Be able to translate an administrative scenario into the exact Admin console location, organizational unit scope, and service configuration. The single most important thing is knowing which control — routing, retention, sharing, or OAuth scope — actually enforces the requirement, since similar-sounding settings do different jobs.
Start practicing
Core Workspace Services — choose a session length
Free · No account required
Domain overview
This domain covers the day-to-day administration of Gmail, Google Drive, Calendar, Meet, Chat, and shared services in Google Workspace. Questions present operational scenarios — routing mail through gateways, scoping service accounts, retaining messages for eDiscovery, and restricting Drive sharing — and ask you to pick the correct Admin console setting, organizational unit scope, or API configuration.
Exam objectives
Configuring Gmail routing and compliance rules, including third-party gateway and dual delivery
Authorizing service accounts for Gmail API access using OAuth scopes and domain-wide delegation
Setting retention and holds for eDiscovery across Gmail and Drive via Vault
Applying Drive sharing policies at the organizational unit level, including allowlists and link sharing
Assuming a Gmail routing rule alone archives mail; retention and eDiscovery require Vault holds or retention rules, not just routing.
Placing Drive sharing restrictions at the top-level organization when the scenario requires a specific organizational unit or group.
Granting service account OAuth scopes in the Admin console without enabling domain-wide delegation or the correct API scopes.
Click any question to see the full explanation and answer options, or start a focused practice session above.
Which setting allows you to see what files are being shared externally across your entire domain?
2You need to prevent users from sharing Google Drive files with people outside the organization. Which setting should you modify?
3Your organization requires that all Google Meet recordings be saved to a specific shared folder. How can you automate this?
4You want to ensure that users cannot change their profile photo. Where is this setting located?
5You are setting up a new service account to access Gmail APIs. Where must you provide the required OAuth scopes to authorize access?
6You need to change the default language and region settings for all new users in a specific Organizational Unit. How do you do this?
7Where can an administrator view the status of a user's 2-Step Verification enrollment?
8Which report would you use to identify users who haven't logged in for more than 30 days?
9Which TWO of the following are valid methods to audit file access in Google Drive?
10Which THREE settings can be configured within the Gmail Compliance section?
11Your organization wants to ensure that all outgoing mail is routed through a third-party email security gateway for scanning. What is the correct configuration?
12Which TWO of the following can be configured in the Google Workspace Admin Console to restrict user access to Google Drive?
13Which THREE items can be managed through the 'Directory' section in the Admin Console?
14Which TWO of the following can be restricted in Google Drive sharing settings?
15Which THREE of the following are valid ways to manage Google Calendar resource availability?
16You are the Workspace administrator for a healthcare company. A new compliance policy requires that all external email sent from your domain be digitally signed so that recipients can verify the messages are genuinely from your organization. You need to configure this in the Google Workspace Admin console. What should you do?
17A user in your organization reports that they cannot access their Google Drive files from their mobile device. They can access Drive from their laptop without issue. You suspect a device-based access policy is blocking mobile access. Where in the Google Admin console should you check?
18Your organization uses Google Workspace and has a mix of full-time employees and temporary contractors. You need to ensure that contractors cannot access Google Drive from unmanaged mobile devices, while employees can. Which TWO configurations should you implement? (Choose two.)
19A user in your organization reports that they accidentally deleted a Google Calendar event that contained important meeting notes and attachments. The event was deleted from a secondary calendar they own. Where can the user recover the deleted event?
20Your organization has a policy that all Google Drive files must be owned by the organization, not by individual users. A user creates a new Google Doc and shares it with an external collaborator. You need to ensure that the file remains owned by the organization even if the user leaves. What should you do?
21Your organization is migrating from Microsoft Exchange to Google Workspace. The IT director wants to ensure that all existing calendar events, including recurring meetings and resource bookings, are transferred to Google Calendar with minimal user intervention. Which Google Workspace service should you use to accomplish this?
22You are the Google Workspace administrator for a company that wants to enforce stricter controls on how users share Google Drive files. You need to configure sharing settings at the organizational unit level. Which TWO of the following actions can you perform in the Google Drive sharing settings for an organizational unit? (Choose two.)
23Your company's security team wants to ensure that all outgoing email from your Google Workspace domain is authenticated so that external recipients can verify it. They ask you to check the current email authentication configuration for the domain. Where should you look in the Google Workspace Admin console to review and manage these settings?
24You are the Workspace administrator for a retail company. The legal department needs to ensure that all email sent to and received from a specific external domain is archived for eDiscovery, even if users delete the messages. Which Google Workspace feature should you configure?
25A manager needs to know which users in the sales organizational unit have not signed in to their Google Workspace account in the past 30 days. The manager does not have admin access. What should the administrator do to provide this information?
26Your company has a Google Workspace subscription. The IT team wants to ensure that all users' Chrome browsers are configured to block third-party cookies and that this setting cannot be changed by users. Which Google Workspace setting should you configure?
27Your organization uses Google Workspace and you have been asked to ensure that all email sent from your domain passes SPF, DKIM, and DMARC checks. You have already published SPF and DKIM records. Which action should you take to complete the DMARC configuration?
28Your organization has a policy that employees must not be able to download Google Drive files on unmanaged devices. You have already set up Context-Aware Access with an access level that requires managed devices. However, users report they can still download files from Drive on personal devices. What is the most likely reason?
Be able to translate an administrative scenario into the exact Admin console location, organizational unit scope, and service configuration. The single most important thing is knowing which control — routing, retention, sharing, or OAuth scope — actually enforces the requirement, since similar-sounding settings do different jobs.
The Courseiva GWS-ADMIN question bank contains 28 questions in the Core Workspace Services domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Core Workspace Services domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included