Free Professional Google Workspace Administrator Exam Google-Workspace-Administrator Exam Practice Test

Your company has a broad, granular IT administration team, and you are in charge of ensuring proper administrative control. One of those teams, the security team, requires access to the Security Investigation Tool. What should you do?

• Assign the pre-built security admin role to the security team members.
• Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.
• Assign the Super Admin Role to the security team members.
• Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.

Your organization is concerned with the increasing threat of phishing attacks that may impact users.Leadership has declined to force-enable 2-Step verification. You need to apply a security measure to prevent unauthorized access to user accounts.What should you do?

• Enable Enforce Strong Password policy.
• Enable Employee ID Login Challenge.
• Decrease the Maximum User Session Length.
• Revoke token authorizations to external applications.

Your company has numerous locations throughout the world. Each of these locations has multiple office managers that field questions from employees through an email alias. Some questions have not been answered by an office manager How can you create a system to assign conversations to different receptionists using Workspace?

• Create a Google Groups Collaborative Inbox.
• Use App Script to design a ticketing system that marks conversation ownership.
• Contract with a third-party solution, such as ServiceNow.
• Create Google Tasks and assign them to receptionists to address unanswered questions.

Your company frequently hires from five to ten interns for short contract engagements and makes use of thesame generically named Google Workspace accounts (e.g., user1@your-company.com, user2@your-company.com, user3@your-company.com). The manager of this program wants all email to these accounts routed to the manager's mailbox account also.What should you do?

• Setup address forwarding in each account's GMail setting menu.
• Set up recipient address mapping in GMail Advanced Settings.
• Configure an Inbound Gateway route.
• Give the manager delegated access to the mailboxes.

Your organization is about to expand by acquiring two companies, both of which are using Google Workspace. The CISO has mandated that strict 'No external content sharing' policies must be in place and followed. How should you securely configure sharing policies to satisfy both the CISO's mandate while allowing external sharing with the newly acquired companies?

• Allow external sharing of Drive content for the IT group only.
• Create a Drive DLP policy that will allow sharing to only domains on an allowlist.
• Use shared drives to store the content, and share only individual files externally.
• Let users share files between the two companies by using the 'Trusted Domains' feature. Create an allowlist of the trusted domains, and choose sharing settings for the users.

HR informs you that a user has been terminated and their account has been suspended. The user is part of a current legal investigation, and HR requires the user's email data to remain on hold. The terminated user's team is actively working on a critical project with files owned by the user. You need to ensure that the terminated user's content is appropriately kept before provisioning their license to a new user.What two actions should you take? (Choose two.)

• Extend the legal hold on the user's email data.
• Move project files to a Team Drive or transfer ownership.
• Rename the account to the new user starting next week.
• Delete the account, freeing up a Google Workspace License.
• Assign the terminated user account an Archive User license.

You are in charge of automating and configuring Google Cloud Directory Sync for your organization. Within the config manager, how can you proactively prevent applying widespread deletions within your Workspace environment if your company's LDAP undergoes a substantial modification?

• Manually run Google Cloud Directory Sync only after performing a simulated sync.
• Specify the minimum and maximum number of objects to synchronize in each configuration item.
• Configure the tool to delete users only when run from the config manager.
• Configure limits for the maximum number of deletions on each synchronization.

Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.What two things should you do? (Choose two.)

• Disable Guest Mode and Public Sessions.
• Enable a Device Policy of Sign In Screen and add the employee email address.
• Enroll a 2-Factor hardware key on the device using the employee email address.
• Enable a User Policy of Multiple Sign In Access and add just the employee email address.
• Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.

Several customers have reported receiving fake collection notices from your company. The emails were received from accounts.receivable@yourcompany.com, which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.What two actions should you take? (Choose two.)

• Change the password for suspected compromised account accounts.receivable@yourcompany.com.
• Configure a Sender Policy Framework (SPF) record for your domain.
• Configure Domain Keys Identified Mail (DKIM) to authenticate email.
• Disable mail delegation for the accounts.receivable@yourcompany.com account.
• Disable ''Allow users to automatically forward incoming email to another address.''

Your organization has decided to enforce 2-Step Verification for a subset of users. Some of these users are now locked out of their accounts because they did not set up 2-Step Verification by the enforcement date. What corrective action should you take to allow the users to sign in again?

• Disable 2-Step Verification per organizational unit so the affected users can sign in.
• Move the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.
• Disable 2-Step Verification organization-wide so all users can successfully sign in.
• Move the affected users into the exception group permanently so they do not have to use 2-Step Verification going forward.