[Feb-2024] Google Google-Workspace-Administrator Exam: Basic Questions With Answers
New 2024 Realistic Free Google Google-Workspace-Administrator Exam Dump Questions and Answer
NEW QUESTION # 54
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?
- A. Navigate to "Data Protection" setting in Google Admin Console's Device management section and disable the "Allow users to copy data to personal apps" checkbox.
- B. Disable "Open Docs in Unmanaged Apps" setting in Google Admin Console's Device management section.
- C. Clear the "Allow items created with managed apps to open in unmanaged apps" checkbox.
- D. Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.
Answer: A
Explanation:
https://support.google.com/a/answer/6328700?hl=en&ref_topic=6079327#managed_apps&zippy=%2Cdata-actions Allow users to copy Google Workspace items to personal apps Allows users to copy content from a Google app (such as Gmail, Drive, Docs, Sheets, Slides, Chat, and Meet) to a Google app in their personal account or a third-party app. Also allows users to drag content between Google apps, for any account.
To prevent users from copying or dragging information from their work account, or using the All inboxes feature (which combines messages from multiple Gmail accounts into one inbox), uncheck the box.
NEW QUESTION # 55
A user joined your organization and is reporting that every time they start their computer they are asked to sign in. This behavior differs from what other users within the organization experience. Others are prompted to sign in biweekly. What is the first step you should take to troubleshoot this issue for the individual user?
- A. Check the session length duration for the organizational unit the user is provisioned in.
- B. Confirm that this user has their employee ID populated as a sign-in challenge.
- C. Reset the user's sign-in cookies
- D. Verify that 2-Step Verification is enforced for this user.
Answer: A
NEW QUESTION # 56
The nature of your organization's business makes your users susceptible to malicious email attachments. How should you implement a scan of all incoming email attachments?
- A. In the security sandbox section, enable virtual execution of attachments for (he targeted OU
- B. Configure a safety rule to protect against attachments with scripts from untrusted senders.
- C. In the security sandbox section, enable virtual execution of attachments for the entire organization.
- D. Configure a safety rule to protect against encrypted attachments from untrusted senders
Answer: C
NEW QUESTION # 57
Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user's data.
What two actions should you take? (Choose two.)
- A. Change the user's last name in Active Directory.
- B. Change the user's last name in the Google Workspace Admin panel.
- C. Change the user's primary email address in the Google Workspace Admin panel.
- D. Add the user's old email address to their account in the Google Workspace Admin panel.
- E. Change the user's primary email in Active Directory.
Answer: A,E
Explanation:
https://support.google.com/a/answer/106368?hl=en
NEW QUESTION # 58
On which two platforms can you push WiFi connection information with Google Workspace? (Choose two.)
- A. Mac OS
- B. Windows
- C. Linux
- D. iOS
- E. Chrome OS
Answer: D,E
NEW QUESTION # 59
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. SAML audit log
- B. OAuth Token audit log
- C. Admin audit log
- D. Drive usage audit log
Answer: B
NEW QUESTION # 60
The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.
What two actions should you take? (Choose two.)
- A. Add the sender of the wire transfer email to the blocked senders list.
- B. Configure objectionable content to reject messages with the words "wire transfer."
- C. Enable all admin settings in Gmail's safety > spoofing and authentication.
- D. Create a rule requiring secure transport for all messages regarding wire transfers.
- E. Verify that DMARC, DKIM, and SPF records are configured correctly for your domain.
Answer: A,E
NEW QUESTION # 61
Your organization is on Google Workspace Enterprise and allows for external sharing of Google Drive files to facilitate collaboration with other Google Workspace customers. Recently you have had several incidents of files and folders being broadly shared with external users and groups. Your chief security officer needs data on the scope of external sharing and ongoing alerting so that external access does not have to be disabled.
What two actions should you take to support the chief security officer's request? (Choose two.)
- A. Create a custom Dashboard for external sharing in the Security Investigation Tool.
- B. Create an alert from Drive Audit reports to notify of external file sharing.
- C. Review who has viewed files using the Google Drive Activity Dashboard.
- D. Automatically block external sharing using DLP rules.
- E. Review total external sharing in the Aggregate Reports section.
Answer: A,B
NEW QUESTION # 62
You want to create a list of IP addresses that are approved to send email to your domain. To accomplish this, what section of the Google Workspace Admin console should you update?
- A. Content compliance rule
- B. Email allowlist
- C. Bypass spam filter
- D. Approved email denylist
Answer: B
NEW QUESTION # 63
Your organization is expected to start using Google Workspace Enterprise Standard in several countries. During the planning phase, the change management leadership team mandates that meeting rooms near each participant's office location should be suggested when someone creates a Google Calendar event, to simplify the user experience and avoid booking rooms when people would not be able to move easily. What should you do?
- A. Define users' work locations by setting building ID. floor name, and floor section if applicable as the-buildings and rooms are defined.
- B. Share each room only with the Dynamic Group defined per each user location so that they can only book the rooms nearby.
- C. Organize users for each location in separate Google Groups. Add room resources to the corresponding groups so that meeting rooms would be suggested accordingly.
- D. Organize users for each location in separate organizational units (OUs). Add room resources to the corresponding OUs so that meeting rooms would be suggested accordingly.
Answer: A
NEW QUESTION # 64
Your company has been engaged in a lawsuit, and the legal department has been asked to discover and hold all email for two specific users. Additionally, they have been asked to discover and hold any email referencing "Secret Project 123." What steps should you take to satisfy this request?
- A. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and enter: user1@your- company.com AND [email protected]. Set the search terms to: secret AND project AND 123. Save.
- B. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to secret OR project OR 123. Save.
- C. Create a Matter and a Hold. Set the Hold to Gmail, set it to the top level Organization, and set the search terms to "secret project 123." Create a second Hold. Set the second Hold to Gmail, set it to Accounts, and enter: user1 @your-company.com, [email protected]. Save.
- D. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to: (secret project 123). Save.
Answer: C
Explanation:
The correct way to search for the esact term is in quotes ("project 123" and not (project 123)). Ref: https://support.google.com/vault/answer/2474474?hl=en. Also, afeter doing this ytou must create the retention rule using comas to separate user from user.
NEW QUESTION # 65
With the help of a partner, you deployed Google Workspace last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things Google Workspace so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform.
What should you do?
- A. Create a Feature Release alert in the Alert Center to be alerted to new functionality.
- B. Put half of your organization on the Rapid Release Schedule to highlight differences.
- C. Regularly scan the admin console and keep track of any new features you identify.
- D. Develop a cadence of regular roadmap and business reviews with your partner.
Answer: D
Explanation:
https://support.google.com/a/answer/6131189?hl=en
NEW QUESTION # 66
Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.
What should you do?
- A. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.
- B. Access the Security Menu > API Permissions > choose Drive and Disable All Access.
- C. Access the Security Menu> API Reference > disable all API Access.
- D. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain
Answer: A
NEW QUESTION # 67
Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.
What should you do?
- A. Install Google Workspace Sync for Microsoft Outlook on all employees' computers.
- B. Install Google Apps Manager to automate add-user scripts.
- C. Install Google Cloud Directory Sync on a supported server.
- D. Install Google Cloud Directory Sync on all Domain Controllers.
Answer: C
Explanation:
https://support.google.com/a/answer/6123896
NEW QUESTION # 68
You act as the Google Workspace Administrator for a company that has just acquired another organization. The acquired company will be migrated into your Workspace environment in 6 months. Management has asked you to ensure that the Google Workspace users you currently manage can efficiently access rich contact information in Workspace for all users. This needs to occur before the migration, and optimally without additional expenditure. What step do you take to populate contact information for all users?
- A. Provision and license Google Workspace accounts for the acquired company's users because they will need accounts in the future.
- B. Use the Domain Shared Contacts API to upload contact information for the acquired company's users.
- C. Bulk-upload the contact information for these users via CSV into the Google Directory.
- D. Prepare an uploadable file to be distributed to your end users that allows them to add the acquired company's user contact information to their personal contacts.
Answer: B
Explanation:
The Domain Shared Contacts API lets your applications get and update external contacts that are shared with all users in a Google Workspace domain. Shared contacts are visible to all users of a Google Workspace domain and all Google services have access to the contact list https://developers.google.com/admin-sdk/domain-shared-contacts/overview
NEW QUESTION # 69
A company has thousands of Chrome devices and bandwidth restrictions. They want to distribute the Chrome device updates over a period of days to avoid traffic spikes that would impact the low bandwidth network.
Where should you enable this in the Chrome management settings?
- A. Disable Auto update.
- B. Throttle the bandwidth.
- C. Update over cellular.
- D. Randomly scatter auto-updates.
Answer: D
Explanation:
Randomly scatter auto-updates over Only available if you choose to scatter updates Specifies the approximate number of days that managed Chrome devices download an update after its release. You can use this setting to avoid causing traffic spikes in old or low-bandwidth networks. Devices that are offline during this period download the update when they're online again. https://support.google.com/chrome/a/answer/1375678?hl=en#zippy=%2Cauto-update-settings
NEW QUESTION # 70
How can you monitor increases in user reported Spam as identified by Google?
- A. Review post-delivery activity in the BigQuery Export.
- B. Review user-reported spam in the Investigation Tool.
- C. Review spike in user-reported spam in the Alert center.
- D. Review post-delivery activity in the Email logs.
Answer: C
Explanation:
https://support.google.com/a/answer/9104586?hl=en
NEW QUESTION # 71
As the Workspace Administrator, you have been asked to configure Google Cloud Directory Sync (GCDS) in order to manage Google Group memberships from an internal LDAP server. However, multiple Google Groups must have their memberships managed manually. When you run the GCDS sync, you notice that these manually managed groups are being deleted. What should you do to prevent these groups from being deleted?
- A. Use the Directory API to check and update the group's membership after the GCDS sync is completed.
- B. Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.
- C. In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to "delete only active Google domain users not found in LDAP."
- D. In the GCDS configuration manager, update the group deletion policy setting to "don't delete Google groups not found in LDAP."
Answer: D
Explanation:
https://support.google.com/a/answer/6258071?hl=en#zippy=%2Cgoogle-group-deletion-policy Don't delete Google Groups not found in LDAP If checked, Google Group deletions in your Google domain are disabled, even when the Groups aren't in your LDAP server.
NEW QUESTION # 72
Your company has just received a shipment of ten Chromebooks to be deployed across the company, four of which will be used by remote employees. In order to prepare them for use, you need to register them in Google Workspace.
What should you do?
- A. Turn on the chromebook and log in as a Chrome Device admin. Press Ctrl+Alt+E to begin enterprise enrollment.
- B. In Chrome Management | Device Settings, enable Forced Re-enrollment for all devices.
- C. Turn on the Chromebook and press Ctrl+Alt+E at the login screen to begin enterprise enrollment.
- D. Instruct the employees to log in to the Chromebook. Upon login, the auto enrollment process will begin.
Answer: C
NEW QUESTION # 73
......
Guaranteed Success in Workspace Administrator Google-Workspace-Administrator Exam Dumps: https://actualanswers.testsdumps.com/Google-Workspace-Administrator_real-exam-dumps.html
