Google Workspace Administrator 2025 — 50 Q&A Complete
Study Guide Verified
Series:
CrashCourses Professional Study Series
Author:
Dr Z. Moomba, MBChB, MRCPsych | BethelWellness Ltd
Exam Target:
Google Workspace Admin
Year:
2025/2026
Format:
50 Questions with Verified Answers and Rationales
>
Author's Note:
This document is an original work produced for the CrashCourses Professional Study Series.
Clinical questions and professional scenarios were composed by Dr Z. Moomba based on current
exam objectives, published guidelines, and evidence-based sources (2024–2025). All patient
names, ages, and case details are fictional. Any resemblance to existing published Q&A banks is
coincidental. For personal study use only — not for reproduction or redistribution.
SECTION A — FOUNDATIONS
1. A regional hospital trust with 450 employees is migrating to Google Workspace. The Chief
Information Officer requires eDiscovery (Google Vault) and advanced endpoint management to
secure patient data. Which Google Workspace edition is the minimum required to support this user
count and feature set?
A) Google Workspace Business Standard
B) Google Workspace Business Plus
C) Google Workspace Enterprise Standard
D) Google Workspace Enterprise Plus
,Answer: C
Rationale:
Google Workspace Enterprise Standard is the minimum requirement because the organisation
exceeds the 300-user cap applied to all Business editions.
The key discriminating feature is the 450-user requirement; any organisation over 300 users must
adopt an Enterprise (or Education) tier.
Business Plus is the most tempting wrong answer because it includes Vault and advanced
endpoint management, but it fails entirely on the strict 300-seat constraint.
Examiner Pearl: Always check the user count first in licensing scenarios; the 300-user limit for
Business tiers is an absolute administrative barrier. [Google Workspace Admin Help 2025]
2. A primary care network needs to restrict external sharing for its "Clinical Records" Shared Drive
without impacting the administrative staff's ability to share public health flyers. What is the most
effective way to configure this in the Admin Console?
A) Turn off external sharing globally in the Drive settings.
B) Place the Clinical Records Shared Drive in a specific Organizational Unit (OU) and disable
external sharing for that OU.
C) Assign a custom admin role to the clinical staff to prevent sharing.
D) Use a Groups-based policy to disable Drive access for clinical staff.
Answer: B
Rationale:
Shared Drives can be assigned to specific Organizational Units (OUs), allowing administrators to
apply granular Drive policies (like external sharing restrictions) to specific data silos.
The key discriminator here is the ability to apply policies directly to the Shared Drive's OU, rather
than relying on user-level OU policies which might not cover the Drive itself.
Global restriction (A) is a tempting wrong answer, but it fails the requirement because
administrative staff still need to share flyers externally.
Examiner Pearl: In 2025, Shared Drives are treated as distinct entities that can be organized into
OUs, allowing for highly targeted data governance independent of user OUs. [Google Drive
Enterprise Architecture 2025]
3. Dr. Aris, a clinical lead, needs the ability to reset passwords and suspend accounts exclusively for
the junior doctors in the "Pediatrics" Organizational Unit. How should the Super Admin grant these
,permissions without over-provisioning access?
A) Grant Dr. Aris the pre-built User Management Admin role globally.
B) Create a custom admin role with user management privileges and assign it to Dr. Aris, scoped
only to the "Pediatrics" OU.
C) Move Dr. Aris into the "Pediatrics" OU and grant the Help Desk Admin role.
D) Give Dr. Aris Super Admin privileges but instruct him verbally to only manage Pediatrics.
Answer: B
Rationale:
Custom admin roles allow Super Admins to define specific privileges (like password resets) and
assign them with a target scope (a specific OU).
The key discriminating feature is the precise scoping; this ensures Dr. Aris has zero administrative
power over other departments.
Granting the Help Desk Admin role (A or C) is tempting, but if applied globally, it violates the
principle of least privilege by allowing him to reset passwords across the entire trust.
Examiner Pearl: Delegated administration using custom roles and targeted OUs is the gold
standard for decentralized IT management in large healthcare settings. [NIST Least Privilege
Guidelines 2025]
4. A mental health clinic wants to implement Gemini for Google Workspace to help clinicians draft
referral letters in Google Docs. The clinic currently uses Business Standard. What administrative
action is required to enable these AI features?
A) Upgrade the entire domain to Enterprise Plus.
B) Enable the "Help me write" lab feature in the Google Workspace core settings.
C) Purchase and assign the Gemini for Google Workspace add-on licenses to the specific
clinicians.
D) Turn on Google Cloud Natural Language API in the developer console.
Answer: C
Rationale:
Gemini for Google Workspace is a premium AI add-on that must be purchased and assigned on a
per-user basis, regardless of the underlying base edition.
The key discriminator is that the AI features in Docs/Gmail are not free toggles; they require
specific add-on licenses assigned directly to the users who need them.
, Upgrading to Enterprise Plus (A) is tempting as it sounds like an all-inclusive tier, but it fails
because Gemini add-ons are still billed and licensed separately from the base Enterprise tiers in
2025.
Examiner Pearl: Gemini licensing is modular; you can selectively assign AI capabilities to high-
value users (like clinicians) without paying for the entire organization. [Google Workspace AI
Administration 2025]
5. The hospital's centralized triage desk receives hundreds of patient inquiries daily via a single
email address. Multiple triage nurses need to read, assign, and mark these emails as resolved. Which
Google Workspace feature best supports this workflow?
A) A standard Google Group with the "Email list" configuration.
B) A Gmail delegated inbox shared with all nurses.
C) A Google Group configured as a Collaborative Inbox.
D) A Google Chat space with threaded replies.
Answer: C
Rationale:
A Collaborative Inbox allows members of a Google Group to assign topics to themselves, mark
them as complete, and manage shared external communications efficiently.
The key discriminator is the specific need to "assign" and "mark resolved," which are native
features of the Collaborative Inbox UI, unlike a standard distribution list.
A delegated inbox (B) is a tempting alternative, but it fails at scale; Google limits concurrent
access to delegated accounts, causing lockouts when multiple nurses work simultaneously.
Examiner Pearl: Collaborative Inboxes are ideal for support/triage teams because they provide
lightweight ticketing functionality directly within the Google Groups interface. [Google Workspace
Best Practices 2025]
6. A newly hired junior doctor needs their Google Workspace account provisioned. The HR system
automatically triggers an LDAP sync. Which tool bridges the hospital's on-premises Active Directory
with Google Workspace to automate this user creation?
A) Google Workspace Migrate
B) Google Cloud Directory Sync (GCDS)
C) SAML 2.0 Auto-Provisioning
D) Google Takeout for Domains
Study Guide Verified
Series:
CrashCourses Professional Study Series
Author:
Dr Z. Moomba, MBChB, MRCPsych | BethelWellness Ltd
Exam Target:
Google Workspace Admin
Year:
2025/2026
Format:
50 Questions with Verified Answers and Rationales
>
Author's Note:
This document is an original work produced for the CrashCourses Professional Study Series.
Clinical questions and professional scenarios were composed by Dr Z. Moomba based on current
exam objectives, published guidelines, and evidence-based sources (2024–2025). All patient
names, ages, and case details are fictional. Any resemblance to existing published Q&A banks is
coincidental. For personal study use only — not for reproduction or redistribution.
SECTION A — FOUNDATIONS
1. A regional hospital trust with 450 employees is migrating to Google Workspace. The Chief
Information Officer requires eDiscovery (Google Vault) and advanced endpoint management to
secure patient data. Which Google Workspace edition is the minimum required to support this user
count and feature set?
A) Google Workspace Business Standard
B) Google Workspace Business Plus
C) Google Workspace Enterprise Standard
D) Google Workspace Enterprise Plus
,Answer: C
Rationale:
Google Workspace Enterprise Standard is the minimum requirement because the organisation
exceeds the 300-user cap applied to all Business editions.
The key discriminating feature is the 450-user requirement; any organisation over 300 users must
adopt an Enterprise (or Education) tier.
Business Plus is the most tempting wrong answer because it includes Vault and advanced
endpoint management, but it fails entirely on the strict 300-seat constraint.
Examiner Pearl: Always check the user count first in licensing scenarios; the 300-user limit for
Business tiers is an absolute administrative barrier. [Google Workspace Admin Help 2025]
2. A primary care network needs to restrict external sharing for its "Clinical Records" Shared Drive
without impacting the administrative staff's ability to share public health flyers. What is the most
effective way to configure this in the Admin Console?
A) Turn off external sharing globally in the Drive settings.
B) Place the Clinical Records Shared Drive in a specific Organizational Unit (OU) and disable
external sharing for that OU.
C) Assign a custom admin role to the clinical staff to prevent sharing.
D) Use a Groups-based policy to disable Drive access for clinical staff.
Answer: B
Rationale:
Shared Drives can be assigned to specific Organizational Units (OUs), allowing administrators to
apply granular Drive policies (like external sharing restrictions) to specific data silos.
The key discriminator here is the ability to apply policies directly to the Shared Drive's OU, rather
than relying on user-level OU policies which might not cover the Drive itself.
Global restriction (A) is a tempting wrong answer, but it fails the requirement because
administrative staff still need to share flyers externally.
Examiner Pearl: In 2025, Shared Drives are treated as distinct entities that can be organized into
OUs, allowing for highly targeted data governance independent of user OUs. [Google Drive
Enterprise Architecture 2025]
3. Dr. Aris, a clinical lead, needs the ability to reset passwords and suspend accounts exclusively for
the junior doctors in the "Pediatrics" Organizational Unit. How should the Super Admin grant these
,permissions without over-provisioning access?
A) Grant Dr. Aris the pre-built User Management Admin role globally.
B) Create a custom admin role with user management privileges and assign it to Dr. Aris, scoped
only to the "Pediatrics" OU.
C) Move Dr. Aris into the "Pediatrics" OU and grant the Help Desk Admin role.
D) Give Dr. Aris Super Admin privileges but instruct him verbally to only manage Pediatrics.
Answer: B
Rationale:
Custom admin roles allow Super Admins to define specific privileges (like password resets) and
assign them with a target scope (a specific OU).
The key discriminating feature is the precise scoping; this ensures Dr. Aris has zero administrative
power over other departments.
Granting the Help Desk Admin role (A or C) is tempting, but if applied globally, it violates the
principle of least privilege by allowing him to reset passwords across the entire trust.
Examiner Pearl: Delegated administration using custom roles and targeted OUs is the gold
standard for decentralized IT management in large healthcare settings. [NIST Least Privilege
Guidelines 2025]
4. A mental health clinic wants to implement Gemini for Google Workspace to help clinicians draft
referral letters in Google Docs. The clinic currently uses Business Standard. What administrative
action is required to enable these AI features?
A) Upgrade the entire domain to Enterprise Plus.
B) Enable the "Help me write" lab feature in the Google Workspace core settings.
C) Purchase and assign the Gemini for Google Workspace add-on licenses to the specific
clinicians.
D) Turn on Google Cloud Natural Language API in the developer console.
Answer: C
Rationale:
Gemini for Google Workspace is a premium AI add-on that must be purchased and assigned on a
per-user basis, regardless of the underlying base edition.
The key discriminator is that the AI features in Docs/Gmail are not free toggles; they require
specific add-on licenses assigned directly to the users who need them.
, Upgrading to Enterprise Plus (A) is tempting as it sounds like an all-inclusive tier, but it fails
because Gemini add-ons are still billed and licensed separately from the base Enterprise tiers in
2025.
Examiner Pearl: Gemini licensing is modular; you can selectively assign AI capabilities to high-
value users (like clinicians) without paying for the entire organization. [Google Workspace AI
Administration 2025]
5. The hospital's centralized triage desk receives hundreds of patient inquiries daily via a single
email address. Multiple triage nurses need to read, assign, and mark these emails as resolved. Which
Google Workspace feature best supports this workflow?
A) A standard Google Group with the "Email list" configuration.
B) A Gmail delegated inbox shared with all nurses.
C) A Google Group configured as a Collaborative Inbox.
D) A Google Chat space with threaded replies.
Answer: C
Rationale:
A Collaborative Inbox allows members of a Google Group to assign topics to themselves, mark
them as complete, and manage shared external communications efficiently.
The key discriminator is the specific need to "assign" and "mark resolved," which are native
features of the Collaborative Inbox UI, unlike a standard distribution list.
A delegated inbox (B) is a tempting alternative, but it fails at scale; Google limits concurrent
access to delegated accounts, causing lockouts when multiple nurses work simultaneously.
Examiner Pearl: Collaborative Inboxes are ideal for support/triage teams because they provide
lightweight ticketing functionality directly within the Google Groups interface. [Google Workspace
Best Practices 2025]
6. A newly hired junior doctor needs their Google Workspace account provisioned. The HR system
automatically triggers an LDAP sync. Which tool bridges the hospital's on-premises Active Directory
with Google Workspace to automate this user creation?
A) Google Workspace Migrate
B) Google Cloud Directory Sync (GCDS)
C) SAML 2.0 Auto-Provisioning
D) Google Takeout for Domains
