Get 2023 Most Reliable Google Google-Workspace-Administrator Training Materials
The Realest Study Materials Google-Workspace-Administrator Dumps
Google Google-Workspace-Administrator Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
| Topic 12 |
|
| Topic 13 |
|
NEW QUESTION 15
Your company's Google Workspace primary domain is "mycompany.com," and it has acquired a startup that is using another cloud provider with a domain named "mystartup.com." You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO's email address is [email protected], which also matches your company CEO's email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?
- A. Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
- B. Create the startup employees in the "mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to "mystartup.com," and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
- C. Create a new Google Workspace domain with "mystartup.com," and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
- D. Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
Answer: A
NEW QUESTION 16
As a team manager, you need to create a vacation calendar that your team members can use to share their time off. You want to use the calendar to visualize online status for team members, especially if multiple individuals are on vacation What should you do to create this calendar?
- A. Request the creation of a calendar resource, configure the calendar to "Automatically add all invitations to this calendar," and give your team "See only free/busy" access.
- B. Request the creation of a calendar resource, configure the calendar to "Auto-accept invitations that do not conflict," and give your team "See all event details" access.
- C. Create a secondary calendar under your account, and give your team "Make changes to events" access.
- D. Create a secondary calendar under your account, and give your team "See only free/busy" access
Answer: A
Explanation:
https://support.google.com/a/answer/1034381?hl=en#:~:text=Automatically%20add%20all%20invitations%20to%20this%20calendar%E2%80%94All%20invitations%20show%20up%20on%20the%20resource%27s%20calendar%20even%20if%20some%20of%20them%20are%20for%20events%20that%20take%20place%20at%20the%20same%20time.
NEW QUESTION 17
What steps does an administrator need to take to enforce TLS with a particular domain?
- A. Configure an alternate secure route with the receiving domain.
- B. Set up DKIM authentication with the receiving domain.
- C. Set up secure transport compliance with the receiving domain.
- D. Enable email safety features with the receiving domain.
Answer: C
Explanation:
https://support.google.com/a/answer/2520500?hl=en#:~:text=Add%C2%A0the%20Secure%20transport%20(TLS)%20compliance%C2%A0setting%C2%A0to%20always%20use%20TLS%20for%20email%20sent%20to%20and%20from%20domains%20and%20addresses%20that%20you%20specify.
NEW QUESTION 18
Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites. What should you do?
- A. Set all API services to "restricted access" and ensure that all connected apps have limited access.
- B. Modify your Marketplace Settings to block users from installing any app from the Marketplace.
- C. Remove all client IDs and scopes from the list of domain-wide delegation API clients.
- D. Block each connected app's access.
Answer: C
Explanation:
https://support.google.com/a/answer/162106?hl=en#zippy=%2Cview-edit-or-delete-clients-and-scopes:~:text=View%2C%20edit%2C%20or,immediately%20stop%20working.
NEW QUESTION 19
You are a Workspace Administrator with a mix of Business Starter and Standard Licenses for your users. A Business Starter User in your domain mentions that they are running out of Drive Storage Quot a. Without deleting data from Drive, what two actions can you take to alleviate the quota concerns for this user? (Choose two.)
- A. Manually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.
- B. Perform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.
- C. Add other users as "Editors" on the Drive object, thus spreading the storage quota debt between all of them.
- D. Make another user the "Owner" of the Drive objects, thus transferring the storage quota debt to them.
- E. Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.
Answer: D,E
NEW QUESTION 20
Your chief compliance officer is concerned about API access to organization data across different cloud vendors. He has tasked you with compiling a list of applications that have API access to Google Workspace data, the data they have access to, and the number of users who are using the applications.
How should you compile the data being requested?
- A. Review the API permissions installed apps list, and export the list.
- B. Review the token audit log, and compile a list of all the applications and their scopes.
- C. Create a survey via Google forms, and collect the application data from users.
- D. Review the authorized applications for each user via the Google Workspace Admin panel.
Answer: B
Explanation:
https://support.google.com/a/answer/7281227?hl=en
https://support.google.com/a/answer/6124308?hl=en
NEW QUESTION 21
With the help of a partner, you deployed Google Workspace last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things Google Workspace so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform.
What should you do?
- A. Put half of your organization on the Rapid Release Schedule to highlight differences.
- B. Regularly scan the admin console and keep track of any new features you identify.
- C. Create a Feature Release alert in the Alert Center to be alerted to new functionality.
- D. Develop a cadence of regular roadmap and business reviews with your partner.
Answer: D
Explanation:
https://support.google.com/a/answer/6131189?hl=en
NEW QUESTION 22
Your company has acquired a new company in Japan and wants to add all employees of the acquisition to your existing Google Workspace domain. The new company will retain its original domain for email addresses and, due to the very sensitive nature of its work, the new employees should not be visible in the global directory. However, they should be visible within each company's separate directory. What should you do to meet these requirements?
- A. Redesign your OU organization to have 2 child OUs for each company directly under the root. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the OU.
- B. Under Directory Settings > Contact sharing, disable the contact sharing option and wait for 24 hours to allow the settings to propagate before creating the new employee accounts.
- C. Create a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.
- D. Create one dynamic group for each company based on a custom attribute defining the company. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the dynamic group.
Answer: A
Explanation:
https://support.google.com/a/answer/7566446?hl=en&ref_topic=9832541
NEW QUESTION 23
After making a recent migration to Google Workspace, you updated your Google Cloud Directory Sync configuration to synchronize the global address list. Users are now seeing duplicate contacts in their global directory in Google Workspace. You need to resolve this issue.
What should you do?
- A. Create a new global directory, and delete the original.
- B. Enable directory contact deduplication in the Google Workspace Admin panel.
- C. Update shared contact search rules to exclude internal users.
- D. Train users to use Google Workspace's merge contacts feature.
Answer: C
Explanation:
https://support.google.com/a/answer/3075991#duplicatecontacts
"To resolve this issue, correct your shared contact search rules to exclude users in your own domain. On the next sync, GCDS attempts to delete the redundant contacts. You might need to adjust the shared contact deletion limit for that first sync.
NEW QUESTION 24
Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)
- A. Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.
- B. Provide your current GCDS instance with admin credentials to the recently acquired organization's LDAP directory.
- C. Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended.
- D. Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.
- E. Upgrade to the multiple LDAP version of GCDS.
Answer: C,D
Explanation:
https://support.google.com/a/answer/7177266?hl=en#zippy=%2Ccan-i-sync-gcds-from-multiple-ldap-directories GCDS can only sync from a single LDAP directory. If you have multiple LDAP directories, it is recommended that you consolidate your LDAP server data into a single directory. You need to run 2 separate GCDS instances while creating exclusion rules to prevent suspensions/deletions.
NEW QUESTION 25
Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.
What action should you take to meet these requirements?
- A. Use the login audit report to export all suspicious login details for analysis.
- B. Create a custom query in BigQuery showing all suspicious login details.
- C. Create a custom dashboard with the security investigation tool showing suspicious logins.
- D. Use the account activity report to export all suspicious login details for analysis.
Answer: A
Explanation:
Login audit log Track user sign-in activity You can use the Login audit log to track user sign-ins to your domain. You can review all sign-ins from web browsers. If a user signs in from an email client or a non-browser application, you can only review reports of suspicious attempts. Forward log event data to the Google Cloud Platform You can opt in to share the log event data with Google Cloud Platform. If you turn on sharing, data is forwarded to Cloud Logging, where you can query and view your logs, and control how you route and store your logs https://support.google.com/a/answer/4580120?hl=en
NEW QUESTION 26
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?
- A. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
- B. Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.
- C. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
- D. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
Answer: D
Explanation:
"Inherited permissions can't be removed from a file or folder in a shared drive". ref: https://developers.google.com/drive/api/v3/manage-sharing
NEW QUESTION 27
Your organization is preparing to deploy Workspace and will continue using your company's existing identity provider for authentication and single sign-on (SSO). In order to migrate data from an external system, you were required to provision each user's account in advance. Your IT team and select users (~5% of the organization) have been using Workspace for configuration and testing purposes. The remainder of the organization can technically access their accounts now, but the IT team wants to block their access until the migrations are complete. What should your organization do?
- A. Remove Google Workspace license to prevent users from accessing their accounts now.
- B. Suspend users that the organization does not wish to have access.
- C. Add the users to the OU with all services disabled.
- D. Use Context-Aware Access to simultaneously block access to all services for all users and allow access to all services for the allowed users.
Answer: C
Explanation:
https://support.google.com/a/answer/182449?hl=en
NEW QUESTION 28
Your organization's Sales Department uses a generic user account ([email protected]) to manage requests. With only one employee responsible for managing the departmental account, you are tasked with providing the department with the most efficient means to allow multiple employees various levels of access and manage requests from a common email address.
What should you do?
- A. Configure a Google Group as an email list.
- B. Configure a Google Group as a collaborative inbox.
- C. Delegate email access to department employees.
- D. Configure a Google Group, and set the Access Level to Announcement Only.
Answer: B
Explanation:
https://support.google.com/a/answer/167430?hl=en
NEW QUESTION 29
As the Workspace Administrator, you have been asked to configure Google Cloud Directory Sync (GCDS) in order to manage Google Group memberships from an internal LDAP server. However, multiple Google Groups must have their memberships managed manually. When you run the GCDS sync, you notice that these manually managed groups are being deleted. What should you do to prevent these groups from being deleted?
- A. Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.
- B. In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to "delete only active Google domain users not found in LDAP."
- C. In the GCDS configuration manager, update the group deletion policy setting to "don't delete Google groups not found in LDAP."
- D. Use the Directory API to check and update the group's membership after the GCDS sync is completed.
Answer: C
Explanation:
https://support.google.com/a/answer/6258071?hl=en#zippy=%2Cgoogle-group-deletion-policy Don't delete Google Groups not found in LDAP If checked, Google Group deletions in your Google domain are disabled, even when the Groups aren't in your LDAP server.
NEW QUESTION 30
Your company has been engaged in a lawsuit, and the legal department has been asked to discover and hold all email for two specific users. Additionally, they have been asked to discover and hold any email referencing "Secret Project 123." What steps should you take to satisfy this request?
- A. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to: (secret project 123). Save.
- B. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and enter: user1@your- company.com AND [email protected]. Set the search terms to: secret AND project AND 123. Save.
- C. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to secret OR project OR 123. Save.
- D. Create a Matter and a Hold. Set the Hold to Gmail, set it to the top level Organization, and set the search terms to "secret project 123." Create a second Hold. Set the second Hold to Gmail, set it to Accounts, and enter: user1 @your-company.com, [email protected]. Save.
Answer: D
Explanation:
The correct way to search for the esact term is in quotes ("project 123" and not (project 123)). Ref: https://support.google.com/vault/answer/2474474?hl=en. Also, afeter doing this ytou must create the retention rule using comas to separate user from user.
NEW QUESTION 31
Your company's compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company's account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.
Which combination of attributes will meet this objective?
- A. Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.
- B. Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers
> choose Reject - C. Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
- D. Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
Answer: D
Explanation:
https://www.shieldq.com/en-gb/Google-apps-content-compliance
NEW QUESTION 32
Your company works regularly with a partner. Your employees regularly send emails to your partner's employees. You want to ensure that the Partner contact information available to your employees will allow them to easily select Partner names and reduce sending errors.
What should you do?
- A. Educate users on creating personal contacts for the Partner Employees.
- B. Add a secondary domain for the Partner Company and create user entries for each Partner user.
- C. Create shared contacts in the Directory using the Directory API.
- D. Create shared contacts in the Directory using the Domain Shared Contacts API.
Answer: D
Explanation:
https://developers.google.com/admin-sdk/domain-shared-contacts
NEW QUESTION 33
How can you monitor increases in user reported Spam as identified by Google?
- A. Review post-delivery activity in the Email logs.
- B. Review post-delivery activity in the BigQuery Export.
- C. Review spike in user-reported spam in the Alert center.
- D. Review user-reported spam in the Investigation Tool.
Answer: C
Explanation:
https://support.google.com/a/answer/9104586?hl=en
NEW QUESTION 34
......
LATEST Google-Workspace-Administrator Exam Practice Material: https://www.actual4labs.com/Google/Google-Workspace-Administrator-actual-exam-dumps.html
New Google-Workspace-Administrator Actual Exam Dumps, Google Practice Test: https://drive.google.com/open?id=193QzLPTgo31gXIGeLZp5clbe83nwAG9j