GOOGLE-WORKSPACE-ADMINISTRATOR Online Practice Questions and Answers

You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.

What should you do?

A. Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups.

B. Update your configuration file and resync mailing lists with Google Cloud Directory Sync.

C. Create and assign a custom admin role for all group owners so they can update settings.

D. Use the Groups Settings API to update Google Groups with desired settings.

The CEO of your company has indicated that messages from trusted contacts are being delivered to spam, and it is significantly affecting their work. The messages from these contacts have not always been classified

as spam. Additionally, you recently configured SPF, DKIM, and DMARC for your domain. You have been tasked with troubleshooting the issue.

What two actions should you take? (Choose two.)

A. Obtain the message header and analyze using Google Workspace Toolbox.

B. Review the contents of the messages in Google Vault.

C. Set up a Gmail routing rule to whitelist the sender.

D. Conduct an Email log search to trace the message route.

E. Validate that your domain is not on the Spamhaus blacklist.

You have configured your Google Workspace account on the scheduled release track to provide additional time to prepare for new product releases and determine how they will impact your users. There are some new

features on the latest roadmap that your director needs you to test as soon as they become generally available without changing the release track for the entire organization.

What should you do?

A. Create a new OU and tum on the rapid release track just for this OU.

B. Create a new Google Group with test users and enable the rapid release track.

C. Establish a separate Dev environment, and set it to rapid release.

D. Ask Google for a demo account with beta access to the new features.

Your cyber security team has requested that all email destined for external domains be scanned for credit card numbers, and if found, the email must be encrypted using your cloud-based third-party encryption provider. You are responsible for configuring to meet this request.

What should you do?

A. Create a content compliance rule on outbound mail and internal-sending mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.

B. Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check "Encrypt message if not encrypted".

C. Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.

D. Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check "Change route" to send to your third-party encryption provider to encrypt.

Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices?

Choose 2 answers

A. Create a company-owned device inventory using an asset tag.

B. Devices > Endpoints > Add a filter-> Management Type > Drive for desktop > Apply

C. Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop > Only Allow Google Drive for desktop on authorized devices

D. Install the Google Endpoint Verification extension on machines using Drive for Desktop.

E. Create a company-owned device inventory using serial numbers of devices.

The nature of your organization's business makes your users susceptible to malicious email attachments. How should you implement a scan of all incoming email attachments?

A. Configure a safety rule to protect against encrypted attachments from untrusted senders

B. Configure a safety rule to protect against attachments with scripts from untrusted senders.

C. In the security sandbox section, enable virtual execution of attachments for (he targeted OU

D. In the security sandbox section, enable virtual execution of attachments for the entire organization.

Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)

A. Provide your current GCDS instance with admin credentials to the recently acquired organization's LDAP directory.

B. Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.

C. Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended.

D. Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.

E. Upgrade to the multiple LDAP version of GCDS.

Four weeks ago. you exported data from Google Vault and emailed the PST export file to your legal admin. They accidentally deleted the PST file and need it sent again. What steps should you take to re-send the PST file to the legal admin?

A. Return to the Google Vault export page, and download the ZIP file again.

B. Return to the Email Log Search page, and download the PST file again.

C. Ask the legal admin to return to Google Vault to download the PST file again.

D. Repeat the original search for the original timeframe, and export the data again.

Your organization has been on Google Workspace Enterprise for one year. Recently, an admin turned on public link sharing for Drive files without permission from security. Your CTO wants to get better insight into changes that are made to the Google Workspace environment. The chief security officer wants that data brought into your existing SIEM system.

What are two ways you should accomplish this? (Choose two.)

A. Use the Data Export Tool to export admin audit data to your existing SIEM system

B. Use Apps Script and the Reports API to export admin audit data to your existing SIEM system.

C. Use Apps Script and the Reports API to export drive audit data to the existing SIEM system

D. Use the BigQuery export to send admin audit data to the existing SIEM system via custom code

E. Use the BigQuery export to send drive audit data to the existing SIEM system via custom code.

What steps does an administrator need to take to enforce TLS with a particular domain?

A. Enable email safety features with the receiving domain.

B. Set up secure transport compliance with the receiving domain.

C. Configure an alternate secure route with the receiving domain.

D. Set up DKIM authentication with the receiving domain.