PGWA practice questions 121–130

1. Question 121 · 151 in bank

   Your company is using Google Workspace Enterprise Standard. They have 200 meeting rooms defined for the main building and used daily by the 12,000 employees. Users are complaining they have difficulties finding a room available when searching within Google Calendar, even if several rooms are available (no one attending meetings in these rooms at that time). You have been asked to find a solution while minimizing the operational effort and avoiding any new expenses due to budget constraints. What should you do?

   • AImplement a third-party solution that will detect presence in the room and release it if nobody appears after a few minutes.
   • BCreate a Google App Script that will inspect each room calendar for the next 12 hours, check attendees status, and send the room administrator an alert email for releasing the room if all attendees have declined but the room has not.
   • CSet the option "Allow calendar-based room release" for all targeted rooms.
   • DUpgrade to Google Workspace Enterprise Plus edition to benefit from additional features for automated machine learning (ML) based resources management.

   Show answer

   Answer: C

   Explanation

   C. Set the option "Allow calendar-based room release" for all targeted rooms. The correct option in this scenario is C. By enabling the "Allow calendar-based room release" option for the meeting rooms in Google Calendar, rooms that are reserved but not actually used (all attendees decline) can be automatically released for others to book. This can help optimize the utilization of meeting rooms without the need for additional third-party solutions, scripting, or upgrades. Enabling this option ensures that rooms are automatically released when they are booked but not attended, improving the availability of meeting rooms for employees. This feature is designed to streamline the process and minimize operational effort.

   Source: Adapted from community discussion — rune92

   References

   • support.google.com documentation

   Next question

2. Question 122 · 151 in bank

   Your company has just acquired a new group of users. They have been provisioned into the Google Workspace environment with your primary domain as their primary email address. These new users still need to receive emails from their previous domain. What is the best way to achieve this for these new users, without updating the information of preexisting users?

   • AAdd the acquired domain as an alias to the primary Google Workspace domain.
   • BAdd the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.
   • CUpdate the Google-provided test domain to be the domain of the acquired company, and then update the email information of all new users with alias emails.
   • DWithout adding a domain, update each user's email information with the previous domain.

   Show answer

   Answer: B

   Explanation

   Secondary domain: - if you plan to replace your primary domain with this new domain. - if you want to add a new domain for a separate team or business unit. User alias domain: - if you want to add email aliases (alternate email addresses) for your existing users. Add a user alias domain or secondary domain -> https://support.google.com/a/answer/7502379?hl=en

   Source: Adapted from community discussion — Nico282

   References

   • support.google.com documentation

   Next question

3. Question 123 · 151 in bank

   The application development team requests that a new, internal, domain-owned Google Workspace app be allowed to access Google Drive APIs. You are currently restricting access to all APIs using an approved allowlist, per security policy. You need to grant access for this app. What should you do?

   • AEnable all API access for Google Drive.
   • BEnable the "trust domain owned apps" setting.
   • CAdd OAuth Client ID to the Google Drive Trusted List.
   • DAllowlist the app in the Google Workspace Marketplace.

   Show answer

   Answer: C

   Explanation

   C. Add OAuth Client ID to the Google Drive Trusted List. To grant access for the new, internal, domain-owned Google Workspace app to access Google Drive APIs while maintaining the security policy, you should add the OAuth Client ID of the app to the Google Drive Trusted List. This approach allows you to specifically authorize the identified app without enabling access to all APIs or making broad changes to the security configuration. Option C provides a targeted and controlled solution to enable access for the specific app that needs to interact with Google Drive APIs.

   Source: Adapted from community discussion — rune92

   Next question

4. Question 124 · 151 in bank

   An administrator accidentally deleted several Workspace user accounts from the Google Admin Console two weeks ago. How can you recover the deleted user accounts?

   • AOpen a Google support ticket, and request a recovery of all recently deleted users.
   • BSign in to the Ad min console as Help Desk Admin, open user management, filter for "recently deleted," and recover.
   • CSign in to the Admin console as Super Admin, open user management, filter for "recently deleted," and recover.
   • DCreate a matter, go to legal hold, and create a legal hold for the user accounts.

   Show answer

   Answer: C

   Explanation

   You can restore a user account (including administrator accounts) up to 20 days after deleting it. After 20 days, the data is gone and you can’t restore it. If the user was previously suspended or had their data transferred, they'll show as a suspended user. To give them access to their data, go to Restore a suspended user. Note: Learn how to delete a user from your organization.

   Source: Adapted from community discussion — a163c5d

   References

   • support.google.com documentation

   Next question

5. Question 125 · 151 in bank

   You need to protect your users from untrusted senders sending encrypted attachments via email. You must ensure that these messages are not delivered to users' mailboxes. What step should be taken?

   • AUse the security center to remove the messages from users' mailboxes.
   • BUse Google Vault to remove these messages from users' mailboxes.
   • CEnable a safety rule to send these types of messages to spam.
   • DEnable a safety rule to send these types of messages to a quarantine.

   Show answer

   Answer: D

   Next question

6. Question 126 · 151 in bank

   Your organization uses a third-party product to filter mail before it arrives at your Workspace Domain. How should you configure Gmail to ensure that inbound messages are not seen as a spam attack due to the volume of mail being received from this product?

   • AAdd the product's IP addresses as an approved sender.
   • BAllowlist the IP addresses of the third-party filtering product.
   • CAdd the product's IP addresses to your organization's SPF record.
   • DList the IP addresses of the product as an Inbound Gateway.

   Show answer

   Answer: D

   References

   • support.google.com documentation

   Next question

7. Question 127 · 151 in bank

   Select 2

   Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices? (Choose two.)

   • ACreate a company-owned device inventory using an asset tag.
   • BDevices > Endpoints > Add a filter > Management Type > Drive for desktop > Apply
   • CApps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop > Only Allow Google Drive for desktop on authorized devices
   • DInstall the Google Endpoint Verification extension on machines using Drive for Desktop.
   • ECreate a company-owned device inventory using serial numbers of devices.

   Show answer

   Answer: CE

   Explanation

   Just as a detail the route for this configuration in console, recently changed (but doesnt affect that this is the correct answer)

   Source: Adapted from community discussion — danaracena

   References

   • support.google.com documentation
   • Google Cloud documentation

   Next question

8. Question 128 · 151 in bank

   The human resources (HR) team needs a centralized place to share key documents with the entire organization while protecting confidential documents and mitigating the risk of losing documents when someone leaves. These documents must be editable by the HR team members. What is the best way to set this up?

   • AHave the HR lead create a folder in their MyDrive for the non-confidential files, give edit access to the HR team, and give view access to the organization.
   • BCreate a shared drive for the non-confidential files, give the HR team manager access, and give contributor access to the entire organization.
   • CCreate a shared drive for non-confidential files, give the HR team content manager access, and give view access to the organization.
   • DCreate a shared drive for all files, give the HR team content manager access, and give view access to the organization.

   Show answer

   Answer: C

   Next question

9. Question 129 · 151 in bank

   Your organization implemented Single Sign-On (SSO) for the multiple cloud-based services it uses. During authentication, one service indicates that access to the SSO provider is not possible due to invalid information. What should you do?

   • AUpdate the validation certificate.
   • BVerify that the Audience element in the SAML Response matches the assertion consumer service (ACS) URL.
   • CRun nslookup to confirm that the service exists.
   • DEnsure that Microsoft's Active Directory Federation Services 2.0 sends encrypted SAML Responses in default configurations.

   Show answer

   Answer: B

   References

   • support.google.com documentation

   Next question

10. Question 130 · 151 in bank

    As a Google Workspace administrator for your organization, you are tasked with controlling which third-party apps can access Google Workspace data. Before implementing controls, as a first step in this process, you want to review all the third-party apps that have been authorized to access Workspace data. What should you do?

    • AOpen Admin Console > Security > API Controls > App Access Control > Manage Third Party App Access.
    • BOpen Admin Console > Security > API Controls > App Access Control > Manage Google Services.
    • COpen Admin Console > Security > Less Secure Apps.
    • DOpen Admin Console > Security > API Controls > App Access Control > Settings.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PGWA practice, question 121. 151 questions available.