Latest Google-Workspace-Administrator exam dumps with real Google questions and answers
Google-Workspace-Administrator Exam in First Attempt Guaranteed
Google Workspace Administrator certification exam is designed to test the capabilities of professionals who manage and administer Google Workspace, formerly known as G Suite. Google-Workspace-Administrator exam is intended for individuals who are responsible for managing and optimizing Google Workspace services for their organization. Google-Workspace-Administrator exam is designed to test the candidate's knowledge of the core principles of Google Workspace, including Gmail, Calendar, Drive, and Docs. Google-Workspace-Administrator exam also covers advanced topics such as security, compliance, and mobile device management.
NEW QUESTION # 34
Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices?
Choose 2 answers
- A. Install the Google Endpoint Verification extension on machines using Drive for Desktop.
- B. Create a company-owned device inventory using serial numbers of devices.
- C. Create a company-owned device inventory using an asset tag.
- D. Devices > Endpoints > Add a filter-> Management Type > Drive for desktop > Apply
- E. Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop
> Only Allow Google Drive for desktop on authorized devices
Answer: A,E
Explanation:
To restrict Drive for desktop to only company-owned devices, you should:
* Go to Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop and select Only Allow Google Drive for desktop on authorized devices. This setting ensures that only authorized devices can use Drive for desktop.
* Install the Google Endpoint Verification extension on machines using Drive for Desktop. This extension helps manage and verify devices, ensuring that only company-owned devices are allowed access.
References:
* Google Workspace Admin Help - Set up Drive for desktop
* Google Workspace Admin Help - Google Endpoint Verification
NEW QUESTION # 35
Recently, your organization has had an increase in messages marked as spam. You need to quickly and efficiently obtain detailed information regarding each message. What should you do?
- A. Use Google Vault to put all messages marked as spam in a legal hold and review the messages.
- B. Create an investigation by using a SQL query to search for all spam audit logs exported to BigQuery.
- C. Use the spam filter report in the security dashboard to see messages Google's spam filter marked as spam during a specific time period.
- D. Send an alert to all users to mark all suspicious Gmail messages as spam and review the Alert center messages.
Answer: C
Explanation:
The spam filter report in the security dashboard provides a comprehensive overview of messages that Google's spam filter has marked as spam. This allows you to quickly access detailed information about these messages and identify patterns or specific issues contributing to the increase in spam.
NEW QUESTION # 36
Your organization is moving from a legacy mail system to Google Workspace This move will happen in phases During the first phase, some of the users in the domain are set up to use a different identity provider (IdP) for logging in You need to set up multiple idPs for various users What should you do?
- A. Enable single sign-on (SSO) with Cloud Identity and use Cloud Directory Sync to manage multiple identity providers
- B. Create Security Assertion Markup Language (SAML) based single sign-on (SSO) profiles and assign them to specific organizational units or groups of users.
- C. Enable single sign-on (SSO) with third-party identity providers and exclude the users who are using a different provider
- D. Nothing Google uses cookies to establish a user's relationship to a device This will cover multiple identity providers
Answer: B
Explanation:
Access Admin Console: Sign in to your Google Admin console.
Navigate to Security: Click on "Security" and then "Set up single sign-on (SSO) with a third party IdP." Add SAML Apps: Click on "Add SAML app" and select the app to configure.
Create SSO Profiles: Set up SSO profiles for each identity provider by entering the required SAML details such as ACS URL, Entity ID, etc.
Assign to OUs/Groups: Assign the created SSO profiles to specific organizational units (OUs) or groups of users based on their IdP.
Verify Configuration: Ensure that each profile is properly configured and tested.
Reference:
Google Workspace Admin Help: Set up SSO via SAML for single sign-on
NEW QUESTION # 37
Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.
What action should you take to meet these requirements?
- A. Use the login audit report to export all suspicious login details for analysis.
- B. Create a custom dashboard with the security investigation tool showing suspicious logins.
- C. Use the account activity report to export all suspicious login details for analysis.
- D. Create a custom query in BigQuery showing all suspicious login details.
Answer: A
Explanation:
* Access the Admin Console:
* In the Google Workspace Admin console, navigate to "Reports" > "Audit" > "Login".
* Generate a Login Audit Report:
* Customize the report to include details about suspicious login attempts.
* Set the time frame to the past year and filter the results to show only suspicious logins.
* Export the Report:
* Export the login audit report in a suitable format (e.g., CSV) for further analysis.
* Ensure the report includes user account details and the number of suspicious login attempts for
* each account.
* Analyze the Data:
* Review the exported data to identify patterns and determine how frequently suspicious login attempts occur within the organization.
* Provide the analysis to the CISO with the required details for each user account.
References
* Google Workspace Admin Help: View and analyze login audit logs
NEW QUESTION # 38
Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?
- A. Add your partner sending IP addresses to an allowlist.
- B. Change the spoofing protection to deliver the emails to spam instead of quarantining them.
- C. Add your partner domains IPs to the Inbound Gateway setting.
- D. Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.
Answer: B
Explanation:
https://support.google.com/a/answer/9157861?hl=en#:~:text=Move%20email%20to,with%20this%20action.
NEW QUESTION # 39
Your organization recently bought 1,000 licenses for Cloud Identity Premium. The company's development team created an application in the enterprise service bus (ESB) that will read user data in the human resources information system (HRIS) and create accounts via the Google Directory REST API.
While doing the original test before production use, the team observes a 503 error coming from Google API response after a few users are created. The team believes the ESB is not the cause, because it can perform 100 requests per second without any problems. What advice would you give the development team in order to avoid the issue?
- A. Use an exponential back-off algorithm to retry failed requests.
- B. Switch from REST API to gRPC protocol for performance improvement.
- C. Use the domain-wide delegation API to avoid the limitation per account.
- D. Use the batch request architecture, because it can pack 1,000 API calls in one HTTP request.
Answer: A
Explanation:
https://developers.google.com/admin-sdk/admin-settings/limits
NEW QUESTION # 40
Your team uses Google Drive for collaborating with external companies and partners. A sensitive project with an external organization is about to begin. You are creating the new labels for the project. You must ensure that all labeled documents have the label visible to everyone who has access to the project files. What should you do?
- A. Create Drive labels and a separate Shared Drive for the project.
- B. Create Drive labels and add the users from the external organization to your domain.
- C. Create Drive labels and apply data protection rules to all project file.
- D. Create Drive labels and add the permissions for all users in the project, including the external users, to view these labels.
Answer: D
Explanation:
https://support.google.com/a/answer/13127870?hl=en
NEW QUESTION # 41
What action should be taken to configure alerting related to phishing attacks?
- A. Set up a Token audit log event alert.
- B. Set up an email settings changed alert.
- C. Set up a suspicious login event alert.
- D. Set up an Admin audit log event alert.
Answer: C
Explanation:
Admin Console: Log into the Google Admin console at admin.google.com.
Security Settings: Navigate to Security > Investigation Tool.
Create an Alert:
Click on "Create activity rule".
In the conditions section, select "Event is" and choose "Login".
Set the condition to "Suspicious login".
Alert Details: Configure the alert details, such as who will receive the alert and any additional notification settings.
Save and Activate: Save the rule and activate it to start monitoring for suspicious login attempts.
Reference
Google Workspace Admin: Manage Alerts
Google Workspace Security: Investigation Tool
NEW QUESTION # 42
Your-company.com finance departments want to create an internal application that needs to read data from spreadsheets. As the collaboration engineer, you suggest using App Maker. The Finance team is concerned about data security when creating applications with App Maker.
What security measures should you implement to secure data?
- A. Enable App Maker access only for the Finance department Organization Unit.
- B. Change owner access permissions to allow internal usage only.
- C. Use a service account with limited permissions to access each data source.
- D. Use Roles, Script, and Owner access permissions for operations on records and data relations.
Answer: D
Explanation:
When developing the application in App Maker, define roles that correspond to the different levels of access needed by users.
Use scripts to control access to data based on user roles. This ensures that only authorized users can perform certain operations.
Set the owner access permissions appropriately to ensure that data can only be accessed or modified by those with the necessary permissions.
Regularly review and update roles and permissions to adapt to any changes in the organization or the application's usage.
Implementing these security measures ensures that data in your internal application is accessed and managed securely, mitigating risks associated with unauthorized access.
Reference:
Google Workspace Admin Help - App Maker Security
NEW QUESTION # 43
Your organization recently had a sophisticated malware attack that was propagated through embedded macros in email attachments. As a Workspace administrator, you want to provide an additional layer of anti-malware protection over the conventional malware protection that is built into Gmail. What should you do to protect your users from future unknown malware in email attachments?
- A. Turn on advanced phishing and malware protection.
- B. Enable Gmail confidential mode.
- C. Enable Security Sandbox.
- D. Run queries in Security Investigation Tool.
Answer: C
Explanation:
Access Admin Console: Log into your Google Workspace Admin Console.
Navigate to Security Settings: Go to Security > Gmail > Safety.
Enable Security Sandbox: Locate the "Security Sandbox" setting and enable it. Security Sandbox provides an additional layer of protection by analyzing attachments for malware in a controlled environment before they reach users.
Save Settings: Save the changes to ensure the new protection layer is active.
Reference
Google Support: Gmail security sandbox
NEW QUESTION # 44
A company wants to distribute iOS devices to only the employees in the Sales OU. They want to be able to do the following on these devices:
* Control password policies.
* Make corporate apps available to the users.
* Remotely wipe the device if it's lost or compromised
What two steps are required before configuring the device policies? (Choose two.)
- A. Set up an Apple Push Certificate.
- B. Set up Device Approvals.
- C. Turn on Advanced Mobile Management for the domain.
- D. Turn on Advanced Mobile Management for Sales OU
- E. Deploy Apple Certificate to every device.
Answer: A,D
Explanation:
* Admin Console: Log into the Google Admin console at admin.google.com.
* Enable Advanced Mobile Management for Sales OU:
* Navigate to Devices > Mobile & endpoints > Settings.
* Select the Sales OU and turn on Advanced Mobile Management.
* Set Up an Apple Push Certificate:
* Go to Devices > Mobile & endpoints > Apple certificates.
* Follow the instructions to obtain and upload an Apple Push Certificate.
* Device Policies:
* After setting up the Apple Push Certificate, configure the desired device policies such as password policies, app distribution, and remote wipe capabilities.
References
* Google Workspace Admin: Set up advanced mobile management
* Google Workspace Admin: Set up an Apple Push Certificate
NEW QUESTION # 45
Your company's compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company's account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.
Which combination of attributes will meet this objective?
- A. Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.
- B. Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
- C. Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers
> choose Reject - D. Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
Answer: A
Explanation:
* Admin Console: Log into the Google Admin console at admin.google.com.
* Gmail Settings: Navigate to Apps > Google Workspace > Gmail > Compliance.
* Create Rule:
* Click on "Add another rule" under the "Content compliance" section.
* Name the rule appropriately (e.g., Reject Sensitive Info).
* Conditions:
* Select "Outbound and Internal Sending" to ensure all outgoing and internal emails are scanned.
* In the "If ANY of the following match" section, add two expressions:
* Simple Content Match: Configure to find "AccNo".
* Predefined Content Match: Select "Credit Card Numbers".
* Action:
* Choose "Reject" as the action for emails that match these conditions.
* Save Rule: Save the rule and apply it to ensure it is active.
References
* Google Workspace Admin: Set up Compliance Rules
* Google Workspace Admin: Configure Content Compliance
NEW QUESTION # 46
Your organization was recently targeted by a phishing attempt that affected several users You must efficiently determine the full extent of the phishing attempt and prevent further issues from occurring What should you do?
- A. * 1 Collect phishing samples forwarded from users
* 2 Add IP addresses and email addresses to your denylist
* 3. Enroll only affected users to multi-factor authentication (MFA) - B. * 1 Search BigQuery 0Q9 Km b I message marked as phishing
* 2 Require Transport Layer Security (TLS) for all email communications
* 3 Instruct all users to reset their passwords - C. * 1 Use the security dashboard to view the number of messages showing evidence ot potential spoofing and then use the investigation tool on affected users to remove malicious email
* 2 Enable advanced phishing and malware protection
* 3 Deploy Google s Password Alert extension for Chrome - D. * 1 Use email log search to pull all emails for the past three days
* 2 Analyze logs of common emails received and contact users.
* 3 Instruct users on how to create a Gmail filter to block malicious email addresses
Answer: C
Explanation:
* Use the Security Dashboard:
* Access the Google Admin console and go to Security > Dashboard.
* Review metrics and logs for phishing and spoofing activities.
* Identify affected users and potential threats.
* Use the Investigation Tool:
* From the Security dashboard, access the investigation tool.
* Search for and isolate malicious emails sent to affected users.
* Take action to remove these emails.
* Enable Advanced Protection:
* In the Admin console, go to Apps > Google Workspace > Gmail > Safety.
* Enable advanced phishing and malware protection features.
* Deploy Password Alert Extension:
* Ensure the Password Alert Chrome extension is deployed across the organization to help detect password compromises.
References:
* Google Workspace Admin Help: Security dashboard
* Google Workspace Admin Help: Investigation tool
* Google Workspace Admin Help: Phishing and malware protection
* Google Workspace Admin Help: Deploy Password Alert
NEW QUESTION # 47
A user is reporting that after they sign in to Gmail, their labels are not loading and buttons are not responsive. What action should you take to troubleshoot this issue with the user?
- A. Check whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
- B. Collect full message headers for examination.
- C. Check whether the issue occurs when the user authenticates on a different device or a new incognito window.
- D. Check whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
Answer: C
NEW QUESTION # 48
Your company distributes an internal newsletter that contains sensitive information to all employees by email. You've noticed unauthorized forwarding of this newsletter to external addresses, potentially leading to data leaks. To prevent this, you need to implement a solution that automatically detects and blocks such forwarding while allowing legitimate internal sharing. What should you do?
- A. Develop an Apps Script project by using the Gmail API to scan sent emails for the newsletter content and external recipients. Automatically revoke access for violating users.
- B. Create a Gmail content compliance rule that targets the internal newsletter, identifying instances of external forwarding. Configure the rule to reject the message when such forwarding is detected
- C. Add a banner to the newsletter that warns users that external sharing is prohibited.
- D. Create a content compliance rule to modify the newsletter subject line, adding a warning against external forwarding.
Answer: B
Explanation:
A Gmail content compliance rule allows you to specifically target the internal newsletter and automatically detect when it is forwarded to external addresses. By rejecting such messages, you can prevent unauthorized sharing of sensitive information while still permitting internal sharing. This solution is effective for enforcing data security policies without manual intervention.
NEW QUESTION # 49
You are the administrator for a 30,000-user organization. You have multiple Workspace licensing options available to end users in your domain, according to their work responsibilities. A user may be transitioned to a different license type multiple times in a given year. Your organization has a high turnover rate for employees. What is the most efficient way to manage your organization's licensing?
- A. Use Google Cloud Directory Sync to modify user licensing with each sync, according to information available in the organization's LDAP.
- B. Update user licensing in the user portion of the Admin console on an as-needed basis.
- C. Create a license assignment rule in the Google Admin console to set user licensing based on directory attributes.
- D. Use the Directory API to create a custom batch script that modifies the users license on a daily basis.
Answer: A
Explanation:
https://support.google.com/a/answer/10148746?hl=en
You can use Google Cloud Directory Sync (GCDS) to manage and synchronize licenses for users in your Google Account.
On the Licenses page of Configuration Manager, click LDAP License Rules and then Add Rule. In the LDAP Query field, using LDAP query notation, specify the users on your LDAP directory that should be assigned the license. For details, go to Use LDAP search rules to synchronize data
NEW QUESTION # 50
......
Google-Workspace-Administrator certification is recognized by industry leaders and can lead to exciting career opportunities. Certified professionals can work as Google Workspace Administrators, IT managers, and consultants, helping businesses optimize their productivity and collaboration through Google Workspace. Google Cloud Certified - Professional Google Workspace Administrator certification is also a valuable asset for freelancers and entrepreneurs who provide consulting services to businesses. With the rapid growth of cloud-based computing and remote work, the demand for Google Workspace Administrators is expected to increase, making this certification an excellent investment in one's career.
Exam Sure Pass Google Certification with Google-Workspace-Administrator exam questions: https://www.examcost.com/Google-Workspace-Administrator-practice-exam.html
Download Real Google-Workspace-Administrator Exam Dumps for candidates. 100% Free Dump Files: https://drive.google.com/open?id=1WKD0lHKVDdaATljzuc7pljnCXF5JvWOp
