Google-Workspace-Administrator Training & Certification Get Latest Workspace Administrator Updated on Oct 07, 2025
Certification Training for Google-Workspace-Administrator Exam Dumps Test Engine
Google Workspace Administrator certification exam is designed for professionals who are responsible for managing and administering Google Workspace applications and services. Google-Workspace-Administrator exam is intended to validate the knowledge and skills required to effectively manage and maintain Google Workspace environments. Google Cloud Certified - Professional Google Workspace Administrator certification is recognized worldwide as a valuable credential in the field of IT administration.
Google-Workspace-Administrator (Google Cloud Certified - Professional Google Workspace Administrator) Certification Exam is designed for professionals who are responsible for managing Google Workspace services for their organization. Google Cloud Certified - Professional Google Workspace Administrator certification exam tests the candidate's knowledge and skills in managing user accounts, configuring security settings, deploying and managing devices, and administering Google Workspace services such as Gmail, Drive, and Chat.
NEW QUESTION # 56
Your company has an OU that contains your sales team and an OU that contains your market research team. The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties. The market research team also receives that email content, but they want it because it often contains interesting market analysis or competitive intelligence. Constant Contact is often used as the source of these messages. Your company also uses Constant Contact for your own mass email marketing. You need to set email controls at the Sales OU without affecting your own outgoing email or the market research OU.
What should you do?
- A. Create a blocked senders list at the Sales OU that contains the mass email sender addresses.
- B. Create an approved senders list at the Market Research OU that contains the mass email sender addresses.
- C. Create a blocked senders list at the root level, and then an approved senders list at the Market Research OU, both containing the mass email sender addresses.
- D. Create a blocked senders list as the Sales OU that contains the mass email sender addresses, but bypass this setting for Constant Contact emails.
Answer: D
Explanation:
Access Google Admin Console: Go to admin.google.com and sign in with your administrator account.
Navigate to Email Settings: In the Admin console, go to "Apps" > "Google Workspace" > "Gmail" > "Spam, Phishing, and Malware".
Select the Sales OU: Ensure you are configuring settings for the Sales OU specifically.
Create a Blocked Senders List:
Add Mass Email Sender Addresses: Enter the email addresses or domains of the mass email senders that the sales team finds distracting.
Bypass for Constant Contact: Create a rule to bypass this blocked senders list for emails coming from Constant Contact. This can usually be done by setting up an exception rule within the same settings area.
Apply and Save Settings: Ensure the settings are saved and propagated to the Sales OU.
Verify Configuration: Send test emails to confirm that the Sales OU is filtering unwanted mass emails while still receiving those from Constant Contact.
Reference
Google Workspace Admin Help - Set up email controls for your organization Google Workspace Admin Help - Block or allow specific email addresses
NEW QUESTION # 57
Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new "G-Team." A "G-Team' is composed of a Google Group and a Team Drive/ Secondary Calendar that is shared using that Google Group.
What two design decisions are required to implement this workflow securely? (Choose two.)
- A. The Apps Script will need to run as a Google Workspace admin.
- B. The Google Form will need to be limited to internal users only.
- C. You will need a Cloud SQL instance to store "G-Team' data.
- D. The Apps Script will need to run on a timed interval to process new entries.
- E. The Google Form will need to enforce Group naming conventions.
Answer: B
Explanation:
Subscribe to the Google Workspace Release Calendar:
Go to the Google Workspace Updates blog at https://workspaceupdates.googleblog.com/.
Subscribe to the release calendar by clicking on the "Subscribe to updates" button.
This will provide you with real-time updates about new features and changes in Google Workspace.
Join the Google Cloud Connect Community:
Visit the Google Cloud Connect Community at https://cloudconnectcommunity.google/.
Join the community to engage with other Google Workspace administrators and users.
Participate in discussions, ask questions, and stay informed about best practices and upcoming features.
Reference
Google Workspace Updates Blog
Google Cloud Connect Community
NEW QUESTION # 58
In the years prior to your organization moving to Google Workspace, it was relatively common practice for users to create consumer Google accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners who were on Google Workspace.) You were able to address active employees' use of consumer accounts during the rollout, and you are now concerned about blocking former employees who could potentially still have access to those services even though they don't have access to their corporate email account.
What should you do?
- A. Contact Google Enterprise Support to provide a list of all accounts on your domain(s) that access non-Google Workspace Google services and have them blocked.
- B. Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google Workspace and Other Google Services disabled.
- C. Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc.
accounts, so they can clean up the respective access control lists. - D. Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed account.
Answer: D
Explanation:
https://support.google.com/a/answer/6178640?hl=en
NEW QUESTION # 59
An employee has been leaking confidential salary information to an external party. You must use Vault to preserve the messages for an investigation. What should you do?
- A. Use the security investigation tool to find the messages Create a hold to preserve the messages
- B. Create a custom retention policy Use the audit feature to view captured email logs
- C. Use the search and export features to find all the messages sent externally
- D. Create a matter and add a hold on the employee's email
Answer: D
Explanation:
Access Google Vault: Go to Google Vault from the Google Admin console.
Create a Matter: Click on "Matters" and create a new matter to hold the case details and any relevant information.
Add a Hold: Within the matter, create a hold specifically on the employee's email account. This ensures that all emails sent and received by the employee are preserved.
Configure the Hold: Specify the criteria for the hold, such as the employee's email address, and set the scope to include all messages.
Save the Hold: Once configured, save the hold. This will preserve all relevant messages for the investigation.
Reference:
Google Vault Help: Create and manage matters
Google Vault Help: Place data on hold
NEW QUESTION # 60
Recently your organization has had an increase in messages marked as spam You need to quickly and efficiently obtain detailed information regarding each message What should you do?
- A. Create an investigation by using a SQL query to search for all spam audit logs exported to BigQuery
- B. Use Google Vault to put all messages marked as spam in a legal hold and review the messages
- C. Send an alert to all users to mark all suspicious Gmail messages as spam and review the Alert center messages
- D. Use the spam filter report in the security dashboard to see messages Google's spam filter marked as spam during a specific time period
Answer: D
Explanation:
Access Security Dashboard: Go to the Google Admin console and navigate to the 'Security' section.
Open Spam Filter Report: In the security dashboard, open the spam filter report.
Filter by Time Period: Select the specific time period you want to analyze.
Review Spam Messages: Review the detailed information regarding each message marked as spam by Google's spam filter.
Take Necessary Actions: Use the information from the report to adjust spam filters, user alerts, or take other necessary actions to manage spam more effectively.
Reference
Security Dashboard
Email Log Search
NEW QUESTION # 61
Your Security Officer ran the Security Health Check and found the alert that "Installation of mobile applications from unknown sources" was occurring. They have asked you to find a way to prevent that from happening.
Using Mobile Device Management (MDM), you need to configure a policy that will not allow mobile applications to be installed from unknown sources.
What MDM configuration is needed to meet this requirement?
- A. In Device Management > Setup > Device Approvals menu, configure the "Requires Admin approval" option.
- B. In the Application Management menu, configure the whitelist of apps that Android and iOS devices are allowed to install.
- C. In Android Settings, ensure that "Allow non-Play Store apps from unknown sources installation" is unchecked.
- D. In the Application Management menu, configure the whitelist of apps that Android, iOS devices, and Active Sync devices are allowed to install.
Answer: C
Explanation:
Reference: https://support.google.com/a/answer/7491893?hl=en
NEW QUESTION # 62
Your organization implemented Single Sign-On (SSO) for the multiple cloud-based services it uses. During authentication, one service indicates that access to the SSO provider is not possible due to invalid information. What should you do?
- A. Run nslookup to confirm that the service exists.
- B. Ensure that Microsoft's Active Directory Federation Services 2.0 sends encrypted SAML Responses in default configurations.
- C. Verify that the Audience element in the SAML Response matches the assertion consumer service (ACS) URL
- D. Update the validation certificate.
Answer: C
Explanation:
If a service indicates that access to the SSO provider is not possible due to invalid information, you should verify that the Audience element in the SAML Response matches the assertion consumer service (ACS) URL. This check ensures that the SAML Response is directed to the correct service, resolving the issue with authentication.
Reference:
Google Workspace Admin Help - Troubleshoot SSO issues
Google Workspace Admin Help - SAML SSO setup
NEW QUESTION # 63
Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.
What two things should you do? (Choose two.)
- A. Enable a User Policy of Multiple Sign In Access and add just the employee email address.
- B. Enroll a 2-Factor hardware key on the device using the employee email address.
- C. Disable Guest Mode and Public Sessions.
- D. Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.
- E. Enable a Device Policy of Sign In Screen and add the employee email address.
Answer: C,D
Explanation:
Access Admin Console: Log into your Google Workspace Admin Console.
Disable Guest Mode and Public Sessions: Navigate to Devices > Chrome > Settings. Disable Guest Mode and Public Sessions to prevent unauthorized users from accessing the device.
Restrict Sign-In: Go to Device Settings > User & Browser Settings.
Configure Device Policy: Enable the policy "Restrict Sign-In to List of Users." Add Employee Email: Add the specific employee's email address to the list of allowed users. This ensures only the specified employee can sign in to the device.
Reference
Google Support: Configure Chrome devices
NEW QUESTION # 64
The human resources (HR) team needs a centralized place to share key documents with the entire organization while protecting confidential documents and mitigating the risk of losing documents when someone leaves.
These documents must be editable by the HR team members. What is the best way to set this up?
- A. Create a shared drive for the non-confidential files, give the HR team manager access, and give contributor access to the entire organization.
- B. Create a shared drive for all files, give the HR team content manager access, and give view access to the organization.
- C. Create a shared drive for non-confidential files, give the HR team content manager access, and give view access to the organization.
- D. Have the HR lead create a folder in their MyDrive for the non-confidential files, give edit access to the HR team, and give view access to the organization.
Answer: C
Explanation:
To meet the HR team's requirements, the best approach is to create a shared drive for non-confidential files, give the HR team content manager access, and give view access to the organization. This setup ensures that the HR team can edit documents while the entire organization can view them. Confidential documents can be stored in a separate location with restricted access to mitigate risks.
References:
* Google Workspace Admin Help - Create shared drives
* Google Workspace Admin Help - Shared drives access levels
NEW QUESTION # 65
Your Accounts Payable department is auditing software license contracts companywide and has asked you to provide a report that shows the number of active and suspended users by organization unit, which has been set up to match the Regions and Departments within your company. You need to produce a Google Sheet that shows a count of all active user accounts and suspended user accounts by Org unit.
What should you do?
- A. From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.
- B. From the Google Workspace Reports Menu, run and download the Accounts Aggregate report, and export the data to Google Sheets.
- C. From the Admin Console Users Menu, download a list of all Users to Google Sheets, and join that with a list of ORGIDs pulled from the Reports API.
- D. From the Admin Console Billing Menu, turn off auto-assign, and then click into Assigned Users and export the data to Sheets.
Answer: B
Explanation:
Admin Console: Log into the Google Admin console at admin.google.com.
Reports Menu: Navigate to Reports > Reports.
Accounts Aggregate Report:
Under the "Reports" section, select "Accounts".
Click on "Aggregate" to view the report.
Download Data:
Click on the download icon and choose "Google Sheets" as the format to export the data.
This report includes a count of active and suspended users by organizational unit.
Google Sheets:
Open the downloaded report in Google Sheets.
Review and organize the data as needed to present it by Org unit, ensuring it matches the Regions and Departments within your company.
Reference
Google Workspace Admin: Reports overview
Google Workspace Admin: Aggregate reports
NEW QUESTION # 66
Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password. What steps should you take to troubleshoot this issue?
- A. Reset the user's password in Active Directory.
- B. Confirm that the Password Sync service is running on all domain controllers.
- C. Reauthorize the Password Sync tool in the Google Workspace Admin Console.
- D. Reinstall Password Sync on all domain controllers.
Answer: B
Explanation:
Check Service Status: Verify that the Password Sync service is running on all domain controllers by accessing the Services panel on each domain controller.
Restart Service if Necessary: If the service is not running, restart it and ensure it is set to start automatically.
Review Logs: Check the event logs on the domain controllers for any errors related to Password Sync.
Sync Test: Perform a password change on a test user account and verify that the change is synchronized with Google Workspace.
Reference:
Google Workspace Admin Help - Set Up Password Sync
Google Workspace Admin Help - Troubleshoot Password Sync
NEW QUESTION # 67
A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.
You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user's busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs.
What two actions should be taken on this call with the user? (Choose two.)
- A. Record a HAR file of the user composing a new email.
- B. Take screenshots of the user's screen when composing an email.
- C. Check the Users > App Users Activity report.
- D. Ask the user to send an email to you so you can check the headers.
- E. Use the Email log search in the Admin panel.
Answer: A,B
Explanation:
Recording a HAR file (B):
HAR (HTTP Archive) files contain a detailed log of web browser's interaction with a site. Recording a HAR file while the user is composing a new email will provide detailed information about any network issues, errors, or delays in the communication between the user's browser and Gmail servers. This can help diagnose connectivity issues, session timeouts, or any other underlying problems that may prevent drafts from being saved.
Taking Screenshots (C):
Taking screenshots of the user's screen while composing an email can help visually capture any error messages, unusual behavior, or interface issues that the user might be experiencing. Screenshots provide a clear view of the user's environment, including the browser settings, extensions, and any prompts or notifications that appear during the email composition process.
Detailed Steps:
Recording a HAR File:
Instruct the user on how to open the Developer Tools in their browser (usually by pressing F12 or right-clicking on the page and selecting "Inspect").
Navigate to the Network tab within Developer Tools.
Ensure the "Preserve log" option is checked to retain the recorded log across different pages.
Start recording the HAR file before the user starts composing a new email.
After reproducing the issue, stop the recording and save the HAR file.
Have the user send the HAR file to you for analysis.
Taking Screenshots:
Guide the user on taking screenshots while they are composing a new email.
Ensure they capture key steps, including opening the compose window, typing the email, and any errors or unusual behavior that occurs.
The user can take multiple screenshots if necessary to provide a comprehensive view of the issue.
Ask the user to share these screenshots with you for further investigation.
Why the Other Options Are Less Effective:
A . Ask the user to send an email to you so you can check the headers:
This does not directly help diagnose why drafts are not being saved, as email headers mainly provide information about the routing and delivery of sent emails, not drafts.
D . Use the Email log search in the Admin panel:
Email log search is useful for tracking sent and received emails but does not provide insights into drafts or unsaved work.
E . Check the Users > App Users Activity report:
This report shows user activity but may not give specific details about the draft-saving process or connectivity issues faced during email composition.
Reference
Google Workspace Admin Help: Analyze connectivity issues using HAR files Google Chrome DevTools: Network Analysis Google Workspace Admin Help: User reports in the Admin console
NEW QUESTION # 68
Madeupcorp.com is in the process of migrating from a third-party email system to Google Workspace. The VP of Marketing is concerned that her team already administers the corporate AdSense, AdWords, and YouTube channels using their @madeupcorp.com email addresses, but has not tracked which users have access to which service. You need to ensure that there is no disruption.
What should you do?
- A. Use a Google Form to survey the Marketing department users.
- B. Contact Google Enterprise Support to identify affected users.
- C. Run the Transfer Tool for Unmanaged users.
- D. Assure the VP that there is no action required to configure Google Workspace.
Answer: C
Explanation:
* Assess the Current State: Identify which users are using the @madeupcorp.com email addresses for services like AdSense, AdWords, and YouTube.
* Use the Transfer Tool for Unmanaged Users:
* Access Google Admin Console: Go to admin.google.com and sign in with your administrator account.
* Navigate to Tools: In the Admin console, go to "Tools" and then select "Transfer tool for unmanaged users."
* Enter Domain Information: Enter the domain name (madeupcorp.com) and verify the domain.
* List Unmanaged Users: The tool will generate a list of unmanaged users who are using their
@madeupcorp.com email addresses.
* Send Transfer Requests: Send transfer requests to these users, prompting them to accept the transfer to the managed Google Workspace account.
* Follow Up: Ensure all users have accepted the transfer request to avoid any disruptions in accessing Google services with their corporate email addresses.
* Verify: Confirm that the transferred accounts are now managed under the Google Workspace domain.
References
* Google Workspace Admin Help - Transfer tool for unmanaged users
NEW QUESTION # 69
Your company has just acquired a new group of users. They have been provisioned into the Google Workspace environment with your primary domain as their primary email address. These new users still need to receive emails from their previous domain. What is the best way to achieve this for these new users, without updating the information of preexisting users?
- A. Add the acquired domain as an alias to the primary Google Workspace domain.
- B. Without adding a domain, update each user's email information with the previous domain.
- C. Add the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.
- D. Update the Google-provided test domain to be the domain of the acquired company, and then update the email information of all new users with alias emails.
Answer: C
Explanation:
To ensure new users receive emails from their previous domain without affecting existing users:
Add the acquired domain as a secondary domain to the primary Google Workspace domain.
Update the email information of all new users to include alias emails from the previous domain. This allows them to receive emails sent to their old addresses.
This method segregates the old and new user groups effectively and maintains the integrity of the email addresses.
Reference:
Google Workspace Admin Help: Manage domains
NEW QUESTION # 70
Your company wants to provide secure access for its employees. The Chief Information Security Officer disabled peripheral access to devices, but wants to enable 2-Step verification. You need to provide secure access to the applications using Google Workspace.
What should you do?
- A. Configure USB Yubikeys for all users.
- B. Enable authentication via the Google Authenticator.
- C. Enable additional security verification via email.
- D. Deploy browser or device certificates via Google Workspace.
Answer: B
Explanation:
2-Step Verification (2SV):
2-Step Verification adds an extra layer of security by requiring users to verify their identity using a second factor in addition to their password. This helps protect against unauthorized access, even if the password is compromised.
Google Authenticator:
Google Authenticator is a mobile app that generates time-based one-time passcodes (TOTP) for 2SV. It works even when the device is offline, providing a secure and reliable second factor for authentication.
Implementation Steps:
Enable 2-Step Verification:
Go to the Google Admin console (admin.google.com).
Navigate to Security > Authentication > 2-Step Verification.
Turn on 2-Step Verification for the organization.
Deploy Google Authenticator:
Instruct users to download the Google Authenticator app from their respective app stores (iOS or Android).
Provide guidance on setting up Google Authenticator with their Google Workspace accounts.
Users will scan a QR code provided during the setup process to link their account with the Authenticator app.
Advantages of Google Authenticator:
Security: It provides a highly secure method of 2-step verification as the codes are generated on the user's device and change every 30 seconds.
Ease of Use: It's easy to set up and use, with a straightforward user interface.
Offline Functionality: Codes can be generated even without internet access, ensuring consistent access to 2SV codes.
Why Other Options Are Less Suitable:
A . Enable additional security verification via email:
Email-based verification is less secure than app-based 2SV because email accounts can be more easily compromised.
C . Deploy browser or device certificates via Google Workspace:
While device certificates add security, they are typically used for device management and access control rather than for 2-step verification purposes.
D . Configure USB Yubikeys for all users:
USB Yubikeys are highly secure and suitable for 2SV, but they require physical distribution and management of hardware tokens, which can be logistically complex and costly. Given the context of disabled peripheral access, this option might contradict the policy of the Chief Information Security Officer.
Reference:
Google Workspace Admin Help: Set up 2-Step Verification
Google Workspace Security: 2-Step Verification
NEW QUESTION # 71
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?
- A. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
- B. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
- C. Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.
- D. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
Answer: B
Explanation:
"Inherited permissions can't be removed from a file or folder in a shared drive".
ref: https://developers.google.com/drive/api/v3/manage-sharing
NEW QUESTION # 72
Your company is using macOS devices for all employees and has built a process to allow a Google account to be used as credentials (or the device Your company wants to manage newly acquired Windows 10 devices with Google Workspace endpoint management and have employees use their Google Workspace account as login credentials for Windows 10 Which steps should you take to enable this?
Choose 2 answers
- A. Sync the Google Accounts and password to AD via Google Cloud Directory Sync V1 (GCDS)
- B. Enable Windows device management in Devices > Mobile & endpoints > Settings > Windows settings
- C. Install and configure Password Sync on each Active Directory (AD) domain controller
- D. Install and configure Google Credential Provider for Windows (GCPW) on each device
- E. Configure Chrome policies on Windows to push advanced device management policies
Answer: B,D
Explanation:
* Install GCPW on Windows Devices:
* Download the Google Credential Provider for Windows (GCPW) from Google's official site.
* Install GCPW on each Windows device.
* Configure GCPW to allow users to sign in using their Google Workspace credentials.
* Enable Windows Device Management:
* Go to admin.google.com and sign in with your admin account.
* Navigate to Devices > Mobile & endpoints > Settings > Windows settings.
* Enable Windows device management to allow Google Workspace to manage the Windows 10 devices.
* Configure Settings and Policies:
* Apply necessary device policies and settings through the Admin console to ensure security and compliance.
* User Login:
* Users can now use their Google Workspace credentials to log into their Windows 10 devices, and the devices will be managed via Google Workspace endpoint management.
This setup integrates Windows 10 devices with Google Workspace for unified credential management and device policy enforcement.
References
* Set up Google Credential Provider for Windows (GCPW)
* Set up and manage Windows devices
NEW QUESTION # 73
......
Google-Workspace-Administrator certification exam is ideal for professionals with a background in IT administration, system administration, or network administration. Google Cloud Certified - Professional Google Workspace Administrator certification is tailored to individuals who are responsible for managing Google Workspace environments in small, medium, or large organizations. Google-Workspace-Administrator exam covers a wide range of topics related to Google Workspace administration, including managing domains, users, groups, and devices, configuring security settings, implementing compliance policies, and managing data migration.
Step by Step Guide to Prepare for Google-Workspace-Administrator Exam: https://pass4sure.dumps4pdf.com/Google-Workspace-Administrator-valid-braindumps.html