[2025] Google-Workspace-Administrator PDF Questions – Perfect Prospect To Go With PDF4Test Practice Exam [Q58-Q79]

NO.58 Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners. How best would you achieve this?

Create a configuration group with the approved users as members, and use it to create a target audience.

Enable external sharing for the marketing and sales organizational units.

Enable external sharing only to allowlisted domains provided by marketing and sales teams.

Create a configuration group with the approved users as members, and enable external sharing for this group.

NO.59 Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?

Add your partner domains IPs to the Inbound Gateway setting.

Change the spoofing protection to deliver the emails to spam instead of quarantining them.

Add your partner sending IP addresses to an allowlist.

Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.

NO.60 Your team uses Google Drive for collaborating with external companies and partners. A sensitive project with an external organization is about to begin. You are creating the new labels for the project. You must ensure that all labeled documents have the label visible to everyone who has access to the project files. What should you do?

Create Drive labels and a separate Shared Drive for the project.

Create Drive labels and add the users from the external organization to your domain.

Create Drive labels and add the permissions for all users in the project, including the external users, to view these labels.

Create Drive labels and apply data protection rules to all project file.

NO.61 Your organization is preparing to deploy Workspace and will continue using your company’s existing identity provider for authentication and single sign-on (SSO). In order to migrate data from an external system, you were required to provision each user’s account in advance. Your IT team and select users (~5% of the organization) have been using Workspace for configuration and testing purposes. The remainder of the organization can technically access their accounts now, but the IT team wants to block their access until the migrations are complete. What should your organization do?

Remove Google Workspace license to prevent users from accessing their accounts now.

Suspend users that the organization does not wish to have access.

Add the users to the OU with all services disabled.

Use Context-Aware Access to simultaneously block access to all services for all users and allow access to all services for the allowed users.

NO.62 Your company frequently hires from five to ten interns for short contract engagements and makes use of the same generically named Google Workspace accounts (e.g., [email protected], [email protected], [email protected]). The manager of this program wants all email to these accounts routed to the manager’s mailbox account also.
What should you do?

Setup address forwarding in each account’s GMail setting menu.

Set up recipient address mapping in GMail Advanced Settings.

Configure an Inbound Gateway route.

Give the manager delegated access to the mailboxes.

NO.63 A user named Alice is leaving your organization You need to transfer all of Alice’s data from her Drive to Bob’s Drive in the most simple and efficient manner possible What should you do?

Use the Google Admin console to move the files from Alice’s Drive to Bob’s Drive

Use the Google Takeout service to export Alice’s data to a zip file and instruct Bob to import the zip file into his Drive

Use the Google Drive API to programmatically transfer the files from Alice’s Drive to Bob’s Drive

Instruct Alice to download all of her files from her Drive and upload them to Bob’s Drive

NO.64 Your company has received help desk calls from users about a new interface in Gmail that they had not seen before. They determined that it was a new feature that Google released recently. In the future, you’ll need time to review the new features so you can properly train employees before they see changes.
What action should you take?

Company Profile > Profile > New User Features > Enable “Scheduled Release”

Apps > Google Workspace > Gmail > Uncheck “Enable Gmail Labs for my users”

Company Profile > Profile > New User Features > Enable “Rapid Release”

Device Management > Chrome > Device Settings > Stop auto-updates

NO.65 Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to preventusers from copying data from work to personal apps on iOS devices? (Choose Two)

Clear the “allow users to copy data to personal apps” checkbox.

Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection

Turn on “Advanced Mobile Management.”

Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Open Docs in Unmanaged Apps

Clear the “allow items created with managed apps to open in unmanaged apps” checkbox.

NO.66 You are the administrator for a 30.000-user organization. You have multiple Workspace licensing options available to end users in your domain, according to their work responsibilities. A user may be transitioned to a different license type multiple times in a given year. Your organization has a high turnover rate for employees.
What is the most efficient way to manage your organization’s licensing?

Use the Directory API to create a custom batch script that modifies the users license on a daily basis

Create a license assignment rule in the Google Admin console to set user licensing based on directory attributes.

Use Google Cloud Directory Sync to modify user licensing with each sync, according to information available in the organization’s LDAP

Update user licensing in the user portion of the Admin console on an as-needed basis.

NO.67 Your Chief Information Security Officer is concerned about phishing. You implemented 2 Factor Authentication and forced hardware keys as a best practice to prevent such attacks. The CISO is curious as to how many such email phishing attempts you’ve avoided since putting the 2FA+Hardware Keys in place last month.
Where do you find the information your CISO is interested in seeing?

Security > Advanced Security Settings > Phishing Attempts

Apps > Google Workspace > Gmail > Phishing Attempts

Security > Dashboard > Spam Filter: Phishing

Reporting > Reports > Phishing

NO.68 The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in. What else can you do to increase your organization’s defense-in-depth strategy?

Implement an IP block on the malicious user’s IPs under Security Settings in the Admin Console.

Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.

Enforce higher complexity passwords by rolling it out to the affected users.

Use Mobile device management geo-fencing to prevent malicious actors from using these stolen credentials.

NO.69 A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?

Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.

Immediately suspend the user’s account, search for all the email messages in question, and forward to the legal team.

Immediately suspend the user’s account, assign an archived user license, and export data.

Suspend the user’s account, search all associated users data in Google Vault, and export the data.

NO.70 Your admin quarantine is becoming a burden to manage due to a consistently high influx of messages that match the content compliance rule Your security team will not allow you to remove or relax this rule, and as a result, you need assistance processing the messages in the quarantine. What is the first step you should take to enable others to help manage the quarantine, while maintaining security?

Give the users super admin rights to view the admin quarantine.

Give the users Services > Gmail > Access Admin Quarantine admin privileges.

Configure the admin quarantine to allow end users to release messages.

Give the users Services > Security Center admin privileges.

NO.71 Users at your organization are reporting issues with Google Voice including disconnected calls and overall connection issues. You want to identify whether these issues affect just your organization or whether it’s a global Google issue. What should you do?

Use the Security Investigation Tool with Voice Log Events as the data source field. In the search operator fields, select Event, is, and Network Statistics (client). Analyze the packet loss.

Verify if there is a service outage for Google Voice reported on the Google Workspace Status Dashboard.

Use the Security Investigation Tool with User Log Events as the data source field. In the search operator fields, select Event, is, and Call failed. Analyze the packet loss.

Verify if there is a service interruption for Google Voice reported on the Google Workspace Updates Blog website.

NO.72 The security team for your organization is concerned about phishing attacks against your end user base. What two actions should you take to configure the strongest possible preventative measure against phishing attacks? (Choose two.)

Train end users to mark messages as spam when they see something suspicious.

Configure spoofing and authentication controls to warn end users about messages that are perceived as threats.

Configure spoofing and authentication controls to quarantine messages that are perceived as threats.

Enforce confidential mode for all messages sent and received from your Workspace domain.

Force encryption on all inbound and outbound emails from your Workspace domain.

NO.73 A user reached out to the IT department about a Google Group that they own:
[email protected]. The group is receiving mail, and each message is also delivered directly to the user’s Gmail inbox. The user wants to be able to reply to messages directly from Gmail and have them sent on behalf of the group, not their individual account. Currently, their replies come from their individual account. What would you instruct the user to do?

Create a new content compliance rule that matches the user’s outgoing messages with the group copied, and have it modify the sender to be the group address.

Add the group as an email address that can be sent from within Gmail, and verify that the user has access. They can then choose to reply from the group.

Add the user’s individual account as a delegate to the group’s inbox. They can then toggle between the accounts and use the Gmail interface on behalf of the group.

Set the group address to be the default sender within the group’s posting policies.

NO.74 Your sales team, which is organized as its own organizational unit, is prone to receiving malicious attachments. What action should you take, as an administrator, to apply an additional layer of protection in the admin console for your sales team without disrupting business operation?

Configure an attachment compliance rule to send any emails with attachments received by users within the sales team organizational unit to an administrator quarantine.

Configure an attachment compliance rule to strip any attachments received by users within the sales team organizational unit.

Configure the security sandbox feature on the sales team organizational unit.

Update the Email Allowlist in the admin console to only include IP addresses of known senders.

NO.75 Your organization has confidential internal content for which only authorized employees are allowed to access Access to this content is managed by using Google Groups Only administrators can create and manage membership You need to provide only the necessary functionality and follow the principle of least privilege What should you do?

Make a dynamic group so security team members are automatically added

Make a moderated group so all incoming communications can be monitored

Use a group as a collaborative inbox that allows easier sharing

Make a security group to apply access policies

NO.76 Your company policy requires that managers be provided access to Drive data once an employee leaves the company.
How should you grant this access?

Make the manager a delegate to the former employee’s account.

Copy the data from the former employee’s My Drive to the manager’s My Drive.

Transfer ownership of all Drive data using the file transfer ownership tool in the Google Workspace Admin console.

Login as the user and add the manager to the file permissions using the “Is owner’ privilege for all Drive files.

NO.77 Your company’s compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company’s account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.
Which combination of attributes will meet this objective?

Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions:
one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.

Name the rule > select Outbound > select If ANY of the following match > add two expressions:
one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject

Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions:
one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

Name the rule > select Outbound > select If ALL of the following match > add two expressions:
one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

NO.78 Your business partner requests that a new custom cloud application be set up to log in without having separate credentials.
What is your business partner required to provide in order to proceed?

Service provider logout URL

Service provider ACS URL

Identity Provider URL

Service provider certificate

NO.79 Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?

Navigate to “Data Protection” setting in Google Admin Console’s Device management section and disable the “Allow users to copy data to personal apps” checkbox.

Disable “Open Docs in Unmanaged Apps” setting in Google Admin Console’s Device management section.

Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.

Clear the “Allow items created with managed apps to open in unmanaged apps” checkbox.

Free certification test prep

[2025] Google-Workspace-Administrator PDF Questions – Perfect Prospect To Go With PDF4Test Practice Exam [Q58-Q79]

Leave a Reply Cancel reply