Easily To Pass New Google-Workspace-Administrator Verified & Correct Answers [Jul 21, 2025 [Q17-Q39]

Rate this post

Easily To Pass New Google-Workspace-Administrator Verified & Correct Answers [Jul 21, 2025

Free Google-Workspace-Administrator Exam Files Downloaded Instantly

Google-Workspace-Administrator (Google Cloud Certified – Professional Google Workspace Administrator) Certification Exam is a highly sought after certification in the world of technology. Google Cloud Certified – Professional Google Workspace Administrator certification is designed for professionals who are responsible for managing and administering Google Workspace, which includes a suite of productivity tools such as Gmail, Google Drive, Google Meet, Google Docs, and more. Google Cloud Certified – Professional Google Workspace Administrator certification exam tests the candidate’s knowledge and skills in deploying, configuring, and managing Google Workspace.

NEW QUESTION 17
A user does not follow their sign-in pattern and signs in from an unusual location. As an admin, what should you do in response to this alert for this user during this investigation?

Add Two Factor Authentication to the Domain

First, suspend the account and then investigate

Enhance your security alerts for tracking sign-in patterns

Investigate the account for unauthorized activity in the Login and Security Audit Log

NEW QUESTION 18
What action should be taken to configure alerting related to phishing attacks?

Set up a Token audit log event alert.

Set up an Admin audit log event alert.

Set up an email settings changed alert.

Set up a suspicious login event alert.

NEW QUESTION 19
Your corporate LDAP contains the email addresses of several hundred non-employee business partners. You want to sync these contacts to Google Workspace so they appear in Gmail’s address autocomplete for all users in the domain.
What are two options to meet this requirement? (Choose two.)

Use the Directory API to upload a .csv file containing the contacts.

Configure GCDS to populate a Group with external members.

Use the People API to upload a .csv file containing the contacts.

Develop a custom application to call the Domain Shared Contacts API.

Configure GCDS to synchronize shared contacts.

NEW QUESTION 20
Your Accounts Payable department is auditing software license contracts companywide and has asked you to provide a report that shows the number of active and suspended users by organization unit, which has been set up to match the Regions and Departments within your company. You need to produce a Google Sheet that shows a count of all active user accounts and suspended user accounts by Org unit.
What should you do?

From the Admin Console Billing Menu, turn off auto-assign, and then click into Assigned Users and export the data to Sheets.

From the Admin Console Users Menu, download a list of all Users to Google Sheets, and join that with a list of ORGIDs pulled from the Reports API.

From the Google Workspace Reports Menu, run and download the Accounts Aggregate report, and export the data to Google Sheets.

From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.

NEW QUESTION 21
Your Accounts Payable department is auditing software license contracts companywide and has asked you to provide a report that shows the number of active and suspended users by organization unit, which has been set up to match the Regions and Departments within your company. You need to produce a Google Sheet that shows a count of all active user accounts and suspended user accounts by Org unit.
What should you do?

From the Admin Console Billing Menu, turn off auto-assign, and then click into Assigned Users and export the data to Sheets.

From the Admin Console Users Menu, download a list of all Users to Google Sheets, and join that with a list of ORGIDs pulled from the Reports API.

From the Google Workspace Reports Menu, run and download the Accounts Aggregate report, and export the data to Google Sheets.

From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.

NEW QUESTION 22
You received this email from the head of marketing:
Hello Workspace Admin:
Next week, a new consultant will be starting on the “massive marketing mailing” project. We want to ensure that they can view contact details of the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that you can help with?
What are two of the steps you need to perform to fulfill this request?
Choose 2 answers

Create an isolated OU for the consultants who need the restricted contacts access.

Create a group that includes the contacts that the consultant is allowed to view.

Apply the role of owner to the consultant in the group settings.

Create the consultant inside under the marketing OU.

Ensure that you are assigned the Administrator Privilege of Services > Services settings, and ensure that Services > Contacts > Contacts Settings Message is set.

NEW QUESTION 23
Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.
What should you do?

Install Google Cloud Directory Sync on all Domain Controllers.

Install Google Workspace Sync for Microsoft Outlook on all employees’ computers.

Install Google Cloud Directory Sync on a supported server.

Install Google Apps Manager to automate add-user scripts.

NEW QUESTION 24
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?

Navigate to “Data Protection” setting in Google Admin Console’s Device management section and disable the “Allow users to copy data to personal apps” checkbox.

Disable “Open Docs in Unmanaged Apps” setting in Google Admin Console’s Device management section.

Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.

Clear the “Allow items created with managed apps to open in unmanaged apps” checkbox.

NEW QUESTION 25
You are the administrator for a 30.000-user organization. You have multiple Workspace licensing options available to end users in your domain, according to their work responsibilities. A user may be transitioned to a different license type multiple times in a given year. Your organization has a high turnover rate for employees.
What is the most efficient way to manage your organization’s licensing?

Use the Directory API to create a custom batch script that modifies the users license on a daily basis

Create a license assignment rule in the Google Admin console to set user licensing based on directory attributes.

Use Google Cloud Directory Sync to modify user licensing with each sync, according to information available in the organization’s LDAP

Update user licensing in the user portion of the Admin console on an as-needed basis.

NEW QUESTION 26
You are configuring Chrome browser security policies for your organization. These policies must restrict certain Chrome apps and extensions.
You need to ensure that these policies are applied on the devices regardless of which user logs into the device.
What should you do?

Configure the allowed list of apps in the Devices page in the apps and extensions settings.

Configure the Chrome user setting to require users to sign in to use Chrome apps and extensions.

Configure the Policy Precedence to override the domain-wide policy applied for apps and extensions.

Require 2SV for user logins.

NEW QUESTION 27
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?

Admin audit log

SAML audit log

Drive usage audit log

OAuth Token audit log

NEW QUESTION 28
User A is a Basic License holder. User B is a Business License holder. These two users, along with many additional users, are in the same organizational unit at the same company. When User A attempts to access Drive, they receive the following error: “We are sorry, but you do not have access to Google Docs Editors. Please contact your Organization Administrator for access.” User B is not presented with the same error and accesses the service without issues.
How do you provide access to Drive for User A?

Select User A in the Directory, and under the Apps section, check whether Drive and Docs is disabled. If so, enable it in the User record.

In Apps > Google Workspace > Drive and Docs, select the organizational unit the users are in and enable Drive for the organizational unit.

In Apps > Google Workspace, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.

Select User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.

NEW QUESTION 29
Your company’s Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.
What should you do?

Access the Security Menu> API Reference > disable all API Access.

Access the Security Menu > API Permissions > choose Drive and Disable All Access.

Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.

Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain

NEW QUESTION 30
Your company has a broad, granular IT administration team, and you are in charge of ensuring proper administrative control. One of those teams, the security team, requires access to the Security Investigation Tool. What should you do?

Assign the pre-built security admin role to the security team members.

Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.

Assign the Super Admin Role to the security team members.

Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.

NEW QUESTION 31
An employee at your organization may be sharing confidential documents with unauthorized external parties. You must quickly determine if any sensitive information has been leaked. What should you do?

Review the employee’s Drive log events in the security investigation tool.

Audit Drive access by using the Admin SDK Reports API.

Review the employee’s user log events within the security investigation tool.

Create a custom report of the user’s external sharing by using the security dashboard.

To quickly determine if an employee has shared confidential documents externally, you should utilize the security investigation tool in the Google Admin console and specifically review the Drive log events associated with that employee’s account. This tool provides a centralized place to audit user activity related to Google Drive, including sharing actions.
Here’s why option A is the most direct and efficient first step:
A . Review the employee’s Drive log events in the security investigation tool.
The security investigation tool allows administrators to examine various logs related to user activity and potential security incidents. By focusing on the Drive log events for the specific employee in question, you can quickly filter and review actions such as file sharing, permission changes, and external access. This will provide a direct view of whether the employee has indeed shared documents externally and to whom.
Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation on the “Security investigation tool” (or similar titles) explains its capabilities. Specifically, the section on “Investigating Drive log events” details how administrators can use filters to view file sharing activities, including external sharing, by specific users and timeframes. This tool is designed for precisely such scenarios where you need to quickly audit user actions related to data access and sharing.
B . Audit Drive access by using the Admin SDK Reports API.
While the Admin SDK Reports API can provide detailed information about Drive activity, using it requires programming skills and setting up custom scripts or applications. This is not the quickest way to investigate a potential immediate security concern. The security investigation tool offers a user-friendly interface for administrators to perform such investigations without needing to code.
Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin SDK documentation describes the Reports API and its capabilities. While powerful for custom reporting and automation, it’s not the fastest method for a quick, ad-hoc security investigation compared to the built-in security investigation tool.
C . Review the employee’s user log events within the security investigation tool.
The user log events in the security investigation tool cover a broader range of activities beyond just Google Drive, such as login attempts, password changes, and device management actions. While this might provide some context, it is less focused on file sharing activities compared to the Drive log events. To quickly determine if confidential documents were shared, filtering directly for Drive-related actions is more efficient.
Associate Google Workspace Administrator topics guides or documents reference: The documentation on the security investigation tool outlines the different log sources available, including user logs and Drive logs. For investigating file sharing, the Drive logs provide more specific and relevant information.
D . Create a custom report of the user’s external sharing by using the security dashboard.
The security dashboard provides an overview of your organization’s security posture and includes pre-built reports and insights. While you can create custom reports, this process might take longer than directly investigating the Drive log events for the specific employee in the security investigation tool. The investigation tool is designed for targeted and immediate analysis of potential security incidents related to user actions.
Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin Help documentation on the “Security dashboard” explains its features, which focus on overall security trends and insights. While it can be useful for identifying patterns, the security investigation tool is more suited for investigating specific user actions and potential data leaks on demand.
Therefore, the most efficient and direct way to quickly determine if the employee has shared confidential documents externally is to review the employee’s Drive log events in the security investigation tool.

NEW QUESTION 32
After migrating to Google Workspace, your legal team requests access to search all email and create litigation holds for employees who are involved with active litigation. You need to help the legal team meet this request.
What should you do?

Add the legal team to the User Management Admin system role.

Add the legal team to the Google Vault Google Group.

Create a custom role with Google Vault access, and add the legal team.

Create a matter in Google Vault, and share with the legal team.

NEW QUESTION 33
You need to protect your users from untrusted senders sending encrypted attachments via email. You must ensure that these messages are not delivered to users’ mailboxes. What step should be taken?

Use the security center to remove the messages from users’ mailboxes

Use Google Vault to remove these messages from users mailboxes.

Enable a safety rule to send these types of messages to spam.

Enable a safety rule to send these types of messages to a quarantine.

NEW QUESTION 34
The security team for your organization is concerned about phishlng attacks against your end user base. What two actions should you take to configure the strongest possible preventative measure against phishing attacks?
Choose 2 answers

Configure spoofing and authentication controls to quarantine messages that are perceived as threats

Train end users to mark messages as spam when they see something suspicious.

Configure spoofing and authentication controls to warn end users about messages that are perceived as threats.

Enforce confidents mode for all messages sent and received from your Workspace domain

Force encryption on all inbound and outbound emails from your Workspace domain.

NEW QUESTION 35
Your company has received help desk calls from users about a new interface in Gmail that they had not seen before. They determined that it was a new feature that Google released recently. In the future, you’ll need time to review the new features so you can properly train employees before they see changes.
What action should you take?

Company Profile > Profile > New User Features > Enable “Scheduled Release”

Apps > Google Workspace > Gmail > Uncheck “Enable Gmail Labs for my users”

Company Profile > Profile > New User Features > Enable “Rapid Release”

Device Management > Chrome > Device Settings > Stop auto-updates

NEW QUESTION 36
You are configuring a customer relationship management (CRM) solution to integrate with Google Workspace services for the sales department at your organization The CRM solution is in the Google Workspace Marketplace and you deploy the specific CRM solution Employees report that there are no contacts and documents visible in the CRM solution You must identify and fix the problem What should you do?

Check the OAuth scopes and ensure that Drive and Gmail scopes are granted for the CRM solution

Check if Manage access to apps is set to Allow users to install and run any app from the Marketplace

Revoke all OAuth scopes and reinstall the CRM solution for just the sales department.

Check if the App distribution settings are set to ON for everyone in your organization

NEW QUESTION 37
Your organization recently had a sophisticated malware attack that was propagated through embedded macros in email attachments. As a Workspace administrator, you want to provide an additional layer of anti-malware protection over the conventional malware protection that is built into Gmail. What should you do to protect your users from future unknown malware in email attachments?

Run queries in Security Investigation Tool.

Turn on advanced phishing and malware protection.

Enable Security Sandbox.

Enable Gmail confidential mode.

NEW QUESTION 38
How can you monitor increases in user reported Spam as identified by Google?

Review post-delivery activity in the Email logs.

Review user-reported spam in the Investigation Tool.

Review spike in user-reported spam in the Alert center.

Review post-delivery activity in the BigQuery Export.

NEW QUESTION 39
You are the administrator of a domain that requires iOS mobile device management. What initial steps should be taken to ensure that you can properly manage end-user iOS devices?

Follow the prompts under “company owned devices,” and select “iOS Management.” Select the option to “enforce management on iOS devices.”

Configure an Apple Push Certificate, and select “certificate never expires.”

Configure an Apple Push Certificate, and be sure to use a work address that can be accessed in the future.

In the Admin console, navigate to iOS management, and enable the Apple Push Certificate connector.

The Google Google-Workspace-Administrator exam is part of the Google Cloud Certified program, which is a professional certification program offered by Google Cloud. The program is designed to help individuals demonstrate their expertise in various Google Cloud technologies and services. The Google Workspace Administrator Certification Exam is one of the exams within this program and is intended for professionals who work with Google Workspace on a daily basis.

100% Pass Guaranteed Free Google-Workspace-Administrator Exam Dumps: https://www.validbraindumps.com/Google-Workspace-Administrator-exam-prep.html