[2023] Pass your Google-Workspace-Administrator exam with this 100% Free Google-Workspace-Administrator Braindump
View All Google-Workspace-Administrator Actual Exam Questions, Answers and Explanations for Free
Google Workspace is a suite of cloud-based productivity and collaboration tools that have become ubiquitous in today's digital workplace. With millions of users worldwide, Google Workspace has transformed the way organizations communicate and work together. To ensure that administrators are equipped with the skills to manage and optimize Google Workspace for their organizations, Google has developed a certification exam - the Google-Workspace-Administrator (Google Cloud Certified - Professional Google Workspace Administrator) Certification Exam.
NEW QUESTION # 48
Your organization has been on Google Workspace Enterprise for one year. Recently, an admin turned on public link sharing for Drive files without permission from security. Your CTO wants to get better insight into changes that are made to the Google Workspace environment. The chief security officer wants that data brought into your existing SIEM system.
What are two ways you should accomplish this? (Choose two.)
- A. Use the Data Export Tool to export admin audit data to your existing SIEM system
- B. Use the BigQuery export to send drive audit data to the existing SIEM system via custom code.
- C. Use the BigQuery export to send admin audit data to the existing SIEM system via custom code
- D. Use Apps Script and the Reports API to export drive audit data to the existing SIEM system
- E. Use Apps Script and the Reports API to export admin audit data to your existing SIEM system.
Answer: C,E
NEW QUESTION # 49
Your company's Google Workspace primary domain is "mycompany.com," and it has acquired a startup that is using another cloud provider with a domain named "mystartup.com." You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO's email address is [email protected], which also matches your company CEO's email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?
- A. Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
- B. Create a new Google Workspace domain with "mystartup.com," and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
- C. Create the startup employees in the "mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to "mystartup.com," and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
- D. Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
Answer: A
NEW QUESTION # 50
User A is a Basic License holder. User B is a Business License holder. These two users, along with many additional users, are in the same organizational unit at the same company. When User A attempts to access Drive, they receive the following error: "We are sorry, but you do not have access to Google Docs Editors. Please contact your Organization Administrator for access." User B is not presented with the same error and accesses the service without issues.
How do you provide access to Drive for User A?
- A. Select User A in the Directory, and under the Apps section, check whether Drive and Docs is disabled. If so, enable it in the User record.
- B. In Apps > Google Workspace, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.
- C. Select User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.
- D. In Apps > Google Workspace > Drive and Docs, select the organizational unit the users are in and enable Drive for the organizational unit.
Answer: B
Explanation:
https://support.google.com/a/answer/9050643
NEW QUESTION # 51
Your company has just received a shipment of ten Chromebooks to be deployed across the company, four of which will be used by remote employees. In order to prepare them for use, you need to register them in Google Workspace.
What should you do?
- A. Turn on the Chromebook and press Ctrl+Alt+E at the login screen to begin enterprise enrollment.
- B. In Chrome Management | Device Settings, enable Forced Re-enrollment for all devices.
- C. Instruct the employees to log in to the Chromebook. Upon login, the auto enrollment process will begin.
- D. Turn on the chromebook and log in as a Chrome Device admin. Press Ctrl+Alt+E to begin enterprise enrollment.
Answer: A
NEW QUESTION # 52
Your organization deployed Google Workspace Enterprise within the last year, with the support of a partner. The deployment was conducted in three stages: Core IT, Google Guides, and full organization. You have been tasked with developing a targeted ongoing adoption plan for your Google Workspace organization.
What should you do?
- A. Use Reports APIs to gather adoption metrics and Gmail APIs to deliver training content directly.
- B. Use a script to monitor Email attachment types and target users that aren't using Drive sharing.
- C. Use Work Insights to gather adoption metrics and target your training exercises.
- D. Use Google Guides to deliver ad-hoc training to all of their co-workers and reports.
Answer: D
Explanation:
[https://static.googleusercontent.com/media/www.google.com/en//support/enterprise/static/gapps/docs/admin/en/gapps_transition/gapps_transition_guide.pdf] identifies Google Guides as early adopters and champions that can help co-workers get up to speed quickly
NEW QUESTION # 53
An administrator accidentally deleted several Workspace user accounts from the Google Admin Console two weeks ago. How can you recover the deleted user accounts?
- A. Open a Google support ticket, and request a recovery of all recently deleted users.
- B. Create a matter, go to legal hold, and create a legal hold for the user accounts.
- C. Sign in to the Admin console as Super Admin, open user management, filter for "recently deleted." and recover.
- D. Sign in to the Admin console as Help Desk Admin, open user management, filter for "recently deleted." and recover.
Answer: C
NEW QUESTION # 54
Your CISO is concerned about third party applications becoming compromised and exposing Google Workspace data you have made available to them. How could you provide granular insight into what data third party applications are accessing?
What should you do?
- A. Create a report using the Drive Audit Activity logs.
- B. Create a reporting using the API Permissions logs for Installed Apps.
- C. Create a report using the OAuth Token Audit Activity logs.
- D. Create a report using the Calendar Audit Activity logs.
Answer: C
Explanation:
https://support.google.com/a/answer/6124308?hl=en
NEW QUESTION # 55
You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.
What two actions should you take? (Choose two.)
- A. Move the user to their own Organization Unit, and set a custom retention policy
- B. Reset the user's password, and share the new password with the litigation team.
- C. Create a hold on the user's mailbox in Google Vault
- D. Copy the user's data to a secondary account.
- E. Create a matter using Google Vault, and share the matter with the litigation team members.
Answer: C,E
Explanation:
https://support.google.com/vault/answer/2473591
NEW QUESTION # 56
Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?
- A. Add your partner sending IP addresses to an allowlist.
- B. Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.
- C. Add your partner domains IPs to the Inbound Gateway setting.
- D. Change the spoofing protection to deliver the emails to spam instead of quarantining them.
Answer: D
Explanation:
https://support.google.com/a/answer/9157861?hl=en#:~:text=Move%20email%20to,with%20this%20action.
NEW QUESTION # 57
After a recent transition to Google Workspace, helpdesk has received a high volume of password reset requests and cannot respond in a timely manner. Your manager has asked you to determine how to resolve these requests without relying on additional staff.
What should you do?
- A. Use a third-party tool for password recovery.
- B. Create a Google form to submit reset requests.
- C. Create a custom Apps Script to reset passwords.
- D. Enable non-admin password recovery.
Answer: D
NEW QUESTION # 58
A user has reported that they did not receive an email from one of their normal correspondents. What information do you need to collect from the user to investigate the cause of the issue?
- A. The sender's IP address, mail client, and mail platform.
- B. The type of device the individual is using, including the OS version, browser, and browser version.
- C. The email address of the sender and the subject and date/time of the missing message.
- D. The sender's domain so you can review their SPF and DKIM configuration.
Answer: C
NEW QUESTION # 59
Your-company.com recently started using Google Workspace. The CIO is happy with the deployment, but received notifications that some employees have issues with consumer Google accounts (conflict accounts). You want to put a plan in place to address this concern.
What should you do?
- A. Use the conflict account remove tool to remove the accounts from Google Workspace.
- B. Ask users to request a new Google Workspace account from your local admin.
- C. Use the Transfer tool for unmanaged users to find the conflict accounts.
- D. Rename the accounts to [email protected], and recreate the accounts.
Answer: C
Explanation:
https://gsuiteupdates.googleblog.com/2017/02/resolve-conflicting-accounts-with-new.html#:~:text=Using%20the%20new%20Transfer%20tool,accounts%20to%20G%20Suite%20accounts. https://support.google.com/a/answer/6178640?hl=en
NEW QUESTION # 60
You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?
- A. Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.
- B. Force TLS for your domain.
- C. Add all users of your domain to an approved sender list.
- D. Train users to click on Not Spam button for emails.
Answer: C
Explanation:
Approved senders list-Approved senders are trusted users that send email to your organization. Create an address list of approved senders so messages from these users bypass Gmail's spam filters, and recipients can decide whether they are spam or not. Create the list with individual email addresses, or by adding an entire domain.
https://support.google.com/a/answer/60752?hl=en#:~:text=Approved%20senders%20list%E2%80%94,settings%20in%20Google%20Workspace.
NEW QUESTION # 61
Your Finance team has to share quarterly financial reports in Sheets with an external auditor. The external company is not a Workspace customer and allows employees to access public sites such as Gmail and Facebook. How can you provide the ability to securely share content to collaborators that do not have a Google Workspace or consumer (Gmail) account?
- A. Use the 'Publish' feature in the Sheets editor to share the contents externally.
- B. Attach the Sheet file to an email message, and send to the external auditor.
- C. Allow external sharing with the auditor using the 'Trusted Domains' feature.
- D. Enable the 'Visitor Sharing' feature, and demonstrate it to the Finance team.
Answer: D
Explanation:
https://support.google.com/drive/answer/9195194?hl=en#:~:text=Share%20with%20visitors,with%20one%20visitor.
NEW QUESTION # 62
Your company has been engaged in a lawsuit, and the legal department has been asked to discover and hold all email for two specific users. Additionally, they have been asked to discover and hold any email referencing "Secret Project 123." What steps should you take to satisfy this request?
- A. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to secret OR project OR 123. Save.
- B. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to: (secret project 123). Save.
- C. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and enter: user1@your- company.com AND [email protected]. Set the search terms to: secret AND project AND 123. Save.
- D. Create a Matter and a Hold. Set the Hold to Gmail, set it to the top level Organization, and set the search terms to "secret project 123." Create a second Hold. Set the second Hold to Gmail, set it to Accounts, and enter: user1 @your-company.com, [email protected]. Save.
Answer: D
Explanation:
The correct way to search for the esact term is in quotes ("project 123" and not (project 123)). Ref: https://support.google.com/vault/answer/2474474?hl=en. Also, afeter doing this ytou must create the retention rule using comas to separate user from user.
NEW QUESTION # 63
A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?
- A. Suspend the user's account, search all associated users data in Google Vault, and export the data.
- B. Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.
- C. Immediately suspend the user's account, search for all the email messages in question, and forward to the legal team.
- D. Immediately suspend the user's account, assign an archived user license, and export data.
Answer: B
NEW QUESTION # 64
Your Chief Information Security Officer is concerned about phishing. You implemented 2 Factor Authentication and forced hardware keys as a best practice to prevent such attacks. The CISO is curious as to how many such email phishing attempts you've avoided since putting the 2FA+Hardware Keys in place last month.
Where do you find the information your CISO is interested in seeing?
- A. Reporting > Reports > Phishing
- B. Apps > Google Workspace > Gmail > Phishing Attempts
- C. Security > Dashboard > Spam Filter: Phishing
- D. Security > Advanced Security Settings > Phishing Attempts
Answer: C
Explanation:
https://support.google.com/a/answer/7491892?hl=en
NEW QUESTION # 65
Your business partner requests that a new custom cloud application be set up to log in without having separate credentials.
What is your business partner required to provide in order to proceed?
- A. Service provider certificate
- B. Service provider logout URL
- C. Identity Provider URL
- D. Service provider ACS URL
Answer: D
Explanation:
Reference:
we need ACS URL for adding custom SAML App , using Google as the Idp
NEW QUESTION # 66
In your organization, users have been provisioned with either Google Workspace Enterprise, Google Workspace Business, or no license, depending on their job duties, and the cost of user licenses is paid out of each division's budget. In order to effectively manage the license disposition, team leaders require the ability to look up the type of license that is currently assigned, along with the last logon date, for their direct reports.
You have been tasked with recommending a solution to the Director of IT, and have gathered the following requirements:
Team leaders must be able to retrieve this data on their own (i.e., self-service).
Team leaders are not permitted to have any level of administrative access to the Google Workspace Admin panel.
Team leaders must only be able to look up data for their direct reports.
The data must always be current to within 1 week.
Costs must be mitigated.
What approach should you recommend?
- A. Export log data to BigQuery with custom scopes.
- B. Use a third-party tool.
- C. Use App Script and filter views within a Google Sheet.
- D. Create an app using AppMaker and App Script.
Answer: D
Explanation:
https://support.google.com/a/answer/9682494?hl=en
NEW QUESTION # 67
Your company has sales offices in Madrid, Tokyo, London, and New York. The outbound email for those offices needs to include the sales person's signature and a compliance footer. The compliance footer needs to say "Should you no longer wish to receive emails about this offer, please reply with UNSUBSCRIBE." You are responsible for making sure that users cannot remove the footer.
What should you do?
- A. Send an email to each sales person with the instructions on how to add the footer to their Signature.
- B. Ensure that each sales team is in their own OU, and configure the Append Footer with footer content.
- C. Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.
- D. Ensure that each sales team is in their own OU, and configure the Append Footer with the signature and footer content translated for each locale.
Answer: B
Explanation:
Google Workspace has no way to translate for each region for the footer. https://support.google.com/a/answer/2364576?hl=en
NEW QUESTION # 68
An end user informs you that they are having issues receiving mail from a specific sender that is external to your organization. You believe the issue may be caused by the external entity's SPF record being incorrectly configured. Which troubleshooting step allows you to examine the full message headers for the offending message to determine why the messages are not being delivered?
- A. Use the Security Investigation Tool to review the message headers.
- B. Perform an SPF record check on the domain to determine whether their SPF record is valid.
- C. Use the Email Log Search to directly review the message headers.
- D. Use the Postmaster Tools API to pull the message headers.
Answer: A
Explanation:
https://support.google.com/a/answer/9300435?hl=en#zippy=%2Cstep-view-the-email-message-and-take-action%2Cstep-provide-justification-to-view-messages%2Cstep-get-started-with-your-investigation
NEW QUESTION # 69
Four weeks ago. you exported data from Google Vault and emailed the PST export file to your legal admin. They accidentally deleted the PST file and need it sent again. What steps should you take to re-send the PST file to the legal admin?
- A. Repeat the original search for the original timeframe, and export the data again.
- B. Return to the Google Vault export page, and download the ZIP file again.
- C. Ask the legal admin to return to Google Vault to download the PST file again.
- D. Return to the Email Log Search page, and download the PST file again.
Answer: A
NEW QUESTION # 70
Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.
What should you do?
- A. Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.
- B. Create a Team Drive per OU, and allow only country-specific administration of each folder.
- C. Create an OU for each country. Create an admin role and assign an admin with that role per OU.
- D. Establish a new Google Workspace tenant with their own admin for each region.
Answer: C
Explanation:
https://support.google.com/a/answer/6129577?hl=en#:~:text=Create%20and%20assign%20the%20role&text=Click%20Assign%20role.,organizational%20unit%20and%20click%20Done.
NEW QUESTION # 71
......
Google-Workspace-Administrator dumps Free Test Engine Verified By It Certified Experts: https://testking.vceprep.com/Google-Workspace-Administrator-latest-vce-prep.html