Skip to Content

Google Professional Google Workspace Administrator Exam Questions and Answers – 1

By: Author Alex Lim

Posted on  - Last updated:

Categories Exam, Google

The latest Google Professional Google Workspace Administrator certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Google Professional Google Workspace Administrator exam and earn Google Professional Google Workspace Administrator certification.

Question 1

Exam Question

Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as “view data for all teams” to the HR group, but it is reporting an error when accessing the application.

What should you do?

A. Allocate the “view data for all teams” permission to all employees of the company.
B. Confirm that the Work Insights app is turned ON for all employees.
C. Confirm in Security > API controls > App Access Controls that Work Insights API is set to “unrestricted.”
D. Confirm in Reports > BigQuery Export that the job is enabled.

Correct Answer

C. Confirm in Security > API controls > App Access Controls that Work Insights API is set to “unrestricted.”

Question 2

Exam Question

As the newly hired Admin in charge of Google Workspace, you learn that the organization has been using Google Workspace for months and has configured several security rules for accessing Google Drive. A week after you start your role, users start to complain that they cannot access Google Drive anymore from one satellite office and that they receive an error message that “a company policy is blocking access to this app.” The users have no issue with Gmail or Google Calendar. While investigating, you learn that both this office’s Internet Service Provider (ISP) and the global IP address when accessing the internet were changed over the weekend.

What is the most logical reason for this issue?

A. An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.
B. Under Drive and Docs > Sharing Settings, the “Whitelisted domains” list needs to be updated to add the new ISP domain.
C. The Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range.
D. You need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access.

Correct Answer

A. An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.

Question 3

Exam Question

With the help of a partner, you deployed Google Workspace last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things Google Workspace so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform.

What should you do?

A. Develop a cadence of regular roadmap and business reviews with your partner.
B. Regularly scan the admin console and keep track of any new features you identify.
C. Create a Feature Release alert in the Alert Center to be alerted to new functionality.
D. Put half of your organization on the Rapid Release Schedule to highlight differences.

Correct Answer

A. Develop a cadence of regular roadmap and business reviews with your partner.

Reference

Google Workspace Admin Help > Track and manage feature releases > Track what’s new in Google Workspace > Ways to track new releases

Question 4

Exam Question

A subset of users from the finance and human resources (HR) teams need to share documents with an external vendor. However, external content sharing is prohibited for the entire finance team.

What would be the most secure method to enable external sharing for this set of users?

A. Download and attach the documents to a Gmail message, and send them to the external vendor.
B. Move all users from the finance org unit to the HR org unit.
C. Enable ‘Visitor Sharing’ for the entire finance org unit.
D. Create a group with the finance and HR users who need to share externally.

Correct Answer

D. Create a group with the finance and HR users who need to share externally.

Question 5

Exam Question

Your organization has recently gone Google, but you are not syncing Groups yet. You plan to sync all of your Active Directory group objects to Google Groups with a single GCDS configuration.

Which scenario could require an alternative deployment strategy?

A. Some of your Active Directory groups have sensitive group membership.
B. Some of the Active Directory groups do not have owners.
C. Some of the Active Directory groups have members external to organization.
D. Some of the Active Directory groups do not have email addresses.

Correct Answer

D. Some of the Active Directory groups do not have email addresses.

Explanation

All groups in a Google domain are referenced by an email address. You must ensure that all the security groups you want to synchronize have a valid mail attribute defined.

Reference

Google Workspace Admin Help > Google Cloud Directory Sync > GCDS FAQ

Question 6

Exam Question

A retail company has high employee turnover due to the cyclical nature in the consumer space. The increase in leaked confidential content has created the need for a specific administrative role to monitor ongoing employee security investigations.

What step should you take to increase the visibility of such investigations?

A. Assign the ‘Services Admin’ role to an administrator with ‘Super Admin’ privileges.
B. Create a ‘Custom Role’ and add all the Google Vault privileges for a new administrator.
C. Validate that the new administrator has access to Google Vault.
D. Create a ‘Custom Role’ and add the ability to manage Google Vault matters, holds, searches, and exports.

Correct Answer

D. Create a ‘Custom Role’ and add the ability to manage Google Vault matters, holds, searches, and exports.

Question 7

Exam Question

Your company frequently hires from five to ten interns for short contract engagements and makes use of the same generically named Google Workspace accounts (e.g., [email protected], [email protected], [email protected]). The manager of this program wants all email to these accounts routed to the manager’s mailbox account also.

What should you do?

A. Setup address forwarding in each account’s GMail setting menu.
B. Set up recipient address mapping in GMail Advanced Settings.
C. Configure an Inbound Gateway route.
D. Give the manager delegated access to the mailboxes.

Correct Answer

B. Set up recipient address mapping in GMail Advanced Settings.

Reference

Google Workspace Admin Help > Advanced Gmail management > Advanced email routing > Add Gmail Routing settings

Question 8

Exam Question

A user is reporting that after they sign in to Gmail, their labels are not loading and buttons are not responsive.

What action should you take to troubleshoot this issue with the user?

A. Collect full message headers for examination.
B. Check whether the issue occurs when the user authenticates on a different device or a new incognito window.
C. Check whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
D. Check whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.

Correct Answer

A. Collect full message headers for examination.

Reference

Gmail Help > Sync & import > Fix problems importing mail

Question 9

Exam Question

Your organization has implemented Single Sign-On (SSO) for the multiple cloud-based services it utilizes. During authentication, one service indicates that access to the SSO provider cannot be accessed due to invalid information.

What should you do?

A. Verify the NameID Element in the SAML Response matches the Assertion Consumer Service (ACS) UR
B. Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) UR
C. Verify the Subject attribute in the SAML Response matches the Assertion Consumer Service (ACS) UR
D. Verify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) UR

Correct Answer

Verify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) UR

Reference

Question 10

Exam Question

You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders.

What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?

A. Train users to click on Not Spam button for emails.
B. Add all users of your domain to an approved sender list.
C. Force TLS for your domain.
D. Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.

Correct Answer

B. Add all users of your domain to an approved sender list.

Explanation

Approved senders list―Approved senders are trusted users that send email to your organization. Create an address list of approved senders so messages from these users bypass Gmail’s spam filters, and recipients can decide whether they are spam or not. Create the list with individual email addresses, or by adding an entire domain.

Reference

Google Workspace Admin Help > Data migration tools > Data migration service > Troubleshoot migrations > Data migration service error codes