Google Google-Workspace-Administrator Real 2024 Braindumps Mock Exam Dumps
Google-Workspace-Administrator Exam Questions | Real Google-Workspace-Administrator Practice Dumps
Google Workspace is a suite of cloud-based productivity tools that helps individuals and teams collaborate, communicate, and get work done more efficiently. As more and more organizations are moving their operations to the cloud, the demand for skilled Google Workspace administrators is on the rise. Google has designed a certification program that validates the skills and expertise of professionals who can effectively manage and optimize Google Workspace environments. The Google-Workspace-Administrator (Google Cloud Certified - Professional Google Workspace Administrator) certification exam is one such program that tests the knowledge and abilities of individuals who want to demonstrate their proficiency in managing and optimizing Google Workspace environments.
NEW QUESTION # 38
Your corporate LDAP contains the email addresses of several hundred non-employee business partners. You want to sync these contacts to Google Workspace so they appear in Gmail's address autocomplete for all users in the domain.
What are two options to meet this requirement? (Choose two.)
- A. Develop a custom application to call the Domain Shared Contacts API.
- B. Configure GCDS to populate a Group with external members.
- C. Configure GCDS to synchronize shared contacts.
- D. Use the Directory API to upload a .csv file containing the contacts.
- E. Use the People API to upload a .csv file containing the contacts.
Answer: A,C
Explanation:
https://support.google.com/a/answer/9281635?hl=en&ref_topic=20016
NEW QUESTION # 39
Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners. How best would you achieve this?
- A. Enable external sharing only to allowlisted domains provided by marketing and sales teams.
- B. Enable external sharing for the marketing and sales organizational units.
- C. Create a configuration group with the approved users as members, and enable external sharing for this group.
- D. Create a configuration group with the approved users as members, and use it to create a target audience.
Answer: C
Explanation:
* Create a Configuration Group:
* Navigate to the Google Admin console.
* Go to Directory > Groups.
* Click "Create Group" and enter the group details.
* Add the approved users from the marketing and sales teams as members of this group.
* Enable External Sharing for the Group:
* Go to Apps > Google Workspace > Drive and Docs > Sharing settings.
* Scroll down to "Sharing options for specific groups".
* Select the newly created group.
* Enable external sharing for this group.
* Save the changes.
This ensures that only the specified users can share documents externally, while the rest of the organization remains restricted.
References
* Google Workspace Admin Help: Share Drive and Docs with Specific Groups
NEW QUESTION # 40
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. Admin audit log
- B. OAuth Token audit log
- C. SAML audit log
- D. Drive usage audit log
Answer: B
NEW QUESTION # 41
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?
- A. Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.
- B. Disable "Open Docs in Unmanaged Apps" setting in Google Admin Console's Device management section.
- C. Navigate to "Data Protection" setting in Google Admin Console's Device management section and disable the "Allow users to copy data to personal apps" checkbox.
- D. Clear the "Allow items created with managed apps to open in unmanaged apps" checkbox.
Answer: D
Explanation:
To prevent data exfiltration from Google apps on iOS devices, you need to configure the appropriate settings in the Google Admin console.
* Navigate to Device Management:
* In the Google Admin console, go to Devices > Mobile and endpoints > Universal Settings > iOS settings.
* Configure Data Protection Settings:
* Find the setting for "Allow items created with managed apps to open in unmanaged apps".
* Clear this checkbox to prevent users from copying data from managed (work) apps to unmanaged (personal) apps.
* Save Changes:
* Save the changes to ensure that the policy is enforced.
* Verification:
* Verify that the policy is applied by checking the behavior on an iOS device to ensure that data cannot be copied from managed apps to unmanaged apps or third-party applications.
By clearing this checkbox, you enforce a policy that restricts the movement of data from managed apps to unmanaged environments, thereby preventing data exfiltration.
References:
* Manage iOS settings
* Endpoint management settings
NEW QUESTION # 42
Your organization wants more visibility into actions taken by Google staff related to your data for audit and security reasons. They are specifically interested in understanding the actions performed by Google support staff with regard to the support cases you have opened with Google. What should you do to gain more visibility?
- A. From Google Admin Panel, go to Audit, and select Rules Audit Log.
- B. From Google Admin Panel, go to Audit, and select Admin Audit Log.
- C. From Google Admin Panel, go to Audit, and select Login Audit Log.
- D. From Google Admin Panel, go to Audit, and select Access Transparency Logs. Most Voted
Answer: D
Explanation:
Google staff logs related to accessing user content are stored in Access Transparency logs https://support.google.com/a/answer/9230474?hl=en
NEW QUESTION # 43
Your organization has offices in Canada Italy and the United States You want to ensure that employees can access corporate Gmail and Drive from these three geographic locations only What should you do?
- A. Create data protection rules in Google Workspace that allow data access from only three geographic locations
- B. Create address lists to restrict the delivery of incoming and outgoing messages and to block notifications from Google Doc comments
- C. Use context-aware access to create access levels based on the geographic location and assign them to corporate Gmail and Drive
- D. Require the use of corporate devices for any access to corporate Gmail and Drive
Answer: C
Explanation:
* Enable Context-Aware Access:
* In the Google Admin console, go to Security > Context-Aware Access.
* Enable the context-aware access feature.
* Create Access Levels:
* Define access levels based on geographic locations (Canada, Italy, and the United States).
* Use IP address ranges or other location indicators to specify these regions.
* Assign Access Levels:
* Assign the created access levels to the Google Workspace services, specifically corporate Gmail and Drive.
* Ensure that only users accessing from the specified regions can access these services.
* Apply and Monitor:
* Save and apply the settings.
* Monitor access logs to ensure compliance and security.
References:
* Google Workspace Admin Help: Set up context-aware access
* Google Workspace Admin Help: Manage context-aware access levels
NEW QUESTION # 44
You have enrolled a new Google Meet hardware device for an existing conference room in your building Your users report that the new hardware in the conference does not show the expected calendar events You need to investigate and fix the problem What should you do?
- A. Make sure the Access permissions for the resource calendar is set to "See all event details
- B. Create a brand new resource calendar and associate the Meet Hardware with that new resource
- C. Use the Meet Quality Tool in the control panel to search for the newly installed Meet Hardware
- D. Make sure that the conference room resource calendar has been created and that the Meet Hardware is associated with that resource
Answer: D
Explanation:
To investigate and fix the issue where the new hardware does not show the expected calendar events, follow these steps:
* Sign in to the Google Admin console: Use an account with super administrator privileges.
* Verify the resource calendar:
* Go to Apps > Google Workspace > Calendar > Resources.
* Ensure that the conference room resource calendar has been created.
* Associate the Meet hardware:
* Go to Devices > Google Meet hardware.
* Find the new hardware device and check its settings.
* Ensure the device is associated with the correct conference room resource calendar.
* Check calendar permissions:
* Go to Calendar > Manage resources.
* Ensure the calendar associated with the Meet hardware has the appropriate access permissions set to "See all event details." References:
* Google Workspace Admin Help - Manage resources
* Google Workspace Admin Help - Google Meet hardware
NEW QUESTION # 45
As the Workspace Administrator, you have been asked to configure Google Cloud Directory Sync (GCDS) in order to manage Google Group memberships from an internal LDAP server. However, multiple Google Groups must have their memberships managed manually. When you run the GCDS sync, you notice that these manually managed groups are being deleted. What should you do to prevent these groups from being deleted?
- A. Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.
- B. In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to "delete only active Google domain users not found in LDAP."
- C. In the GCDS configuration manager, update the group deletion policy setting to "don't delete Google groups not found in LDAP."
- D. Use the Directory API to check and update the group's membership after the GCDS sync is completed.
Answer: C
Explanation:
When configuring Google Cloud Directory Sync (GCDS) to manage Google Group memberships from an internal LDAP server, it's crucial to ensure that manually managed groups are not inadvertently deleted during the sync process. The correct setting to prevent this is found within the GCDS configuration manager.
* Access GCDS Configuration Manager:
* Open the GCDS configuration manager on your server.
* Navigate to Group Settings:
* Go to the section where group settings are configured.
* Update Group Deletion Policy:
* Find the group deletion policy setting.
* Change the policy to "don't delete Google groups not found in LDAP."
* Save Configuration:
* Save the updated configuration to ensure that the settings are applied during the next synchronization.
By updating this setting, GCDS will no longer delete Google Groups that are not found in LDAP, thereby preserving manually managed groups.
References:
* Google Cloud Directory Sync Admin Help
* GCDS Configuration Guide
NEW QUESTION # 46
A company using Google Workspace has reports of cyber criminals trying to steal usernames and passwords to access critical business data. You need to protect the highly sensitive user accounts from unauthorized access.
What should you do?
- A. Enforce 2FA with Google Authenticator app.
- B. Turn on password expiration.
- C. Use a third-party identity provider.
- D. Enforce 2FA with a physical security key.
Answer: D
Explanation:
* Admin Console: Log into the Google Admin console at admin.google.com.
* Security Settings: Navigate to Security > Authentication > 2-step verification.
* Enforce 2FA:
* Enable "Enforce 2-step verification".
* Set the option to require "Security Keys".
* Deployment: Ensure all highly sensitive user accounts are equipped with physical security keys (e.g., YubiKey).
* Enrollment: Assist users in enrolling their security keys through the Google Account settings under
"Security".
References
* Google Workspace Admin: Enforce 2-Step Verification
* Google Workspace Security: Security Keys
NEW QUESTION # 47
As a Workspace Administrator, you want to keep an inventory of the computers and mobile devices your company owns in order to track details such as device type and who the device is assigned to. How should you add the devices to the company-owned inventory?
- A. Download the company owned inventory template CSV file from the admin panel, enter the Device OS, serial number and upload it back to the company owned inventory in the admin panel.
- B. Download the company owned inventory template CSV file from the admin panel, enter the asset tag of the devices, and upload it back to the company owned inventory in the admin panel.
- C. Download the company owned inventory template CSV file from the admin panel, enter the Device OS, asset tag and upload it back to the company owned inventory in the admin panel.
- D. Download the company owned inventory template CSV file from the admin panel, enter the serial number of the devices, and upload it back to the company owned inventory in the admin panel.
Answer: A
Explanation:
* Download Inventory Template:
* Navigate to the Google Admin console.
* Go to Devices > Company-owned inventory.
* Click "Download CSV template" to get the template file.
* Enter Device Information:
* Open the CSV template file.
* Enter the Device OS and serial number for each company-owned device.
* Upload the CSV File:
* Return to the Company-owned inventory section in the Admin console.
* Click "Upload CSV" and select the completed template file.
* Confirm and upload the file to update the inventory.
This process ensures that all company-owned devices are tracked accurately in the Google Workspace admin panel.
References
* Google Workspace Admin Help: Add Company-owned Devices
NEW QUESTION # 48
You have configured SSO using a third-party IDP with your Google Workspace domain. An end user has reported that they cannot sign in to Google Workspace after their username was changed in the third-party SSO product. They can sign in to their other internal applications that use SSO. and no other users are experiencing issues signing in. What could be causing the sign-in issue?
- A. The user's Google password was changed administratively, which is causing a sign-in failure.
- B. The issued certificate for that user has been revoked and must be updated before the user can have another successful sign in.
- C. The SAML assertion is providing the user's previous password attached to their old username.
- D. The SAML assertion provided by the third-party IDP is presenting a username that conflicts with the current username configured in Google Workspace.
Answer: D
NEW QUESTION # 49
Your company has just acquired a new group of users. They have been provisioned into the Google Workspace environment with your primary domain as their primary email address. These new users still need to receive emails from their previous domain. What is the best way to achieve this for these new users, without updating the information of pre*existing users?
- A. Update the Google-provided test domain to be the domain of the acquired company, and then update the email information of all new users with alias emails.
- B. Add the acquired domain as an alias to the primary Google Workspace domain.
- C. Without adding a domain, update each user's email information with the previous domain.
- D. Add the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.
Answer: D
Explanation:
To ensure new users receive emails from their previous domain without affecting existing users:
* Add the acquired domain as a secondary domain to the primary Google Workspace domain.
* Update the email information of all new users to include alias emails from the previous domain. This allows them to receive emails sent to their old addresses.
This method segregates the old and new user groups effectively and maintains the integrity of the email addresses.
References:
* Google Workspace Admin Help: Manage domains
NEW QUESTION # 50
Users at your organization are reporting issues with Google Voice including disconnected calls and overall connection issues. You want to identify whether these issues affect just your organization or whether it's a global Google issue What should you do?
- A. Use the Security investigation Tool with User Log Events as the data source field In the search operator fields select Event is and Call failed Analyze the packet loss
- B. Verify if there is a service outage for Google Voice reported on the Google Workspace Status Dashboard
- C. Use the Security Investigation Tool with Voice Log Events as the data source field In the search operator fields select Event is and Network Statistics (client) Analyze the packet loss
- D. Verify if there is a service interruption for Google Voice reported on the Google Workspace Updates Blog website
Answer: B
Explanation:
To identify whether the Google Voice issues are affecting just your organization or if it's a global issue, follow these steps:
* Check the Google Workspace Status Dashboard:
* Go to the Google Workspace Status Dashboard.
* Look for any reported outages or issues specifically for Google Voice.
* The status dashboard provides real-time information on service availability and any ongoing issues affecting Google Workspace services.
References:
* Google Workspace Status Dashboard
NEW QUESTION # 51
Your company's Google Workspace primary domain is "mycompany.com," and it has acquired a startup that is using another cloud provider with a domain named "mystartup.com." You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO's email address is [email protected], which also matches your company CEO's email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?
- A. Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
- B. Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
- C. Create the startup employees in the "mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to "mystartup.com," and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
- D. Create a new Google Workspace domain with "mystartup.com," and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
Answer: B
Explanation:
* Secondary Domain:
* A secondary domain allows you to add another domain to your existing Google Workspace account without creating a separate account.
* This is useful for managing users from different domains under a single Google Workspace instance.
* Steps to Add a Secondary Domain:
* Navigate to the Google Admin console.
* Go to Account > Domains > Manage domains.
* Click "Add a domain" and select "Add another domain".
* Enter the domain name (mystartup.com) and follow the prompts to verify domain ownership by updating DNS records.
* Once verified, create users under the secondary domain:
* Navigate to Directory > Users.
* Click "Add new user" and enter user information, selecting the secondary domain for their email address.
* Ensure all existing security policies are applied by assigning the users to the appropriate organizational units.
References
* Google Workspace Admin Help: Add a Domain
NEW QUESTION # 52
Your company has a broad, granular IT administration team, and you are in charge of ensuring proper administrative control. One of those teams, the security team, requires access to the Security Investigation Tool. What should you do?
- A. Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.
- B. Assign the pre-built security admin role to the security team members.
- C. Assign the Super Admin Role to the security team members.
- D. Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.
Answer: A
Explanation:
https://support.google.com/a/answer/9043255#:~:text=To%20give%20access%20only%20to%20the%20investigation%20tool%2C%20check%20the%20individual%20boxes%20for%C2%A0Investigation%20Tool%20privileges.%20You%20can%20add%20specific%20privileges%20for%20access%20to%20different%20types%20of%20data%20(for%20example%2C%20Gmail%2C%20Drive%2C%20Device%2C%20and%20User)%3A
NEW QUESTION # 53
Your organization recently bought 1.000 licenses for Cloud Identity Premium. The company's development team created an application in the enterprise service bus (ESB) that will read user data in the human resources information system (HRIS) and create accounts via the Google Directory REST API.
While doing the original test before production use, the team observes a 503 error coming from Google API response after a few users are created The team believes the ESB is not the cause, because it can perform 100 requests per second without any problems. What advice would you give the development team in order to avoid the issue?
- A. Use the batch request architecture, because it can pack 1,000 API calls in one HTTP request.
- B. Use an exponential back-off algorithm to retry failed requests.
- C. Switch from REST API to gRPC protocol for performance improvement
- D. Use the domain-wide delegation API to avoid the limitation per account.
Answer: B
NEW QUESTION # 54
......
Google-Workspace-Administrator certification is recognized by industry leaders and can lead to exciting career opportunities. Certified professionals can work as Google Workspace Administrators, IT managers, and consultants, helping businesses optimize their productivity and collaboration through Google Workspace. Google Cloud Certified - Professional Google Workspace Administrator certification is also a valuable asset for freelancers and entrepreneurs who provide consulting services to businesses. With the rapid growth of cloud-based computing and remote work, the demand for Google Workspace Administrators is expected to increase, making this certification an excellent investment in one's career.
Verified Google-Workspace-Administrator Exam Dumps Q&As - Provide Google-Workspace-Administrator with Correct Answers: https://www.examtorrent.com/Google-Workspace-Administrator-valid-vce-dumps.html
Pass Your Google-Workspace-Administrator Dumps Free Latest Google Practice Tests: https://drive.google.com/open?id=15OTIHyqgzDXmkJugq9uoweObwYWLyP28
