Google-Workspace-Administrator Dumps PDF – Google-Workspace-Administrator Real Exam Questions Answers [Q68-Q89]

Q68. Your company’s Google Workspace primary domain is “mycompany.com,” and it has acquired a startup that is using another cloud provider with a domain named “mystartup.com.” You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO’s email address is [email protected], which also matches your company CEO’s email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?

Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.

Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.

Create a new Google Workspace domain with “mystartup.com,” and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.

Create the startup employees in the “mycompany.com’ domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to “mystartup.com,” and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.

Q69. Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)

Provide your current GCDS instance with admin credentials to the recently acquired organization’s LDAP directory.

Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.

Set up exclusion rules to ensure that users synced from the acquired organization’s LDAP are not, suspended.

Set up an additional instance of GCDS running on another server, and handle the acquired organization’s synchronization.

Upgrade to the multiple LDAP version of GCDS.

Q70. Four weeks ago. you exported data from Google Vault and emailed the PST export file to your legal admin. They accidentally deleted the PST file and need it sent again. What steps should you take to re-send the PST file to the legal admin?

Return to the Google Vault export page, and download the ZIP file again.

Return to the Email Log Search page, and download the PST file again.

Ask the legal admin to return to Google Vault to download the PST file again.

Repeat the original search for the original timeframe, and export the data again.

Q71. Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as “view data for all teams” to the HR group, but it is reporting an error when accessing the application. What should you do?

Allocate the “view data for all teams” permission to all employees of the company.

Confirm that the Work Insights app is turned ON for all employees.

Confirm in Security > API controls > App Access Controls that Work Insights API is set to “unrestricted.”

Confirm in Reports > BigQuery Export that the job is enabled.

Q72. A user is reporting that external, inbound messages from known senders are repeatedly being incorrectly classified as spam. What steps should the admin take to prevent this behavior in the future?

Modify the SPF record for your internal domain to include the IPs of the external user’s mail servers.

Update the spam settings in the Admin Console to be less aggressive.

Add the sender’s domain to an allowlist via approved senders in the Admin Console.

Instruct the user to add the senders to their contacts.

Q73. You received this email from the head of marketing:
Hello Workspace Admin:
Next week, a new consultant will be starting on the “massive marketing mailing” project. We want to ensure that they can view contact details of the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that you can help with?
What are two of the steps you need to perform to fulfill this request?
Choose 2 answers

Create an isolated OU for the consultants who need the restricted contacts access.

Create a group that includes the contacts that the consultant is allowed to view.

Apply the role of owner to the consultant in the group settings.

Create the consultant inside under the marketing OU.

Ensure that you are assigned the Administrator Privilege of Services > Services settings, and ensure that Services > Contacts > Contacts Settings Message is set.

Q74. As a team manager, you need to create a vacation calendar that your team members can use to share their time off. You want to use the calendar to visualize online status for team members, especially if multiple individuals are on vacation What should you do to create this calendar?

Request the creation of a calendar resource, configure the calendar to “Auto-accept invitations that do not conflict,” and give your team “See all event details” access.

Create a secondary calendar under your account, and give your team “Make changes to events” access.

Request the creation of a calendar resource, configure the calendar to “Automatically add all invitations to this calendar,” and give your team “See only free/busy” access.

Create a secondary calendar under your account, and give your team “See only free/busy” access

Q75. Your company’s compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company’s account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.
Which combination of attributes will meet this objective?

Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.

Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers
> choose Reject

Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

Q76. When reloading Gmail in Chrome, the web browser returns a 500 Error. As part of the troubleshooting process, Google support asks you to gather logs. How can this be accomplished?

Chrome > Window Context Menu > More Tools > Developer Tools > Network Tab > Reload the page to replicate the error > “Export HAR”

Admin.google.com > Reporting > Reports > Apps Reports > Gmail

chrome://net-export > Start Logging to Disk > Confirm validity with https://netlog-viewer.appspot.com

Chrome > Window Context Menu > More Tools > Task Manager > Screen Capture List of Running Processes

Q77. Your company has just acquired a new group of users. They have been provisioned into the Google Workspace environment with your primary domain as their primary email address. These new users still need to receive emails from their previous domain. What is the best way to achieve this for these new users, without updating the information of preexisting users?

Add the acquired domain as an alias to the primary Google Workspace domain.

Add the acquired domain as a secondary domain to the primary Google Workspace domain, and then update the email information of all new users with alias emails.

Update the Google-provided test domain to be the domain of the acquired company, and then update the email information of all new users with alias emails.

Without adding a domain, update each user’s email information with the previous domain.

Q78. Your company has decided to change SSO providers. Instead of authenticating into Google Workspace and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.
What two features are essential to reconfigure in Google Workspace? (Choose two.)

Apps > add SAML apps to your domain.

Reconfigure user provisioning via Google Cloud Directory Sync.

Replace the third-party IDP verification certificate.

Disable SSO with third party IDP.

Enable API Permissions for Google Cloud Platform.

Q79. Your company policy requires that managers be provided access to Drive data once an employee leaves the company.
How should you grant this access?

Make the manager a delegate to the former employee’s account.

Copy the data from the former employee’s My Drive to the manager’s My Drive.

Transfer ownership of all Drive data using the file transfer ownership tool in the Google Workspace Admin console.

Login as the user and add the manager to the file permissions using the “Is owner’ privilege for all Drive files.

Q80. A recent legal investigation requires all emails and Google Drive documents from a specific user to be retrieved. As the administrator, how can you fulfill the legal team’s request?

Use Security Investigation Tool to Search Google Drive events for all of the user’s documents, and use Google Admin > Reports > Email Log Search to find their emails.

Search Google Drive for all of the user’s documents, and ask them to forward all of their emails.

Use the Gmail API and Google Drive API to automatically collect and export data.

Utilize Google Vault to hold, search, and export data of interest.

Q81. As a Google Workspace administrator for your organization, you are tasked with controlling which third-party apps can access Google Workspace dat a. Before implementing controls, as a first step in this process, you want to review all the third-party apps that have been authorized to access Workspace data. What should you do?

Open Admin Console > Security > API Controls > App Access Control > Manage Third Party App Access.

Open Admin Console > Security > API Controls > App Access Control > Manage Google Services.

Open Admin Console > Security > Less Secure Apps.

Open Admin Console > Security > API Controls > App Access Control > Settings.

Q82. All Human Resources employees at your company are members of the “HR Department” Team Drive. The HR Director wants to enact a new policy to restrict access to the “Employee Compensation” subfolder stored on that Team Drive to a small subset of the team.
What should you do?

Use the Drive API to modify the permissions of the Employee Compensation subfolder.

Use the Drive API to modify the permissions of the individual files contained within the subfolder.

Move the contents of the subfolder to a new Team Drive with only the relevant team members.

Move the subfolder to the HR Director’s MyDrive and share it with the relevant team members.

Q83. As the Workspace Administrator, you have been asked to configure Google Cloud Directory Sync (GCDS) in order to manage Google Group memberships from an internal LDAP server. However, multiple Google Groups must have their memberships managed manually. When you run the GCDS sync, you notice that these manually managed groups are being deleted. What should you do to prevent these groups from being deleted?

In the GCDS configuration manager, update the group deletion policy setting to “don’t delete Google groups not found in LDAP.”

Use the Directory API to check and update the group’s membership after the GCDS sync is completed.

Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.

In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to “delete only active Google domain users not found in LDAP.”

Q84. The company’s ten most senior executives are to have their offices outfitted with dedicated, standardized video conference cameras, microphones, and screens. The goal is to reduce the amount of technical support they require due to frequent, habitual switching between various mobile and PC devices throughout their busy days. You must ensure that it is easier for the executives to join Meet video conferences with the dedicated equipment instead of whatever device they happen to have available.
What should you do?

Set up unmanaged Chromeboxes and set the executives’ homepage to meet.google.com via Chrome settings.

Set up the executive offices as reservable Calendar Resources, deploy Hangouts Meet Hardware Kits, and associate the Meet hardware with the room calendars.

Deploy Hangouts Meet Hardware Kits to each executive office, and associate the Meet hardware with the executives’ calendars.

Provision managed Chromeboxes and set the executives’ Chrome homepage to meet. google.com via device policy.

Q85. Your company has sales offices in Madrid, Tokyo, London, and New York. The outbound email for those offices needs to include the sales person’s signature and a compliance footer. The compliance footer needs to say “Should you no longer wish to receive emails about this offer, please reply with UNSUBSCRIBE.” You are responsible for making sure that users cannot remove the footer.
What should you do?

Send an email to each sales person with the instructions on how to add the footer to their Signature.

Ensure that each sales team is in their own OU, and configure the Append Footer with the signature and footer content translated for each locale.

Ensure that each sales team is in their own OU, and configure the Append Footer with footer content.

Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.

Q86. Several customers have reported receiving fake collection notices from your company. The emails were received from [email protected], which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.
What two actions should you take? (Choose two.)

Change the password for suspected compromised account [email protected].

Configure a Sender Policy Framework (SPF) record for your domain.

Configure Domain Keys Identified Mail (DKIM) to authenticate email.

Disable mail delegation for the [email protected] account.

Disable “Allow users to automatically forward incoming email to another address.”

Q87. The application development team has come to you requesting that a new, internal, domain-owned Google Workspace app be allowed to access Google Drive APIs. You are currently restricting access to all APIs using approved whitelists, per security policy. You need to grant access for this app.
What should you do?

Enable all API access for Google Drive.

Enable “trust domain owned apps” setting.

Add OAuth Client ID to Google Drive Trusted List.

Whitelist the app in the Google Workspace Marketplace.

Q88. All Human Resources employees at your company are members of the “HR Department” Team Drive. The HR Director wants to enact a new policy to restrict access to the “Employee Compensation” subfolder stored on that Team Drive to a small subset of the team.
What should you do?

Use the Drive API to modify the permissions of the Employee Compensation subfolder.

Use the Drive API to modify the permissions of the individual files contained within the subfolder.

Move the contents of the subfolder to a new Team Drive with only the relevant team members.

Move the subfolder to the HR Director’s MyDrive and share it with the relevant team members.

Q89. What action should be taken to configure alerting related to phishing attacks?

Set up a Token audit log event alert.

Set up an Admin audit log event alert.

Set up an email settings changed alert.

Set up a suspicious login event alert.