PGWA practice questions 61–70

1. Question 61 · 151 in bank

   Your organization has noticed several incidents of accidental oversharing inside the organization. Specifically, several users have shared sensitive Google Drive items with the entire organization by clicking ‘anyone in this group with this link can view’. You have been asked by senior management to help users share more appropriately and also to prevent accidental oversharing to the entire organization. How would you best accomplish this?

   • ACreate groups, add users accordingly, and educate users on how to share to specific groups of people.
   • BDisable sharing to the entire organization so that users must consciously add every person who needs access.
   • CDetermine sharing boundaries for users that work with sensitive information, and then implement target audiences.
   • DTemporarily disable the Google Drive service for individuals who continually overshare.

   Show answer

   Answer: C

   Explanation

   Whoever is elaborating the questions, is not good lol I will have to say C because is the only option that make sense of the other 3...

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation

   Next question

2. Question 62 · 151 in bank

   Select 2

   You are a Workspace Administrator with a mix of Business Starter and Standard Licenses for your users. A Business Starter User in your domain mentions that they are running out of Drive Storage Quota. Without deleting data from Drive, what two actions can you take to alleviate the quota concerns for this user? (Choose two.)

   • AAdd other users as “Editors” on the Drive object, thus spreading the storage quota debt between all of them.
   • BManually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.
   • CMake another user the “Owner” of the Drive objects, thus transferring the storage quota debt to them.
   • DPerform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.
   • EMove the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.

   Show answer

   Answer: CE

   Explanation

   I agree as well C and E. But there is something wrong about C, it doesn't specify the license of the new owner but is a tipical Google question (they are really bad generating these questions lol).

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation

   Next question

3. Question 63 · 151 in bank

   Your organization is preparing to deploy Workspace and will continue using your company’s existing identity provider for authentication and single sign-on (SSO). In order to migrate data from an external system, you were required to provision each user’s account in advance. Your IT team and select users (~5% of the organization) have been using Workspace for configuration and testing purposes. The remainder of the organization can technically access their accounts now, but the IT team wants to block their access until the migrations are complete. What should your organization do?

   • ARemove Google Workspace license to prevent users from accessing their accounts now.
   • BSuspend users that the organization does not wish to have access.
   • CAdd the users to the OU with all services disabled.
   • DUse Context-Aware Access to simultaneously block access to all services for all users and allow access to all services for the allowed users.

   Show answer

   Answer: D

   Explanation

   I have reviewed this question more and just realized that suspended accounts cannot be migrated, both source and destination needs to be active, on this case the migration is external so the destination GW acc needs to be active... https://support.google.com/workspacemigrate/answer/9991417?hl=en#:~:text=Both%20source%20and%20target%20Google,accounts%20can't%20be%20migrated. So... I could not find anywhere what happens if Gmail is disabled, not sure if the IMAP access will be disabled as well so I assume it will be similar to a suspended account... meaning the correct answer is D?? context aware access?? lol wow I am lost here... if someone can confirm if IMAP access is still available even if Gmail is disabled?

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation
   • support.google.com documentation

   Next question

4. Question 64 · 151 in bank

   Select 2

   Your marketing department needs an easy way for users to share items more appropriately. They want to easily link-share Drive files within the marketing department, without sharing them with your entire company. What should you do to fulfil this request? (Choose two.)

   • ACreate a shared drive that's shared internally organization-wide.
   • BUpdate Drive sharing for the marketing department to restrict to internal.
   • CCreate a shared drive for internal marketing use.
   • DUpdate the link sharing default to the marketing team when creating a document.
   • EIn the admin panel Drive settings, create a target audience that has all of marketing as members.

   Show answer

   Answer: CE

   Explanation

   Sorry, After reviewing the question a second time, I changed my mind, correct answer is CE, for sure has to be C because Shared Drive is Google best Recommended practices for sharing within Groups or teams.. and Target Audience to avoid these users to share documents internally: https://support.google.com/a/answer/10356781?fl=1#zippy=%2Climit-link-sharing-to-only-employees

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation

   Next question

5. Question 65 · 151 in bank

   Your company has acquired a new company in Japan and wants to add all employees of the acquisition to your existing Google Workspace domain. The new company will retain its original domain for email addresses and, due to the very sensitive nature of its work, the new employees should not be visible in the global directory. However, they should be visible within each company's separate directory. What should you do to meet these requirements?

   • ACreate a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.
   • BUnder Directory Settings > Contact sharing, disable the contact sharing option and wait for 24 hours to allow the settings to propagate before creating the new employee accounts.
   • CRedesign your OU organization to have 2 child OUs for each company directly under the root. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the OU.
   • DCreate one dynamic group for each company based on a custom attribute defining the company. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the dynamic group.

   Show answer

   Answer: C

   Explanation

   Separating teams by Organizational Units is the best way to manage different Organizations in huge companies, like for example Google, for sure has different OU structures for YouTube, Google Workspace, Google Cloud, etc, I did work for Google Workspace and I never saw any contact from YouTube but I know YouTube is part of the Google (Google Workspace) account :)

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation

   Next question

6. Question 66 · 151 in bank

   You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?

   • ATrain users to click on Not Spam button for emails.
   • BAdd all users of your domain to an approved sender list.
   • CForce TLS for your domain.
   • DEnsure that your inbound gateway is configured with all of your Exchange server IP addresses.

   Show answer

   Answer: D

   Explanation

   This is very tricky because D is also correct, I have done mgirations from On Premises before and you can switch the MX records poitining to Google, configure the Inbound Gateway to make sure emails are not mark as spam and that's it but also B would work. I will vote for D because I saw the Deployment Videos from Google and as best practice to migrate from On Premises, they do recommend to do it as I mentioned so I assume they are refering this question to that part of the Google guide. Also the question is not clear if the MX records are poiting to Google, I would assume they are so yeah, I would go for D lol

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation
   • support.google.com documentation
   • support.google.com documentation

   Next question

7. Question 67 · 151 in bank

   A user is reporting that after they sign in to Gmail, their labels are not loading and buttons are not responsive. What action should you take to troubleshoot this issue with the user?

   • ACollect full message headers for examination.
   • BCheck whether the issue occurs when the user authenticates on a different device or a new incognito window.
   • CCheck whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
   • DCheck whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.

   Show answer

   Answer: B

   Explanation

   Option B seems correct, all other options make no sense, no need message header for this (A), or troubleshoot the network (C and D), you can leave that at the end in case nothing else works so obviously is the network, nothing to do with the GW service.

   Source: Adapted from community discussion — jaxclain

   Next question

8. Question 68 · 151 in bank

   A retail company has high employee turnover due to the cyclical nature in the consumer space. The increase in leaked confidential content has created the need for a specific administrative role to monitor ongoing employee security investigations. What step should you take to increase the visibility of such investigations?

   • AAssign the ‘Services Admin’ role to an administrator with ‘Super Admin’ privileges.
   • BCreate a ‘Custom Role’ and add all the Google Vault privileges for a new administrator.
   • CValidate that the new administrator has access to Google Vault.
   • DCreate a ‘Custom Role’ and add the ability to manage Google Vault matters, holds, searches, and exports.

   Show answer

   Answer: D

   Explanation

   I would go for D because B is adding all Google Vault privileges include manage retentions and audits, the most important here is audits because this is how the Super Admin will audit what the Vault Admin is doing, still there is not an option to delete Audits but he will be able to see other admins vault audits, as a best practice for Google, I believe assigning the Custom Role with just the enough privileges will be ok, here you can view the Vault Privileges: https://support.google.com/vault/answer/2799699

   Source: Adapted from community discussion — jaxclain

   References

   • support.google.com documentation

   Next question

9. Question 69 · 151 in bank

   A subset of users from the finance and human resources (HR) teams need to share documents with an external vendor. However, external content sharing is prohibited for the entire finance team. What would be the most secure method to enable external sharing for this set of users?

   • ADownload and attach the documents to a Gmail message, and send them to the external vendor.
   • BMove all users from the finance org unit to the HR org unit.
   • CEnable ‘Visitor Sharing’ for the entire finance org unit.
   • DCreate a group with the finance and HR users who need to share externally.

   Show answer

   Answer: D

   Next question

10. Question 70 · 151 in bank

    As the newly hired Admin in charge of Google Workspace, you learn that the organization has been using Google Workspace for months and has configured several security rules for accessing Google Drive. A week after you start your role, users start to complain that they cannot access Google Drive anymore from one satellite office and that they receive an error message that “a company policy is blocking access to this app.” The users have no issue with Gmail or Google Calendar. While investigating, you learn that both this office's Internet Service Provider (ISP) and the global IP address when accessing the internet were changed over the weekend. What is the most logical reason for this issue?

    • AAn access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.
    • BUnder Drive and Docs > Sharing Settings, the “Whitelisted domains” list needs to be updated to add the new ISP domain.
    • CThe Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range.
    • DYou need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access.

    Show answer

    Answer: A

    References

    • support.google.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PGWA practice, question 61. 151 questions available.