Google Google Workspace Administrator Professional Google Workspace Administrator 1. The CEO of your company has indicated that messages from trusted contacts are being delivered to spam, and it is significantly affecting their work. The messages from these contacts have not always been classified as spam. Additionally, you recently configured SPF, DKIM, and DMARC for your domain. You have been tasked with troubleshooting the issue. What two actions should you take? (Choose two.) A. Obtain the message header and analyze using Google Workspace Toolbox. B. Review the contents of the messages in Google Vault. C. Set up a Gmail routing rule to whitelist the sender. D. Conduct an Email log search to trace the message route. E. Validate that your domain is not on the Spamhaus blacklist. Answer: A,C 2.What action should be taken to configure alerting related to phishing attacks? A. Set up a Token audit log event alert. B. Set up an Admin audit log event alert. C. Set up an email settings changed alert. D. Set up a suspicious login event alert. Answer: D Explanation: Reference: https://support.google.com/a/answer/9104586?hl=en 3.With the help of a partner, you deployed Google Workspace last year and have seen the rapid pace of innovation and development within the platform. Your CIO has requested that you develop a method of staying up-to-date on all things Google Workspace so that you can be prepared to take advantage of new features and ensure that your organization gets the most out of the platform. What should you do? A. Develop a cadence of regular roadmap and business reviews with your partner. B. Regularly scan the admin console and keep track of any new features you identify. C. Create a Feature Release alert in the Alert Center to be alerted to new functionality. D. Put half of your organization on the Rapid Release Schedule to highlight differences. Answer: A Explanation: https://support.google.com/a/answer/6131189?hl=en 4.Your company works regularly with a partner. Your employees regularly send emails to your partner's employees. You want to ensure that the Partner contact information available to your employees will allow them to easily select Partner names and reduce sending errors. What should you do? A. Educate users on creating personal contacts for the Partner Employees. B. Add a secondary domain for the Partner Company and create user entries for each Partner user. C. Create shared contacts in the Directory using the Directory API. D. Create shared contacts in the Directory using the Domain Shared Contacts API. Answer: D Explanation: https://developers.google.com/admin-sdk/domain-shared-contacts 5.Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user’s data. What two actions should you take? (Choose two.) A. Add the user's old email address to their account in the Google Workspace Admin panel. B. Change the user's primary email address in the Google Workspace Admin panel. C. Change the user's last name in the Google Workspace Admin panel. D. Change the user's primary email in Active Directory. E. Change the user's last name in Active Directory. Answer: D,E Explanation: https://support.google.com/a/answer/106368?hl=en 6.Your Chief Information Security Officer is concerned about phishing. You implemented 2 Factor Authentication and forced hardware keys as a best practice to prevent such attacks. The CISO is curious as to how many such email phishing attempts you've avoided since putting the 2FA+Hardware Keys in place last month. Where do you find the information your CISO is interested in seeing? A. Security > Advanced Security Settings > Phishing Attempts B. Apps > Google Workspace > Gmail > Phishing Attempts C. Security > Dashboard > Spam Filter: Phishing D. Reporting > Reports > Phishing Answer: C Explanation: https://support.google.com/a/answer/7491892?hl=en 7.Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as “view data for all teams” to the HR group, but it is reporting an error when accessing the application. What should you do? A. Allocate the “view data for all teams” permission to all employees of the company. B. Confirm that the Work Insights app is turned ON for all employees. C. Confirm in Security > API controls > App Access Controls that Work Insights API is set to “unrestricted.” D. Confirm in Reports > BigQuery Export that the job is enabled. Answer: C 8.Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy. What should you do? A. Access the Security Menu> API Reference > disable all API Access. B. Access the Security Menu > API Permissions > choose Drive and Disable All Access. C. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access. D. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain Answer: C Explanation: Reference: https://support.google.com/a/answer/60781?hl=en 9.You are the Workspace administrator for an international organization with Enterprise Plus Workspace licensing. A third of your employees are located in the United States, another third in Europe, and the other third geographically dispersed around the world. European employees are required to have their data stored in Europe. The current OU structure for your organization is organized by business unit, with no attention to user location. How do you configure Workspace for the fastest end user experience while also ensuring that European user data is contained in Europe? A. Configure a data region at the top level OU of your organization, and set the value to “Europe”. B. Add three additional OU structures to designate location within the current OU structure. Assign the corresponding data region to each. C. Configure a configuration group for European users, and set the data region to “Europe”. D. Configure three configuration groups within your domain. Assign the appropriate data regions to each corresponding group, but assign no preference to the users outside of the United States and Europe. Answer: C Explanation: https://support.google.com/a/answer/7630496?hl=en#zippy=%2Cstep-set-the- organizational-structure "put them in a configuration group (to set for users across or within departments)". 10.As the newly hired Admin in charge of Google Workspace, you learn that the organization has been using Google Workspace for months and has configured several security rules for accessing Google Drive. A week after you start your role, users start to complain that they cannot access Google Drive anymore from one satellite office and that they receive an error message that “a company policy is blocking access to this app.” The users have no issue with Gmail or Google Calendar. While investigating, you learn that both this office's Internet Service Provider (ISP) and the global IP address when accessing the internet were changed over the weekend. What is the most logical reason for this issue? A. An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access. B. Under Drive and Docs > Sharing Settings, the “Whitelisted domains” list needs to be updated to add the new ISP domain. C. The Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range. D. You need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access. Answer: A 11.Your company recently migrated to Google Workspace and wants to deploy a commonly used third-party app to all of finance. Your OU structure in Google Workspace is broken down by department. You need to ensure that the correct users get this app. What should you do? A. For the Finance OU, enable the third-party app in SAML apps. B. For the Finance OU, enable the third-party app in Marketplace Apps. C. At the root level, disable the third-party app. For the Finance OU, allow users to install any application from the Google Workspace Marketplace. D. At the root level, disable the third-party app. For the Finance OU, allow users to install only whitelisted apps from the Google Workspace Marketplace. Answer: B Explanation: Reference: https://support.google.com/a/answer/6089179?hl=en 12.You are in charge of automating and configuring Google Cloud Directory Sync for your organization. Within the config manager, how can you proactively prevent applying widespread deletions within your Workspace environment if your company’s LDAP undergoes a substantial modification? A. Manually run Google Cloud Directory Sync only after performing a simulated sync. B. Specify the minimum and maximum number of objects to synchronize in each configuration item. C. Configure the tool to delete users only when run from the config manager. D. Configure limits for the maximum number of deletions on each synchronization. Answer: D Explanation: You can use limits with Google Cloud Directory Sync (GCDS) to set the maximum number of deletions permitted on each simulation or synchronization. If it reaches this limit, GCDS stops and does not sync any changes. https://support.google.com/a/answer/9520714?fl=1 13.Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error. What should you do? A. Install Google Cloud Directory Sync on all Domain Controllers. B. Install Google Workspace Sync for Microsoft Outlook on all employees’ computers. C. Install Google Cloud Directory Sync on a supported server. D. Install Google Apps Manager to automate add-user scripts. Answer: C Explanation: https://support.google.com/a/answer/6123896 14.You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly. What should you do? A. Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups. B. Update your configuration file and resync mailing lists with Google Cloud Directory Sync. C. Create and assign a custom admin role for all group owners so they can update settings. D. Use the Groups Settings API to update Google Groups with desired settings. Answer: B Explanation: https://support.google.com/a/answer/6129577?hl=en#:~:text=Create and assign the role&text=Click Assign role.,organizational unit and click Done. Test Google Workspace Administrator