Administrator Exam Dumps with High Passing Rate: https://www.troytecdumps.com/Google-Workspace-Administrator-troytec-exam-dumps.html
Google-Workspace-Administrator Certification Exam Dumps with 155 Practice Test Questions: https://drive.google.com/open?id=10XarsuCy_9e9HFf4BCDQ22RXQcQjoaaA