New Associate-Google-Workspace-Administrator Test Materials & Valid Associate-Google-Workspace-Administrator Test Engine
Associate-Google-Workspace-Administrator Updated Exam Dumps [2026] Practice Valid Exam Dumps Question
NEW QUESTION # 56
Your organization acquired a small agency with only five users. You need to create user accounts for these new employees. Agency users must have their original email address. You have added the agency's domain as a secondary domain. What should you do?
- A. Use the Directory API to automatically create the user accounts.
- B. Bulk upload all users using a CSV file.
- C. Use Google Cloud Directory Sync (GCDS) to sync users from an existing directory.
- D. Manually create users from the Admin console. When creating the user account, choose the agency domain to be used for the email address.
Answer: D
Explanation:
The key information here is "only five users" and "Agency users must have their original email address. You have added the agency's domain as a secondary domain." For a small number of users (five), manually creating them in the Admin console is the most straightforward and least complex method. When creating a new user, the Admin console allows you to select the domain for their primary email address from any secondary domains you have added to your Google Workspace account.
Here's why the other options are less suitable:
A . Use the Directory API to automatically create the user accounts. While the Directory API can be used for automation, it requires scripting or programming knowledge. For just five users, this is overkill and introduces unnecessary complexity.
C . Use Google Cloud Directory Sync (GCDS) to sync users from an existing directory. GCDS is designed for syncing large numbers of users and groups from an on-premise directory (like Active Directory) to Google Workspace. For only five users, and if there isn't an existing directory that needs ongoing synchronization, GCDS is far too complex and unnecessary.
D . Bulk upload all users using a CSV file. Bulk upload using a CSV file is efficient for a larger number of users (e.g., dozens, hundreds, or thousands). For only five users, preparing a CSV file might take as much or more time than simply creating them one by one through the graphical interface, especially if it's a one-time task.
Reference from Google Workspace Administrator:
Add users one by one: This method is explicitly recommended for adding a small number of users (e.g., 10 or fewer). During the user creation process, you have the option to choose the domain for the user's primary email address from your available domains.
Reference:
Add a domain or domain alias: This is the prerequisite step mentioned in the question ("You have added the agency's domain as a secondary domain.") which allows you to use that domain for user email addresses.
NEW QUESTION # 57
Today your company signed up for Google Workspace Business Starter with an existing domain name. You want to add team members and manage their access to email and other services.
However, you are unable to create new user accounts or change user settings. You need to fix this problem. What should you do?
- A. Wait 24 hours after signing up for the features to become active.
- B. Run the Transfer tool to bring unmanaged users to your Workspace account.
- C. Upgrade to a Google Workspace Enterprise edition.
- D. Check domain ownership in the DNS settings.
Answer: D
Explanation:
To manage users and settings in Google Workspace, you must verify domain ownership. If the domain is not verified, you won't be able to create new user accounts or modify user settings.
Checking the DNS settings and completing the domain verification process will resolve the issue and allow you to manage users and services in Google Workspace.
NEW QUESTION # 58
Per regulatory requirements, your company is required to keep the data of employees located in Germany within Europe and the data of employees located in the US within the US. The employees in Germany are in a separate organizational unit (OU) than employees in the US. You need to ensure that where employee data is stored is in compliance with the location regulations.
What should you do?
- A. Navigate to the Data Regions function in the Admin console. Select the Europe region for employees in Germany, and select the US region for US employees.
- B. Instruct employees to use Drive for desktop to keep documents on their corporate computers.
- C. Create two Groups. Assign employees into the Germany or US Group based on their location. Use Google Drive trust rules to prevent sharing between the Groups.
- D. Navigate to the Data Regions function in the Admin console. Select 'No preference.'
Answer: A
Explanation:
Using the Data Regions function in the Google Admin console, you can specify where data is stored for different organizational units (OUs) based on their geographical location. This ensures that employee data for those in Germany is stored within Europe, while data for US employees is stored within the US, meeting the regulatory requirements for data locality. This approach automates compliance and eliminates the need for manual tracking or additional configurations.
NEW QUESTION # 59
Your top-level OU restricts external file sharing. The marketing team needs to collaborate with vendors via a Shared Drive. What should you do?
- A. Update the top-level Drive and Docs sharing policy.
- B. Create a trust rule allowing external sharing for the marketing OU and apply it to their Shared Drive.
- C. Add external vendors as Contributors to the Shared Drive.
- D. Set the General access default for Drive and Docs to "The primary target audience can access the item if they have the link."
Answer: B
Explanation:
Trust rules allow granular exceptions to sharing restrictions for specific OUs or Shared Drives without weakening the global policy.
NEW QUESTION # 60
A user accessing sensitive data is experiencing repeated issues with accessing certain files in Google Drive from their laptop by using the Chrome browser. When you contact Google support, the support representative asks to review an HTTP archive file recording (HAR). You need to share logs with Google support without compromising data privacy. What should you do?
- A. Upload the HAR file to Google Drive and share the file with the Google support representative.
- B. Ask the Google support representative for access to a Google Drive folder used by the Google support team. Upload the HAR file.
- C. Open the HAR file in a text editor and delete sensitive information. Upload the HAR file to Google Drive and share the file only with the Google support representative
- D. Share your screen with the Google support representative so they can view the file without having a copy of the file.
Answer: C
Explanation:
The HAR (HTTP Archive) file can contain sensitive information, such as URLs, request headers, cookies, or other data that could expose personal or confidential information. To ensure privacy and security, you should review the HAR file, remove any sensitive information manually using a text editor, and then upload the file to Google Drive for sharing with the Google support representative. This approach allows you to provide the necessary logs for troubleshooting without compromising data privacy.
NEW QUESTION # 61
Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company's human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?
- A. Collect a list of users who received the messages. Search the recipients' email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender's email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.
- B. Search for the sender's email address by using the security investigation tool. Mark the messages as phishing. Add the sender's email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
- C. Search the sender's email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.
- D. Search for the sender's email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.
Answer: B
Explanation:
The security investigation tool in Google Workspace allows you to identify the impacted users and messages. By marking the messages as phishing, you acknowledge their malicious nature, helping to protect the users. Adding the sender's email address to the Blocked senders list ensures that future messages from this sender will be automatically blocked, preventing recurrence of similar incidents.
NEW QUESTION # 62
Your company has just started using Search Ads 360. You need to limit access to Additional Google services for your entire organization by using the Admin console. Only the marketing team and a specific group of users from the web design team should have access. What should you do?
- A. Enable Search Ads 360 for the marketing organizational unit (OU). Create a sub-OU under the marketing OU. and move the web design team users who need access into this sub-OU.
- B. Enable Search Ads 360 for both the marketing and web design team organizational units (OUs). Create a group to explicitly deny access to Search Ads 360. Assign the group to the web design users who should not have access.
- C. Enable Search Ads 360 for the marketing organizational unit (OU). Create a new group in the Admin console that includes the web design team users who need access. Enable Search Ads 360 for that group.
- D. Enable Search Ads 360 at the top level of your organizational structure.
Answer: C
Explanation:
To limit access to Search Ads 360 to only the marketing team and a specific group of users from the web design team, the most effective and Google-recommended approach is to enable the service for the marketing organizational unit (OU) and then create a separate group containing the specific web design users who need access, enabling the service for that group as well. This allows for granular control and avoids granting access to the entire web design OU.
Here's why option D is the correct solution and why the others are less ideal:
D . Enable Search Ads 360 for the marketing organizational unit (OU). Create a new group in the Admin console that includes the web design team users who need access. Enable Search Ads 360 for that group.
This approach leverages both organizational units and groups for access control. By enabling Search Ads 360 for the marketing OU, you grant access to all users within that department. Then, by creating a separate group containing the specific web design users who require access and enabling Search Ads 360 for that group, you provide them with the necessary permissions without granting access to the entire web design OU. This method allows for targeted access based on both departmental affiliation and specific user needs, aligning with the principle of least privilege.
Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin Help documentation on "Turn services on or off for users" explains how to control access to Google services at both the organizational unit and group levels. It highlights the flexibility of using a combination of OUs and groups to achieve granular access control. Enabling a service for an OU applies it to all members of that OU, while enabling it for a group applies it only to the members of that specific group, regardless of their OU.
A . Enable Search Ads 360 for both the marketing and web design team organizational units (OUs). Create a group to explicitly deny access to Search Ads 360. Assign the group to the web design users who should not have access.
While you can deny service access using groups, it's generally more straightforward and less prone to errors to explicitly grant access only to those who need it. Enabling the service for the entire web design OU and then trying to revoke access for some users within it adds unnecessary complexity and potential for misconfiguration. Deny rules can also sometimes interact in unexpected ways with allow rules.
Associate Google Workspace Administrator topics guides or documents reference: While the Admin console allows for denying service access through groups, the documentation often emphasizes granting access to specific OUs or groups that require it as a more manageable and transparent approach.
B . Enable Search Ads 360 at the top level of your organizational structure.
Enabling Search Ads 360 at the top level would grant access to the service to every user in your organization. This directly contradicts the requirement to limit access to only the marketing team and a specific group within the web design team. This option provides the least control and violates the principle of least privilege.
Associate Google Workspace Administrator topics guides or documents reference: Google's best practices for service control emphasize granting access only to those who need it, typically by applying settings at the OU or group level, not organization-wide unless the service is intended for everyone.
C . Enable Search Ads 360 for the marketing organizational unit (OU). Create a sub-OU under the marketing OU. and move the web design team users who need access into this sub-OU.
Creating a sub-OU under the marketing OU for users from the web design team who need access is a less logical organizational structure. It mixes users from different departments within the same branch of the OU hierarchy, which can complicate future policy management and reporting. It's generally better to keep users within their respective departmental OUs and use groups for cross-departmental service access.
Associate Google Workspace Administrator topics guides or documents reference: Google's guidance on OU structure recommends organizing users based on their functional role or department within the organization for logical policy management and reporting. Creating sub-OUs based on service access needs rather than organizational structure is not a typical recommendation.
Therefore, the most appropriate and manageable solution is to enable Search Ads 360 for the marketing OU and create a separate group containing the specific web design users who need access, then enable the service for that group as well.
NEW QUESTION # 63
Your company's security team should be able to investigate unauthorized external file sharing.
You need to ensure that the security team can use the security investigation tool and you must follow the principle of least privilege. What should you do?
- A. Share the Drive audit log with the security team.
- B. Create a pre-built reporting role. Assign the role to the security team alias.
- C. Grant the super admin role to a delegate from the security team.
- D. Create a custom admin role with security center privileges. Assign the role to the individual security team members.
Answer: D
Explanation:
By creating a custom admin role with security center privileges, you can ensure that the security team has the necessary access to investigate unauthorized external file sharing while adhering to the principle of least privilege. This approach provides the security team with the specific permissions they need without granting unnecessary broader privileges, such as those associated with the super admin role.
NEW QUESTION # 64
Your company's legal department has issued a litigation hold that requires you to preserve all data related to a specific project. You need to ensure that all data for this project, including emails, documents, and chats, are preserved indefinitely and cannot be deleted by users. What should you do?
- A. Export all project related data from Google Workspace and store the data in a separate, secure location.
- B. Set up a retention rule in Google Vault that retains all data from Gmail and Drive indefinitely.
- C. Create a hold in Google Vault that includes all users and data sources associated with the project.
- D. Assign an Archived User license to all users involved in the project.
Answer: C
Explanation:
To preserve all data related to the project, including emails, documents, and chats, and to prevent it from being deleted by users, you should create a hold in Google Vault. A hold ensures that data is preserved indefinitely, regardless of user actions, and applies to the users and data sources (such as Gmail, Drive, and Chats) associated with the project. This is the most efficient and compliant way to meet the litigation hold requirements.
NEW QUESTION # 65
Your organization wants to ensure that all employees who use Chrome browsers for work adhere to specific security and configuration settings. You need to manage and control the Chrome browsers used within the company while using the least expensive solution. What should you do?
- A. Disable all extensions on employee Chrome browsers to prevent any potential security risks.
- B. Remotely wipe all employee devices to ensure that they are using the latest Chrome browser version.
- C. Enroll the Chrome browsers in your organization's domain and apply Chrome browser policies.
- D. Use a third-party software deployment solution to manage the Chrome browser.
Answer: C
Explanation:
Google Workspace (specifically Chrome Enterprise Core, which is often included or available for free with Google Workspace editions) provides built-in capabilities to manage Chrome browsers across an organization. By enrolling Chrome browsers in your domain, you can apply policies centrally from the Google Admin console, controlling security settings, extensions, updates, and more. This is a first-party, cloud-based solution that doesn't require additional software or licensing costs beyond your existing Google Workspace subscription, making it the "least expensive solution." Here's why the other options are less suitable for managing Chrome browsers with the least expense:
A . Use a third-party software deployment solution to manage the Chrome browser. While possible, this would incur additional costs for the third-party software, its licensing, and potentially its maintenance. Google Workspace offers native browser management, so a third-party solution is not the "least expensive." B . Remotely wipe all employee devices to ensure that they are using the latest Chrome browser version. Remotely wiping devices is a drastic and disruptive measure, typically used for lost/stolen devices or offboarding. It's not a standard or appropriate method for managing browser versions or applying configuration settings. It would also be highly expensive in terms of lost productivity and IT effort.
D . Disable all extensions on employee Chrome browsers to prevent any potential security risks. While disabling extensions can mitigate some risks, it's an overly broad and potentially disruptive action that could hinder employee productivity if legitimate and necessary extensions are disabled. More importantly, it's just one potential policy you might apply, not the method for managing the browsers centrally and cost-effectively. Chrome browser policies allow for granular control, including allowing/blocking specific extensions.
Reference from Google Workspace Administrator:
Set Chrome policies for users or browsers: This is the key administrative function that allows you to manage Chrome browsers. It describes how to apply policies to Chrome browsers enrolled in your organization's domain.
Reference:
Chrome Enterprise Core: This outlines the free cloud-based management features available for Chrome browsers, which are often integrated with Google Workspace. It explicitly states that "cloud-based management and reporting for $0" are available with Chrome Enterprise Core.
Maximizing Google Chrome Management in Google Workspace: This article further emphasizes that "the basic policies for Google Chrome management are available for free with Google Workspace." By leveraging the built-in Chrome browser management capabilities within the Google Workspace Admin console, organizations can centrally control Chrome settings and security with no additional software cost, fitting the "least expensive solution" requirement.
NEW QUESTION # 66
Your company is streamlining workflows by creating custom applications for tasks like filing expense reports or requesting time off. You need to identify a Google Workspace solution to develop these applications. Your development team has only basic coding knowledge. What should you do?
- A. Enable AppScript for your organization and allow employees to build add-ons to existing Workspace solutions.
- B. Enable AppSheet for your organization.
- C. Enable Gemini for Workspace. Direct users to use generative Al across Gmail and Drive to simplify the submission of expense reports.
- D. Direct employees to use Google Forms to collect data and create basic workflows.
Answer: B
Explanation:
The core requirement is to create custom applications for workflows like expense reports and time off, with a development team that has "only basic coding knowledge." This strongly points to a "no-code" or "low-code" platform.
AppSheet is Google's no-code development platform, designed specifically for users (often referred to as "citizen developers") with basic or no coding knowledge to build custom mobile and web applications directly from data sources like Google Sheets, Forms, or other databases. It's ideal for automating business processes and creating custom workflows without traditional programming.
Here's why the other options are less suitable:
A . Enable Gemini for Workspace. Direct users to use generative AI across Gmail and Drive to simplify the submission of expense reports. Gemini for Workspace (Google's AI assistant) can help with tasks like drafting emails, summarizing documents, and generating content within existing Workspace apps. While it can "simplify" aspects, it is not a platform for developing custom applications with structured workflows and data capture for tasks like full expense report submission or time-off requests. It enhances existing tools, it doesn't build new ones.
B . Direct employees to use Google Forms to collect data and create basic workflows. Google Forms is excellent for data collection and can be used for very simple workflows (e.g., collecting time-off requests). However, it lacks the robust functionality needed for complex custom applications, such as managing approvals, displaying data in different views, offline access, or integrating with other systems, without significant manual effort or custom scripting. The term "custom applications" suggests something more sophisticated than just a form.
D . Enable AppScript for your organization and allow employees to build add-ons to existing Workspace solutions. Google Apps Script allows for powerful automation and the creation of custom add-ons for Google Workspace applications (Gmail, Sheets, Docs). However, Apps Script requires knowledge of JavaScript. While it's relatively "basic coding" compared to full-stack development, it's still coding. The question emphasizes "only basic coding knowledge" and the need for a solution to develop applications, implying a more visual or declarative approach than coding from scratch. AppSheet is generally considered easier for those with "basic coding knowledge" or even no coding knowledge, making it a better fit for rapid application development by non-developers.
Reference from Google Workspace Administrator:
AppSheet: No-code App Development | Google Cloud: This is the primary resource for AppSheet, explicitly stating its purpose for "no-code app development" and enabling "everyone in your organization to build and extend applications without coding." It highlights use cases for automating business processes like order approvals (similar to expense reports/time off).
Reference:
Google AppSheet | Build apps with no code: Further reiterates that AppSheet helps "build powerful applications and automations that boost productivity. No coding required." It also mentions integration with Google Workspace, including Google Sheets and Forms as data sources.
Quick start: Build your first app and automation using Google Forms - AppSheet Help: This resource demonstrates how AppSheet can take data from Google Forms and build an app with automation (e.g., email notifications for approvals), showcasing its capability for workflows like expense reports.
NEW QUESTION # 67
An employee with a Workspace Business Plus license at your company is going on a long leave soon. The employee will not need access to their Google Workspace data, but their teammates will need access to the employee's dat a. When the employee returns from leave, you will need to restore access to their account, data, emails, and shared documents. You need to preserve the employee's Workspace data while also minimizing cost while they are on leave. What should you do?
- A. Copy the employee's emails, and transfer their file ownership to a teammate. Delete the user account.
- B. Purchase an Archived User license and assign the license to the employee.
- C. Suspend their account in the Admin console.
- D. Export the account data by using Takeout, and remove the user license in the Admin console.
Answer: B
Explanation:
To preserve an employee's Google Workspace data while they are on long leave, allow teammates access to that data, and minimize costs with the intention of fully restoring the account upon their return, the best course of action is to purchase an Archived User license and assign it to the employee.
Here's why option B is the most suitable and cost-effective solution that meets all the requirements:
B . Purchase an Archived User license and assign the license to the employee.
Google Workspace offers Archived User licenses at a significantly lower cost than a full user license. When you assign an Archived User license to an account, the data (including Gmail, Drive, and other Workspace services) is retained and can be accessed by other authorized users (e.g., administrators or delegated teammates). The user themselves cannot log in or use the services, thus minimizing cost. Upon the employee's return, you can easily reassign a full Business Plus license to their account, restoring their full access without any data loss or complex restoration processes.
Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation on "About Archived User licenses" (or similar titles) explicitly describes this scenario as the intended use case for Archived User licenses. It outlines the reduced cost, the preservation of data, the ability for administrators to access the data (and delegate access), and the seamless transition back to a full license when the user returns.
A . Suspend their account in the Admin console.
Suspending an account prevents the user from accessing it, but it typically retains the full license cost. While an administrator might be able to access some data in a suspended account, it doesn't offer the cost savings of an Archived User license. Additionally, depending on the suspension duration and Google's policies, there might be implications for long-term data retention without an active or archived license.
Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin Help documentation on "Suspend or restore users" explains the functionality of account suspension. It primarily focuses on temporarily revoking access, not on long-term, cost-effective data preservation with potential for delegated access.
C . Export the account data by using Takeout, and remove the user license in the Admin console.
While Google Takeout allows you to export user data, this creates a separate archive that is not directly integrated with Google Workspace. Providing teammates access to this exported data would be cumbersome and not as seamless as accessing it within the original Workspace environment. Removing the user license would stop data retention in Google Workspace, and restoring the account fully upon the employee's return would involve re-importing the data, which can be complex, time-consuming, and potentially lead to data loss or inconsistencies. This option does minimize cost by removing the license but at the expense of easy access and seamless restoration.
Associate Google Workspace Administrator topics guides or documents reference: Documentation on Google Takeout describes its purpose for exporting data out of Google services, primarily for personal use or data migration, not for temporary data preservation and collaborative access within the Workspace environment. Removing a license typically leads to data deletion after a certain period unless an alternative (like an Archived User license) is in place.
D . Copy the employee's emails, and transfer their file ownership to a teammate. Delete the user account.
This approach involves significant data manipulation and potential loss of context. Copying emails might not preserve the entire mailbox structure and could miss important information. Transferring file ownership can be complex and might not cover all types of data or shared items. Deleting the user account would permanently remove the data, making full restoration upon the employee's return impossible. This option is not suitable for preserving the employee's Workspace data and restoring their account later.
Associate Google Workspace Administrator topics guides or documents reference: Google Workspace's account management best practices emphasize preserving user accounts and data for returning employees. Deleting accounts with the intention of temporary leave is strongly discouraged due to the difficulty and risks associated with data recovery and account recreation.
Therefore, the most appropriate action that meets all the requirements of preserving data, providing access to teammates, minimizing cost during the leave, and allowing for full restoration upon return is to purchase an Archived User license and assign it to the employee.
NEW QUESTION # 68
Your company's security team should be able to investigate unauthorized external file sharing. You need to ensure that the security team can use the security investigation tool and you must follow the principle of least privilege. What should you do?
- A. Share the Drive audit log with the security team.
- B. Create a pre-built reporting role. Assign the role to the security team alias.
- C. Grant the super admin role to a delegate from the security team.
- D. Create a custom admin role with security center privileges. Assign the role to the individual security team members.
Answer: D
Explanation:
By creating a custom admin role with security center privileges, you can ensure that the security team has the necessary access to investigate unauthorized external file sharing while adhering to the principle of least privilege. This approach provides the security team with the specific permissions they need without granting unnecessary broader privileges, such as those associated with the super admin role.
NEW QUESTION # 69
An executive at your organization asked you to give their executive administrator access to their Workspace account. You need to ensure that this executive administrator can manage emails in the executive's account. You need to maintain security and privacy of the executive's account. What should you do?
- A. Assist the executive in setting up email forwarding to their executive administrator.
- B. Create a Google Group, and add all executive administrators. Enable delegated access to the Group.
- C. Grant delegated access to the executive's Gmail account, and assign access to their executive administrator in Gmail settings.
- D. Instruct the executive to share their password with their executive administrator.
Answer: C
Explanation:
Granting delegated access allows the executive administrator to manage the executive's emails without requiring access to the executive's password. This solution ensures security and privacy by limiting the permissions to email management only, while keeping the executive's account secure. The executive administrator will be able to send, read, and delete emails on behalf of the executive, but they won't have access to other aspects of the account.
NEW QUESTION # 70
You need to ensure that data owned by former employees remains available in Google Vault. You want to use the most cost-effective solution.
What should you do?
- A. Migrate the former employees' Gmail to their manager(s) by using the data migration service during the deletion process. Transfer the former employees' Google Drive files to a new owner.
- B. Suspend the former employees' Google accounts. Create an organizational unit (OU). Move the former employees into that OU.
- C. Change the Google account passwords of the former employees.
- D. Assign an Archived User license to the former employees' Google accounts.
Answer: B
Explanation:
Suspending the accounts of former employees while moving them to a dedicated organizational unit (OU) ensures that their data remains in Google Vault and accessible without the need for additional licenses. This is a cost-effective solution because suspending the account keeps the data intact but prevents the employees from accessing their accounts.
NEW QUESTION # 71
Your company has recently migrated from an on-premises email solution to Google Workspace.
You have successfully added and verified the new primary domain. However, you also want to continue receiving emails sent to your former on-premises email server for a transitional period.
You need to ensure that emails sent to your former domain are still delivered to your on-premises server, even though your primary email system is now Google Workspace. What should you do?
- A. Configure MX records for the former domain to point to your on-premises email servers.
- B. Add the former domain as a domain alias for the primary domain.
- C. Adjust the TTL (Time-to-Live) for the former domain to ensure a smooth transition.
- D. Add the former domain as a secondary domain in your Google Workspace settings and verify the domain.
Answer: A
Explanation:
To ensure that emails sent to your former domain are still delivered to your on-premises server during a transitional period after migrating your primary email to Google Workspace, you need to configure the MX (Mail Exchanger) records for the former domain to point to your on-premises email servers.
NEW QUESTION # 72
An employee has leaked confidential salary information to an external party. You need to preserve their messages in Vault for investigation. What should you do?
- A. Create a matter and place a hold on the employee's email.
- B. Search and export all external messages.
- C. Create a custom retention policy and review audit logs.
- D. Use the security investigation tool first, then create a hold.
Answer: A
Explanation:
A legal hold ensures that all relevant messages are preserved regardless of deletion, which is required for investigations.
NEW QUESTION # 73
Your security team is concerned about disgruntled employees downloading large amounts of intellectual property. You need to create an automatic notification if any user downloads more than 500 files from Google Drive within a one-hour period. What should you do?
- A. Set up an alert within Google Cloud Monitoring to track the number of Drive API calls and trigger a notification when a user makes an excessive number of download requests.
- B. Configure a Data Loss Prevention (DLP) rule for Drive.
- C. Use the alert center to review Drive audit logs for instances where users download a large number of files.
- D. Create an activity rule in the security investigation tool to monitor Drive download events. Set a threshold to trigger an alert.
Answer: D
Explanation:
To create an automatic notification for a specific event (downloading more than 500 files from Google Drive within a one-hour period), an "activity rule" in the Google Workspace Security Center (which leverages the security investigation tool's capabilities) is the most appropriate and direct solution. Activity rules allow you to define conditions based on log events (like Drive downloads) and set thresholds to trigger alerts and even automated actions.
NEW QUESTION # 74
You notice an increase in support cases related to Chrome browser within your organization. You suspect a potential outage or service disruption with Chrome browser. You need to determine whether any information has been released about the issue and if there are any projected timelines for its resolution. What should you do first?
- A. Log a case with Chrome Enterprise support.
- B. Use the Help Assistant within the Google Admin console to identify if there was a recent outage.
- C. Review the Google Workspace Status Dashboard.
- D. Collect a HAR file, and use the Google Admin Toolbox to identify potential failures.
Answer: C
Explanation:
When experiencing a potential service disruption with a Google product like Chrome browser that is impacting your organization, the first and most efficient step to check for known outages and their resolution timelines is to review the Google Workspace Status Dashboard. This dashboard provides real-time information about the status of various Google Workspace services, including Chrome Enterprise.
NEW QUESTION # 75
The helpdesk at your organization reports that many users in multiple locations are not able to access Gmail, but can access other Workspace services. You need to troubleshoot the issue.
What should you do first?
- A. Open a ticket with Google Support and identify the affected users.
- B. Check the network connectivity for the affected users.
- C. Check the Google Workspace Status Dashboard to see if there is a disruption in Gmail service availability.
- D. Check the Google Workspace release calendar to make sure there's not a Gmail upgrade scheduled.
Answer: C
Explanation:
If many users across multiple locations cannot access Gmail but can access other Google Workspace services, this suggests a possible service-wide outage. The first and most efficient action is to check the Google Workspace Status Dashboard to confirm whether Gmail is experiencing a known disruption before performing deeper troubleshooting.
NEW QUESTION # 76
You are applying device and user policies for employees in your organization who are in different departments. You need each department to have a different set of policies. You want to follow Google-recommended practices. What should you do?
- A. Add all managed users and devices in the top-level organizational unit.
- B. Create a child organizational unit for each department.
- C. Create an Access group for each department. Configure the applicable policies.
- D. Create separate top-level organizational units for each department.
Answer: B
Explanation:
Google recommends using the organizational unit (OU) structure for applying different settings and policies to different groups of users and devices within your Google Workspace domain. To apply a unique set of policies to each department, you should create a child organizational unit for each department under your main domain structure.
NEW QUESTION # 77
You work for a healthcare provider that uses an external medical billing company to manage patient records and invoices. Your organization's employees need to share patient documents with the billing company's employees for processing. You need to configure access so the medical billing company's employees can view and edit the documents, but they cannot delete the documents. What should you do?
- A. Restrict access for the medical billing company's employees by using Data Loss Prevention (DLP) policies.
- B. Create a shared drive. Grant Content Manager access to your organization's employees and the billing company.
- C. Create a group, and add the employees from your organization and the billing company. Create a shared folder on Google Drive. Grant Editor access to the group
- D. Create a shared drive that is managed by your organization's employees. Grant Contributor access to the billing company's staff.
Answer: D
Explanation:
Creating a shared drive and granting Contributor access to the billing company's staff allows them to view and edit documents, but not delete them. This is the most suitable approach because it ensures that only your organization's employees manage the overall shared drive, while still allowing external users to collaborate on documents without compromising their integrity by preventing deletion. The shared drive structure also offers better control over document permissions compared to shared folders.
NEW QUESTION # 78
......
Google Associate-Google-Workspace-Administrator Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
Associate-Google-Workspace-Administrator Sample with Accurate & Updated Questions: https://examcollection.prep4sureguide.com/Associate-Google-Workspace-Administrator-prep4sure-exam-guide.html