Free Associate Google Workspace Administrator Exam Associate-Google-Workspace-Administrator Exam Practice Test

Your company wants to enable single sign-on (SSO) for its employees to access a newly acquired cloud-based marketing platform. The marketing platform vendor has confirmed SAML 2.0 compatibility and provided the necessary metadata. You need to streamline user access and centralize authentication through Google Workspace. What should you do?

• Request an API key from the marketing platform vendor for SAML integration.
• Enable two-factor authentication for all users to enhance security before implementing SSO.
• Instruct employees to log in to the marketing platform using the Sign In with Google functionality.
• Create a new SAML application in the Google Admin console.

Your organization has hired temporary employees to work on a sensitive internal project. You need to ensure that the sensitive project data in Google Drive is limited to only internal domain sharing. You do not want to be overly restrictive. What should you do?

• Configure the Drive sharing options for the domain to internal only.
• Restrict the Drive sharing options for the domain to allowlisted domains.
• Create a Drive DLP rule, and use the sensitive internal Project name as the detector.
• Turn off the Drive sharing setting from the Team dashboard.

A new user at your organization is unable to access Google Meet. You have verified that the user’s account is active and the correct licenses are assigned. You need to resolve the access issue. What should you do?

• Check the user’s browser settings to ensure that Meet is not blocked.
• Instruct the user to clear their browser’s cache and cookies.
• Restart the user’s computer to refresh their network connection.
• Verify that Meet is enabled as a service for the user’s account in the Admin console.

You are designing a group structure for your company that will be used to grant access to a specific shared drive. You need this solution to automatically add and remove employees based on their job role. What should you do?

• Create a security group. Add all employees with the desired job role. Grant the security group access to the shared drive.
• Create a distribution list. Add all employees with the desired job role. Grant the distribution list access to the shared drive.
• Create a dynamic group. Set the membership criteria to the desired job role. Grant the dynamic group access to the shared drive.
• Create a configuration group. Add users on an exception basis. Grant the configuration group access to the shared drive.

An employee at your organization may be sharing confidential documents with unauthorized external parties. You must quickly determine if any sensitive information has been leaked. What should you do?

• Review the employee's Drive log events in the security investigation tool.
• Audit Drive access by using the Admin SDK Reports API.
• Review the employee's user log events within the security investigation tool.
• Create a custom report of the user's external sharing by using the security dashboard.

You are applying device and user policies for employees in your organization who are in different departments. You need each department to have a different set of policies. You want to follow Google-recommended practices. What should you do?

• Create separate top-level organizational units for each department.
• Create an Access group for each department. Configure the applicable policies.
• Add all managed users and devices in the top-level organizational unit.
• Create a child organizational unit for each department.

Your company has a globally distributed remote work team. You want to ensure all team members adhere to the company's data security policies and only access authorized systems based on their location and role. What should you do?

• Create and enforce data loss prevention (DLP) rules to control data sharing.
• Set up and mandate the use of a company-wide VPN for all remote access.
• Implement two-factor authentication for all remote team members.
• Configure access control policies with conditional access.

Your organization requires enhanced privacy and security when sending messages to banks and other financial institutions. Your organization uses Gmail, but the banks use various other email providers. You need to maximize privacy and limit access to messages sent and received between your organization and the banks. What should you do?

• Set up Transport Layer Security (TLS) compliance for inbound and outbound messages with a list of the banks’ email domains. Validate the TLS connections.
• Configure Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) authentication for your email domains.
• Enable Protect against unauthenticated emails in Gmail Safety.
• Enable confidential mode for Gmail. Instruct employees to use confidential mode when sending messages to the banks.

You are migrating your organization’s email to Google Workspace. Your organization uses the terramearth.com email domain. You need to configure Google Workspace to receive emails sent to terramearth.com. What should you do?

• Add terramearth.com as a primary, secondary, or alias domain in Google Workspace. Update the Mail Exchange (MX) records with your domain registrar to direct mail flow to Google’s mail servers.
• Establish a Transport Layer Security (TLS) connection between your company’s existing mail servers and Google’s mail servers
• Configure an email address in Google Workspace to capture emails sent to unverified domains, including terramearth.com.
• Create a domain alias for terramearth.com in Google Workspace. Configure email forwarding to redirect emails to the new Google Workspace accounts.

Your organization recently deployed Google Workspace. Over 3,000 external contacts were shared in public folders in Microsoft Exchange before the implementation. You need to ensure that these external contacts appear to domain users in Gmail. What should you do?

• Export the external contacts to a CSV file, upload the file to Google Drive, and instruct users to import to their My Contacts.
• Use Google Cloud Directory Sync to sync the external contacts from the public folders in Microsoft Exchange to the Directory.
• Use the Domain Shared Contacts API to add the external contacts to the Directory.
• Create a user account, add the external contacts, and delegate them to all users in the domain.