Google Associate Google Workspace Administrator practice questions

1. Question 1 of 25

   Your company is undergoing a regulatory compliance audit. As part of the audit, you are required to demonstrate that you can preserve all electronic communications related to a specific project for a potential legal discovery process. You need to configure Google Vault to accomplish this goal. What should you do?

   • AUse the security investigation report to show Vault log events.
   • BUse the search and export functionality to identify all relevant communications within the project timeframe.
   • CCreate a matter and a hold on all project-related data sources such as Email, Chat, and Drive within Google Workspace.
   • DCreate a custom retention policy for the project data. Ensure that the policy covers the required retention period.

   Show answer

   Correct answer: C

   How others answered

   • C83%
   • A17%

2. Question 2 of 25

   Several employees from your finance department are collaborating on a long-term, multi-phase project. You need to create a confidential group for this project as quickly as possible. You also want to minimize management overhead. What should you do?

   • ACreate a Google Group by using Google Cloud Directory Sync (GCDS) to automatically sync the members.
   • BCreate a dynamic group and define the Department user attribute as a condition for membership with the value as the finance department.
   • CCreate a Google Group and update the settings to allow anyone in the organization to join the group.
   • DCreate a Google Group and appoint a group admin to manage the membership of this group.

   Show answer

   Correct answer: D

   How others answered

   • D90%
   • B10%

3. Question 3 of 25

   Today your company signed up for Google Workspace Business Starter with an existing domain name. You want to add team members and manage their access to email and other services. However, you are unable to create new user accounts or change user settings. You need to fix this problem. What should you do?

   • ARun the Transfer tool to bring unmanaged users to your Workspace account.
   • BCheck domain ownership in the DNS settings.
   • CWait 24 hours after signing up for the features to become active.
   • DUpgrade to a Google Workspace Enterprise edition.

   Show answer

   Correct answer: B

   How others answered

   • B100%

4. Question 4 of 25

   A team of temporary employees left your organization after completing a shared project. Per company policy, you need to disable their Google Workspace accounts while preserving all project data and related communications in Google Vault for a minimum of two years. You want to comply with this policy while minimizing cost. What should you do?

   • APurchase and assign Archived User licenses to the former employees.
   • BTransfer the former employees’ files and data to active user accounts. Delete the former employees’ Workspace accounts.
   • CPurchase additional user licenses and suspend the former employees’ accounts.
   • DMove the former employees to their own organizational unit (OU) and disable access to Google services for that OU.

   Show answer

   Correct answer: A

   How others answered

   • A100%

5. Question 5 of 25

   The legal department at your organization is working on a time-critical merger and acquisition (M&A) deal. They urgently require access to specific email communications from an employee who is currently on leave. The organization’s current retention policy is set to indefinite. You need to retrieve the required emails for the legal department in a manner that ensures data privacy. What should you do?

   • AInstruct the IT department to directly access and forward the relevant emails to the legal department.
   • BTemporarily grant the legal department access to the employee’s email account with a restricted scope that is limited to the M&A-related emails.
   • CAsk a colleague with delegate access to the employee's mailbox to identify and forward the relevant emails to the legal department.
   • DUse Google Vault to create a matter specific to the M&A deal. Search for relevant emails within the employee's mailbox. Export and share relevant emails with your legal department.

   Show answer

   Correct answer: D

   How others answered

   • D100%

6. Question 6 of 25

   Your company distributes an internal newsletter that contains sensitive information to all employees by email. You’ve noticed unauthorized forwarding of this newsletter to external addresses, potentially leading to data leaks. To prevent this, you need to implement a solution that automatically detects and blocks such forwarding while allowing legitimate internal sharing. What should you do?

   • AAdd a banner to the newsletter that warns users that external sharing is prohibited.
   • BCreate a Gmail content compliance rule that targets the internal newsletter, identifying instances of external forwarding. Configure the rule to reject the message when such forwarding is detected
   • CDevelop an Apps Script project by using the Gmail API to scan sent emails for the newsletter content and external recipients. Automatically revoke access for violating users.
   • DCreate a content compliance rule to modify the newsletter subject line, adding a warning against external forwarding.

   Show answer

   Correct answer: B

   How others answered

   • B100%

7. Question 7 of 25

   Your organization has hired temporary employees to work on a sensitive internal project. You need to ensure that the sensitive project data in Google Drive is limited to only internal domain sharing. You do not want to be overly restrictive. What should you do?

   • AConfigure the Drive sharing options for the domain to internal only.
   • BRestrict the Drive sharing options for the domain to allowlisted domains.
   • CCreate a Drive DLP rule, and use the sensitive internal Project name as the detector.
   • DTurn off the Drive sharing setting from the Team dashboard.

   Show answer

   Correct answer: C

   How others answered

   • C58%
   • A42%

   Only 58% agreed on this answer — treat it as contested rather than settled.

8. Question 8 of 25

   Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company’s human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?

   • ASearch the sender’s email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.
   • BSearch for the sender’s email address by using the security investigation tool. Mark the messages as phishing. Add the sender’s email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
   • CCollect a list of users who received the messages. Search the recipients’ email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender’s email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.
   • DSearch for the sender’s email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.

   Show answer

   Correct answer: D

   How others answered

   • D80%
   • B20%

9. Question 9 of 25

   Your organization’s users are reporting that a large volume of legitimate emails are being misidentified as spam in Gmail. You want to troubleshoot this problem while following Google-recommended practices. What should you do?

   • AAdjust the organization’s mail content compliance settings in the Admin console.
   • BAdvise users to individually allowlist senders.
   • CDisable spam filtering for all users.
   • DContact Google Workspace support and report a suspected system-wide spam filter malfunction.

   Show answer

   Correct answer: A

   How others answered

   • A75%
   • B25%

10. Question 10 of 25

    Your organization’s security team has published a list of vetted third-party apps and extensions that can be used by employees. All other apps are prohibited unless a business case is presented and approved. The Chrome Web Store policy applied at the top-level organization allows all apps and extensions with an admin blocklist. You need to disable any unapproved apps that have already been installed and prevent employees from installing unapproved apps. What should you do?

    • AChange the Chrome Web Store allow/block mode setting to allow all apps, admin manages blocklist, In the App access control card, block any existing web app that is not on the security team’s vetted list.
    • BChange the Chrome Web Store allow/block mode setting to block all apps, admin manages allowlist. Add the apps on the security team’s vetted list to the allowlist.
    • CDisable Extensions and Chrome packaged apps as Allowed types of apps and extensions for the top-level organizational unit. Selectively enable the appropriate extension types for each suborganization
    • DDisable the Chrome Web Store service for the top-level organizational unit. Enable the Chrome Web Store service for organizations that require Chrome apps and extensions.

    Show answer

    Correct answer: B

    How others answered

    • B100%

11. Question 11 of 25

    Your company handles sensitive client data and needs to maintain a high level of security to comply with strict industry regulations. You need to allow your company’s security team to investigate potential security breaches by using the security investigation tool in the Google Admin console. What should you do?

    • ACreate an activity rule that triggers email notifications to the security team whenever a high-risk security event occurs.
    • BAssign the User Management Admin role to the security team.
    • CAssign the super admin role to the security team
    • DCreate an administrator role with Security Center access. Assign the role to the security team.

    Show answer

    Correct answer: D

    How others answered

    • D100%

12. Question 12 of 25

    Your organization requires enhanced privacy and security when sending messages to banks and other financial institutions. Your organization uses Gmail, but the banks use various other email providers. You need to maximize privacy and limit access to messages sent and received between your organization and the banks. What should you do?

    • ASet up Transport Layer Security (TLS) compliance for inbound and outbound messages with a list of the banks’ email domains. Validate the TLS connections.
    • BConfigure Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) authentication for your email domains.
    • CEnable Protect against unauthenticated emails in Gmail Safety.
    • DEnable confidential mode for Gmail. Instruct employees to use confidential mode when sending messages to the banks.

    Show answer

    Correct answer: A

    How others answered

    • A60%
    • D40%

    Only 60% agreed on this answer — treat it as contested rather than settled.

13. Question 13 of 25

    An end user has thousands of files stored in Google Drive. Their files are well organized with Drive labels. You need to advise the end user on how to quickly identify all files that are contracts. What should you do?

    • AAdvise the user to use the Google Drive API to search for files with the keyword “contracts”
    • BAdvise the user to search in Drive for files with the keyword “contracts”, and use the “modified by me” filter.
    • CAdvise the user to search for files that are labeled as “contracts”.
    • DAdvise the user to use the Investigation tool to search for files with the keyword “contracts” and updated by you.

    Show answer

    Correct answer: C

    How others answered

    • C100%

14. Question 14 of 25

    You’ve received multiple reports about a suspicious email from someone who is pretending to be from your organization’s human resources department. The email is prompting employees to click a link for a password update. You want to remediate this sender’s emails. What should you do?

    • AUse the security investigation tool to search for users who received the suspicious email, and select Mark message as phishing.
    • BUse the security investigation tool to action the suspicious email and select Mark message as spam.
    • CCreate an activity rule to alert administrators to similar emails from that sender.
    • DNotify all employees and request that they report this email as spam.

    Show answer

    Correct answer: A

    How others answered

    • A100%

15. Question 15 of 25

    Your company’s security team has requested two requirements to secure employees’ mobile devices-enforcement of a passcode and remote account wipe functionality. The security team does not want an agent to be installed on the mobile devices or to purchase additional licenses. Employees have a mix of iOS and Android devices. You need to ensure that these requirements are met. What should you do?

    • AImplement a third-party enterprise mobility management (EMM) provider.
    • BSet up advanced mobile management for iOS devices and basic mobile management for Android devices.
    • CSet up basic management for both iOS and Android devices.
    • DSet up advanced management for both iOS and Android devices.

    Show answer

    Correct answer: C

    How others answered

    • C100%

16. Question 16 of 25

    Your organization needs an approval application for purchases where a user can enter information on the purchase required and then submit it for management approval. You need to suggest a solution to create the application that must be available on both the web and mobile devices. Your organization does not have software developers or the budget to hire a third party. What should you do?

    • ASuggest that the organization develop an application internally with a database, a backend service for data retrieval, and a frontend service for the application’s user interface.
    • BSuggest that the organization continue to approve requests manually until budget is available to use a third-party application provider.
    • CSuggest the organization use AppSheet to create the application.
    • DSuggest that the organization use AppScript to create forms linked to a Google Sheet to store the purchase data.

    Show answer

    Correct answer: C

    How others answered

    • C100%

17. Question 17 of 25

    Your organization's employees frequently collaborate with external clients and vendors by using Google Meet. There are active instances of unsupervised meetings within your organization that do not have a host, and unsupervised meetings that continue after an event has completed. You want to end all meetings that are being used inappropriately as quickly as possible. What should you do?

    • AEnd all unsupervised meetings by using the Google Meet APIs.
    • BEnable Host Management for Google Meet, and train internal host employees how to end meetings for everyone.
    • CTurn off Google Meet in the Admin console for your organization. Turn Google Meet back on after two minutes.
    • DIdentify and end all unsupervised meetings by using the security investigation tool.

    Show answer

    Correct answer: D

    How others answered

    • D100%

18. Question 18 of 25

    Your organization uses live-streaming to host large Google Meet meetings. You need to limit the participation to affiliated Google Workspace domains by using the Admin console. What should you do?

    • AAdd the Trusted Workspace domain names in the Stream dialog box.
    • BTurn off live streaming to Youtube.
    • CAdd participants to an organizational unit (OU). Turn on live streaming.
    • DTurn on in-house live streaming. Invite users from affiliated domains.

    Show answer

    Correct answer: A

    How others answered

    • A100%

19. Question 19 of 25

    You are configuring email for your company’s Google Workspace account. The company wants to prevent certain types of files from being sent or received as email attachments in the simplest and most cost-effective way. What should you do?

    • AAdjust the maximum message size limit to prevent large files from being sent or received.
    • BEnable the Security Sandbox in Gmail to automatically quarantine emails with suspicious attachments.
    • CScan all incoming and outgoing emails for malicious attachments by using an industry standard third-party email security solution.
    • DConfigure an attachment compliance rule in Gmail settings to block specific file types.

    Show answer

    Correct answer: D

    How others answered

    • D100%

20. Question 20 of 25

    Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization’s email address and their email address with the sub-agency domain name. What should you do?

    • ARedirect the acquired domain to Google’s MX records and add the account as a “send as” address.
    • BSet up the acquired agency as a secondary domain from the Manage domains page.
    • CSet up the acquired agency as a user alias domain from the Manage domains page.
    • DSet up the acquired agency as a secondary domain and swap it to the primary domain.

    Show answer

    Correct answer: C

    How others answered

    • C60%
    • B40%

    Only 60% agreed on this answer — treat it as contested rather than settled.

21. Question 21 of 25

    The current data storage limit for the sales organizational unit (OU) at your company is set at 10GB per user. A subset of sales representatives in that OU need 100GB of storage across shared services. You need to increase the storage for only the subset of sales representatives by using the least disruptive approach and the fewest configuration steps. What should you do?

    • AMove the subset of users to a sub-OU, and assign a 100GB storage limit to that sub-OU.
    • BInstruct the subset of users to store their documents in a Shared Drive with a 100GB limit.
    • CChange the storage limit of the sales OU to 100GB.
    • DCreate a configuration group, and add the subset of users to that group. Set the group storage limit to 100GB.

    Show answer

    Correct answer: D

    How others answered

    • D71%
    • A29%

    Only 71% agreed on this answer — treat it as contested rather than settled.

22. Question 22 of 25

    Your company’s help desk is receiving technical support tickets from employees who report that messages from known external contacts are being sent to the spam label in Gmail. You need to correct the issue and ensure delivery of legitimate emails without introducing additional risk as soon as possible. What should you do?

    • AAsk employees to select the messages in Gmail that are being delivered to spam and mark them as Not spam.
    • BContact the external senders, and tell them to authenticate their sent mail by using domain-based message authentication, reporting, and conformance (DMARC).
    • CTurn off more aggressive spam filtering in spam policies that are applied to the users’ organizational unit and add the senders’ mail system IP addresses to the email allowlist.
    • DCreate an address list of approved senders so messages from these users bypass Gmail’s spam filters and recipients can decide whether they are spam or not.

    Show answer

    Correct answer: A

    How others answered

    • D100%

    Most people chose D, not A. Verify this one against the vendor documentation.

23. Question 23 of 25

    A user in your organization received a spam email that they reported for further investigation. You need to find out more details and the scope of this incident as quickly as possible. What should you do?

    • AConduct a Vault search to find this email and identify if additional users were affected.
    • BConduct a search to find all emails sent by the sender by using the Gmail API.
    • CConduct an Email reports search to find this email and all of the email’s recipients.
    • DConduct a search in the security investigation tool to find this email, and identify whether additional users were affected.

    Show answer

    Correct answer: D

    How others answered

    • D100%

24. Question 24 of 25

    You work at a large organization that prohibits employees from using Google Sites. However, a task force comprised of three people from five different departments has recently been formed to work on a project assigned by the Office of the CIO. You need to allow the users in this task force to temporarily use Google Sites. You want to use the least disruptive and most efficient approach. What should you do?

    • ATurn Google Sites access on for each of the 15 users in the task force.
    • BCreate a configuration group for the task force’s 15 users. Grant Google Sites access to the group.
    • CPlace the 15 task force users into a new organizational unit (OU). Turn on Google Sites access for the OU.
    • DCreate an access group for the task force’s 15 users. Grant Google Sites access to the group.

    Show answer

    Correct answer: B

    How others answered

    • D50%
    • B50%

    Most people chose D, not B. Verify this one against the vendor documentation.

25. Question 25 of 25

    You are investigating a potential data breach. You need to see which devices are accessing corporate data and the applications used. What should you do?

    • AAnalyze the audit log in the Admin console for device and application activity.
    • BAnalyze the security investigation tool to access device log data.
    • CAnalyze the Google Workspace reporting section of the Admin console.
    • DAnalyze the User Accounts section in the Google Admin console.

    Show answer

    Correct answer: A

    How others answered

    • B100%

    Most people chose B, not A. Verify this one against the vendor documentation.

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AGWA practice, question 1 of 25