GCP professional workspace administrator practice exam.

This free practice exam covers all the required topics as per the workspace administrator exam guide.

Welcome to your googleworkspaceadministrator

Q1.The administrator of a pharmaceutical company has initiated an audit of interactions between the organisation and technology solutions providers that store or interact with sensitive corporate data. They have asked you to document the process of sharing sensitive information with Google Cloud Support when troubleshooting Google Workspace service issues. How should you describe the process for securely sharing data with Google Cloud Support during troubleshooting?

A. Files are shared by using a shared drive in your organization’s domain that is automatically created for Google Workspace support issues. The support agent is temporarily added as a viewer member.

B. Files are uploaded through a secure Google Form owned by the Google Cloud Support agent assigned to the case.

C.Files are shared to a Google-owned Workspace environment with an expiration date to revoke access when the case is closed.

D. Files are uploaded to a folder in My Drive and owned by a Google Workspace super admin, who must email a link to the Google Cloud Support agent.

Q2.A new employee has opened several help desk tickets in the last week about existing messages that do not appear in their mailbox. You have been asked to investigate the issue. The missing messages are all related to a project to expand the organisation. The messages come from internal and external senders, and the employee uses the web interface for Gmail. You check the policies for spam, blocked senders, and routing, and rule out a problem due to Gmail settings. What should be the next step in your troubleshooting?

A.Open a ticket with Google Cloud Support with the information collected about the messages from the user.

B. Create a matter in Google Vault and search for the messages by using the recipient email address and the timeframe of the last seven days. Then, export the results to a PST file.

C. Ask the user to connect to Gmail by using a third-party email client configured to use IMAP and download the last seven days of messages.

D.Use Email Log Search to search for the messages and identify how they were handled by Gmail by viewing the post-delivery status.

Q3.Since your firm switched from its former email system to Gmail in Google Workspace, there has been a marked increase in the number of complaints from employees that their messages to external contacts are received in spam folders. The CTO has asked you to reduce how often your firm's emails are classified as spam by external recipients. What should you do?

A.Change the organization’s mail exchanger (MX) records to the Google email servers for Google Workspace. Open a ticket with Google Support to add the WAN IP addresses for each office location as a verified host for your domain.

B.In the DNS records for your domain, add an SPF record for Google Workspace. In Gmail > Authenticate email, generate a DKIM record, and add it to your DNS records.

C.In Gmail Safety settings, enable all protections for spoofing and authentication. Add a custom alert to notify you when a sent message from your domain is marked as spam.

D.In the (Domain Name System) DNS records for your domain, add a Domain-based Message Authentication, Reporting, and Conformance (DMARC) record for Google Workspace. In Gmail > Authenticate email, generate a DomainKeys Identified Mail (DKIM) record, and add it to your DNS records.

Q4.Recently, proprietary research information on Google Drive was accidentally shared with a vendor by a member of one of the many research teams at a solar company. The CEO is adamant that similar errors must be prevented and has asked the IT team to revisit the Google Drive settings to tighten security. However, collaboration with several partner companies that are involved in R&D cannot be impaired. The partner companies are also using Google Workspace. What configuration changes must be made to Google Drive settings in the Google Admin console to improve the security posture of the solar company Labs?

A.Change the Sharing outside of the solar company Labs setting to OFF at the root level organizational unit to stop external sharing. Change the Distributing content outside of the solar company Labs to Anyone to allow collaboration with partner companies.

B.Add the partner companies’ Google Workspace domains to the Allowlisted domains list. Change the Sharing outside of solar company Labs to ON, but clear the checkbox for Allow users in the solar company Labs to send invitations to non-Google accounts outside of solar copmanyLabs at the root organizational unit. Clear the checkbox for When sharing outside of the Solar Company Labs is allowed, users in the Solar Company Labs can make files and published web content visible to anyone with the link.

C.Add the partner companies’ Google Workspace domains to the Allowlisted domains list. Change the Sharing outside of the solar company Labs to Allowlisted Domains at the root organizational unit. Clear the checkbox for When sharing outside of the solar company Labs is allowed, users in the solar company Labs can make files and published web content visible to anyone with the link.

D.Change the Sharing outside of the solar company Labs setting to OFF for any organizational units that contain partner companies’ employees. Change the Access Checker setting to Recipient only, suggested target audience, or public (no Google Account required).

Q5.The program manager in a hotel chain will be leaving the organization in less than a week. The new program manager will need access to the historical email of the former program manager. How will you transfer the email between accounts?

A.Use the Data migration tool to migrate Gmail data to the new program manager’s Gmail.

B.Download the former program manager’s email using a POP email client and then upload it into the new program manager’s Gmail.

C.Delete the former program manager’s Google Workspace account, select Gmail, and set the new program manager’s account as the destination.

D.Restore the data from Google Vault to the new program manager’s Gmail.

Q6.An organization has started a program that will initially utilize contractors. The contractors will require the Gmail and Google Calendar services but should not have access to any other Google Workspace services. How would you configure their access dynamically to account for turnover in personnel?

A.Create a group for the contractors and disable all Google Workspace services other than Gmail and Google Calendar for its members.

B.Click on each user and disable the appropriate Google Workspace services under Apps > Google apps.

C.Create an organizational unit for the contractors and disable all Google Workspace services other than Gmail and Google Calendar for its members.

D.Create a group for contractors and enable Gmail and Google Calendar for its members.

Q7.To combat a tremendous increase in spam messages sent to email addresses that are publicly available on your organization's websites, the security team has added a filtering server to the flow of inbound email which will append a custom header identifying messages as spam. How would you configure Gmail to accept these messages?

A.Add the private IP address of the filtering server to the Spam, Phishing, and Malware setting for Gmail.

B.Add the public IP address of the filtering server to the Spam, Phishing and Malware setting for Gmail.

C. Add the filtering server to Hosts in Gmail settings.

D.Add the filtering server to the SMTP relay settings.

Q8.A betting firm has decided to disallow access to Gmail from third-party desktop applications in order to improve security, provide a consistent email experience, and enable integration with other Google Workspace services such as Google Meet and Google Calendar. Several employees have already submitted requests, supported with business cases, to continue using third-party desktop email applications on their Windows PCs. These requests are specific to the use of Microsoft Outlook as a client and require sync with Google Calendar, Contacts, Notes, Tasks, and the Global Address List. You want to enable access to Microsoft Outlook as a client for Gmail with sync of the additional Google Workspace services like Calendar and Contacts for only those employees with approved requests. What should they do?

A.Turn on Enable Google Workspace Sync for Microsoft Outlook for my users at the root organizational unit. Install the Google Workspace Sync for Microsoft Outlook app for each user on their Windows PC.

B.Create an organizational unit for the users who will be using Microsoft Outlook. Turn on Enable Google Workspace Sync for Microsoft Outlook for my users for the organizational unit. Install the Google Workspace Sync for Microsoft Outlook app for each user on their Windows PC

C.Turn on Enable IMAP access for all users at the root organizational unit. Configure IMAP for Gmail in Microsoft Outlook for each user who has received permission to use it.

D. Create a group for the users who will be using Microsoft Outlook. Turn on Enable Google Workspace Sync for Microsoft Outlook for my users for the group.

Q9.A global dentistry chain has employed a large physician group to increase the geographic reach of its healthcare network. The physician's group uses an on-premises email server and will continue to do so for the next seven months when their mail server licensing expires. A small pilot group of employees from the physicians group will be using Gmail prior to the eventual migration of all of the group’s mail to Google Workspace. The domain for the physician's group has been added to the Google Admin console and verified. What are the steps you must take to configure Gmail in the Google Admin console for the physician's group employees who will continue to use their on-premises email server?

A.Do not change the MX records for the physicians group domain. Create an organizational unit for the physicians group employees. Disable Gmail for the organizational unit. Create a Google group, add the employees that will be part of the Gmail pilot to it, and turn the Gmail service on.

B.Change the MX records for the physicians group domain to point to Google servers. Create a Google group for the physicians group employees. In Gmail settings, add the on-premises email server as a host. Create a Routing setting to apply to the Google group only. Choose the Inbound and Internal – Receiving option for Email messages to affect. Configure the rule to route mail to the on-premises email server for the users in the group you created.

C.Change the MX records for the physicians group domain to point to Google servers. Create an organizational unit for the physicians group employees. In Gmail settings, add the on-premises email server as a host. Create a list with the users that will continue to use the on-premises email server. Create a Routing setting to apply to the organizational unit. Choose the Inbound and Internal – Receiving options for Email messages to affect. Configure the rule to route mail to the on-premises email server for the users on the list you created.

D.Change the MX records for the physicians group domain to point to Google servers. Create an organizational unit for the physicians group employees. Create a group for the users that will be piloting Gmail. Turn off Gmail for the organizational unit, but turn it on for the group.

Q10.An admin at your firm has made a change to Gmail settings that disrupted mail flow for a short time before it was reversed. The IT supervisor wants to be notified every time a Gmail setting is changed. What should they do?

A.Create a custom Alert rule for Gmail log events that sends a notification when settings are changed.

B.Create a custom Alert rule for Admin log events that sends a notification when settings are changed.

C. Monitor the admin audit logs and forward a link to the CIO when a change is made.

D. Create a custom DLP rule for Gmail that sends a notification when settings are changed.

Q11.A third-party auditor recently identified that documents from a drug trial were shared externally. It is not clear yet whether the exposure was deliberate or accidental. The Chief Information Security Officer (CISO) wants automated safeguards in place immediately to restrict external sharing of Drive files related to drug trials. What changes should you make to Drive sharing policies?

A.Set the Drive and Docs Sharing options to OFF for Sharing outside of the organization. Set General access default to Private to the owner. Disable Allow users outside so that the orgarnization can access files in shared drives.

B.Create a new label for file sensitivity, and require users to pick an option. Create a data protection rule that searches for a Google Drive label that reads “File Sensitivity” with the options restricted, confidential, or internal. As an action, choose Block external sharing for Google Drive in the rule options to receive an alert in the alert center.

C.Use the investigation tool to search for Drive log events, setting Event to Change access scope and Visibility to Shared externally. In the search results, from the Actions menu, select Audit file permissions to see the list of people the file is shared with, and remove any collaborator who is not part of the organization.

D.Set Event to Change access scope, and set Visibility to Shared externally to create an alert rule for Drive log events. Set the Alerting severity to High, and select Send to alert center. Review each instance of external sharing, and contact the user when the content is related to drug trials.

Q12.You’re part of a team that is implementing a new single sign-on (SSO) service with a third-party identity provider (IdP) that uses SAML. A group of employees across your organization will participate in a pilot of the new system. You will be configuring the SSO profile in Google Workspace for the pilot. What steps must you complete to create a working SSO profile?

A.Enter a sign-in page URL and sign-out URL in a new SSO profile.

B.Upload an X.509 PEM certificate from the third-party IdP Entity ID and enter a change password URL in a new SSO profile.

C.Enter a sign-in page URL and upload an X.509 PEM certificate in a new SSO profile.

D. Enter the IP addresses used by your organization in CIDR notation and upload an X.509 PEM certificate in a new SSO profile.

Q13.To comply with a cyber insurance policy, all employees at your organization must sign in using 2-Step Verification. Employees in IT and C-level executives need a second factor of authentication that cannot be phished. How would you deploy additional security for user logins in this scenario?

A.At the top-level organizational unit, set Allow users to turn on 2-Step Verification and set Enforcement to Off. For the Methods option, select Any except verification codes via text, phone call

B.Create a Google Group for IT and executive employees, and activate the Enforcement the option with Methods configured to Any. At the root organization level, set Allow users to turn on 2-Step Verification and activate the Enforcement option.

C.Create a Google Group for IT and executive employees. Set 2-Step Verification Enforcement to On, and also set the Methods option to Only security key. At the top-level organization level, set Allow users to turn on 2-Step Verification, and activate the Enforcement option.

D.At the top-level organizational unit, set Allow users to turn on 2-Step Verification, and activate the Enforcement option.

Q14.Security personnel at a telecoms firm have each been issued a company-owned Android phone. These devices must be unlocked with a complex passcode. If there are more than five failures when unlocking the screen, the device should be blocked from accessing Google Workspace, and an administrator should be notified. What mobile device policies should be applied to the organizational unit for the security personnel to meet the requirements?

A.By using basic mobile management, set the Universal settings > General > Password requirements to Require users to set a password. Set Universal settings > Device approvals to Require admin approval.

B.Set mobile management to Advanced. Set Universal settings > General > Password requirements > Require users to set a password to Strong. Create a rule with the template Block account on multiple failed screen unlocks, and set it to Block mobile device and send an alert.

C.Set mobile management to Advanced. Set Universal settings > General > Password requirements > Require users to set a password to Strong and check the box for Wipe device after failed attempts.

D.Set mobile management to Advanced. Set Android settings > Work profile password to Apply password requirements only on work profile apps. Create a rule with the template Block account on multiple failed screen unlocks, and set it to Block mobile device and send an alert.

Q15.At a research firm, sensitive research must be protected from access by third-party apps. How can user installation of apps from the Google Workspace Marketplace be restricted?

A.A domain install for third-party apps can be performed by an admin.

B.Users can install and run only certain apps based on an allowlist.

C.The Google Play service can be disabled under Additional Google services to prevent user installation of third-party apps.

D.Turn off the Chrome Web Store service at the top-level organization.

Q16.You need to ensure that files containing personally identifiable information like social security numbers are not shared externally from Google Drive. What security measure can be enabled to warn admins of policy violations?

A. Create a Data Protection rule from the PII template and enable Alerting.

B. Frequently review the Apps Report for Drive for External shares.

C.Check the Security Health page for Drive sharing settings recommendations.

D.Disable external sharing in Google Drive sharing settings

Q17.A pipe manufacturing company has acquired a small research company with 18 employees. They used a hosted mail provider. they have created accounts in Google Workspace for their employees. Their IT person has asked for a recommendation for a centrally managed migration of their historical data into their new accounts with minimal cost. What would you recommend as a method for migration?

A.Distribute the installation file for Google Workspace Migration for Microsoft Outlook. Instruct the employees to install and run the tool to migrate the data.

B.Export the data for each user to a PST file. Gather the PST files to a central file share and install, configure, and run the Google Workspace Migration for Microsoft Exchange.

C.Purchase a third party migration tool that is installed on a server in the network of the research company.

D.Configure and run the data migration service in the Google Workspace Admin console.

Q18.Your firm uses Google Vault for email eDiscovery. The current retention period for Gmail applied at the root organizational unit, is seven years. To comply with new email retention regulations, emails related to the testing of a particular drug product must be retained for ten years. How would you ensure that the organization meets the requirements of the retention regulations with minimum disruption to policies?

A. Modify the retention rule for Gmail to increase the duration to 3,650 days.

B.Move the employees who are working on the drug to an organizational unit. Create a custom retention rule for Gmail with a scope of the organizational unit and a retention period of 3,650 days.

C.Create a custom retention rule for Gmail with a scope of the root organization and the conditions of: start date of today’s date; terms of the drug name; and a retention period of 3,650 days.

D.Create a custom retention rule for Gmail with a scope of the root organization and conditions of: terms of the drug name; and a retention period of 3,650 days.

Q19.At an educational institution, the Google Vault retention policy for Gmail messages is five years with an expiration action of purging only permanently deleted messages. An instructor has moved messages that they received ten years ago to Trash. When will the messages be purged from Gmail?

A.They will be purged immediately.

B.They will be purged in 30 days.

C.They will not be purged until Trash is emptied by the doctor.

D.They will be purged in 60 days

Q20.A storage vendor currently has a retention policy for Gmail of ten years. In compliance with HIPAA laws, and to adhere to a new corporate legal policy, the retention period must be changed to six years. They will modify the retention policy in Google Vault to the new retention period. What will happen to messages in Gmail that were sent or received more than six years ago?

A.They will be immediately purged from user mailboxes, except for data that is part of a matter.

B.They will remain in user mailboxes until they are deleted and the trash is emptied.

C.They will remain in user mailboxes until deleted.

D.They will be immediately purged from user mailboxes, except for data that is part of a hold.