Google Workspace Admin Certification Exam
Questions With Complete Solutions
Your company is using Google Workspace Enterprise Standard. They have 200
meeting rooms defined for the main building and used daily by the 12,000
employees. Users are complaining they have difficulties finding a room available
when searching within Google Calendar, even if several rooms are available (no
one attending meetings in these rooms at that time). You have been asked to find
a solution while minimizing the operational effort and avoiding any new expenses
due to budget constraints. What should you do?
A. Implement a third-party solution that will detect presence in the room and
release it if nobody appears after a few minutes.
B. Create a Google App Script that will inspect each room calendar for the next 12
hours, check attendees status, and send the room administrator an alert email for
releasing the room if all attendees have declined but the room has not.
C. Set the option "Allow calendar-based room rel
C. Set the option "Allow calendar-based room release" for all targeted rooms.
Your company has just acquired a new group of users. They have been
provisioned into the Google Workspace environment with your primary domain
as their primary email address. These new users still need to receive emails from
their previous domain. What is the best way to achieve this for these new users,
without updating the information of preexisting users?
A. Add the acquired domain as an alias to the primary Google Workspace
domain.
B. Add the acquired domain as a secondary domain to the primary Google
,Workspace domain, and then update the email information of all new users with
alias emails.
C. Update the Google-provided test domain to be the domain of the acquired
company, and then update the email information of all new users with alias
emails.
D. Without adding a domain, update each user's email information with the
previous domain.
A. Add the acquired domain as an alias to the primary Google Workspace domain.
The application development team requests that a new, internal, domain-owned
Google Workspace app be allowed to access Google Drive APIs. You are
currently restricting access to all APIs using an approved allowlist, per security
policy. You need to grant access for this app. What should you do?
A. Enable all API access for Google Drive.
B. Enable the "trust domain owned apps" setting.
C. Add OAuth Client ID to the Google Drive Trusted List.
D. Allowlist the app in the Google Workspace Marketplace.
C. Add OAuth Client ID to the Google Drive Trusted List.
An administrator accidentally deleted several Workspace user accounts from the
Google Admin Console two weeks ago. How can you recover the deleted user
accounts?
A. Open a Google support ticket, and request a recovery of all recently deleted
users.
B. Sign in to the Admin console as Help Desk Admin, open user management,
filter for "recently deleted," and recover.
C. Sign in to the Admin console as Super Admin, open user management, filter
for "recently deleted," and recover.
D. Create a matter, go to legal hold, and create a legal hold for the user accounts.
C. Sign in to the Admin console as Super Admin, open user management, filter for
"recently deleted," and recover.
, You need to protect your users from untrusted senders sending encrypted
attachments via email. You must ensure that these messages are not delivered to
users' mailboxes. What step should be taken?
A. Use the security center to remove the messages from users' mailboxes.
B. Use Google Vault to remove these messages from users' mailboxes.
C. Enable a safety rule to send these types of messages to spam.
D. Enable a safety rule to send these types of messages to a quarantine.
D. Enable a safety rule to send these types of messages to a quarantine.
Your organization uses a third-party product to filter mail before it arrives at your
Workspace Domain. How should you configure Gmail to ensure that inbound
messages are not seen as a spam attack due to the volume of mail being received
from this product?
A. Add the product's IP addresses as an approved sender.
B. Allowlist the IP addresses of the third-party filtering product.
C. Add the product's IP addresses to your organization's SPF record.
D. List the IP addresses of the product as an Inbound Gateway.
D. List the IP addresses of the product as an Inbound Gateway.
Your organization is in the process of deploying Google Drive for desktop so that
your users can access Drive files directly from their desktops. For security
reasons, you want to restrict Drive for desktop to only company-owned devices.
What two steps should you take from the admin panel to restrict Drive for
desktop to only company-owned devices? (Choose two.)
A. Create a company-owned device inventory using an asset tag.
B. Devices > Endpoints > Add a filter > Management Type > Drive for desktop >
Apply
C. Apps > Google Workspace > Drive and Docs > Features and Applications >
Google Drive for Desktop > Only Allow Google Drive for desktop on authorized
devices
Questions With Complete Solutions
Your company is using Google Workspace Enterprise Standard. They have 200
meeting rooms defined for the main building and used daily by the 12,000
employees. Users are complaining they have difficulties finding a room available
when searching within Google Calendar, even if several rooms are available (no
one attending meetings in these rooms at that time). You have been asked to find
a solution while minimizing the operational effort and avoiding any new expenses
due to budget constraints. What should you do?
A. Implement a third-party solution that will detect presence in the room and
release it if nobody appears after a few minutes.
B. Create a Google App Script that will inspect each room calendar for the next 12
hours, check attendees status, and send the room administrator an alert email for
releasing the room if all attendees have declined but the room has not.
C. Set the option "Allow calendar-based room rel
C. Set the option "Allow calendar-based room release" for all targeted rooms.
Your company has just acquired a new group of users. They have been
provisioned into the Google Workspace environment with your primary domain
as their primary email address. These new users still need to receive emails from
their previous domain. What is the best way to achieve this for these new users,
without updating the information of preexisting users?
A. Add the acquired domain as an alias to the primary Google Workspace
domain.
B. Add the acquired domain as a secondary domain to the primary Google
,Workspace domain, and then update the email information of all new users with
alias emails.
C. Update the Google-provided test domain to be the domain of the acquired
company, and then update the email information of all new users with alias
emails.
D. Without adding a domain, update each user's email information with the
previous domain.
A. Add the acquired domain as an alias to the primary Google Workspace domain.
The application development team requests that a new, internal, domain-owned
Google Workspace app be allowed to access Google Drive APIs. You are
currently restricting access to all APIs using an approved allowlist, per security
policy. You need to grant access for this app. What should you do?
A. Enable all API access for Google Drive.
B. Enable the "trust domain owned apps" setting.
C. Add OAuth Client ID to the Google Drive Trusted List.
D. Allowlist the app in the Google Workspace Marketplace.
C. Add OAuth Client ID to the Google Drive Trusted List.
An administrator accidentally deleted several Workspace user accounts from the
Google Admin Console two weeks ago. How can you recover the deleted user
accounts?
A. Open a Google support ticket, and request a recovery of all recently deleted
users.
B. Sign in to the Admin console as Help Desk Admin, open user management,
filter for "recently deleted," and recover.
C. Sign in to the Admin console as Super Admin, open user management, filter
for "recently deleted," and recover.
D. Create a matter, go to legal hold, and create a legal hold for the user accounts.
C. Sign in to the Admin console as Super Admin, open user management, filter for
"recently deleted," and recover.
, You need to protect your users from untrusted senders sending encrypted
attachments via email. You must ensure that these messages are not delivered to
users' mailboxes. What step should be taken?
A. Use the security center to remove the messages from users' mailboxes.
B. Use Google Vault to remove these messages from users' mailboxes.
C. Enable a safety rule to send these types of messages to spam.
D. Enable a safety rule to send these types of messages to a quarantine.
D. Enable a safety rule to send these types of messages to a quarantine.
Your organization uses a third-party product to filter mail before it arrives at your
Workspace Domain. How should you configure Gmail to ensure that inbound
messages are not seen as a spam attack due to the volume of mail being received
from this product?
A. Add the product's IP addresses as an approved sender.
B. Allowlist the IP addresses of the third-party filtering product.
C. Add the product's IP addresses to your organization's SPF record.
D. List the IP addresses of the product as an Inbound Gateway.
D. List the IP addresses of the product as an Inbound Gateway.
Your organization is in the process of deploying Google Drive for desktop so that
your users can access Drive files directly from their desktops. For security
reasons, you want to restrict Drive for desktop to only company-owned devices.
What two steps should you take from the admin panel to restrict Drive for
desktop to only company-owned devices? (Choose two.)
A. Create a company-owned device inventory using an asset tag.
B. Devices > Endpoints > Add a filter > Management Type > Drive for desktop >
Apply
C. Apps > Google Workspace > Drive and Docs > Features and Applications >
Google Drive for Desktop > Only Allow Google Drive for desktop on authorized
devices
