Endpoint Management

You need to ensure that all corporate-owned Android devices require a screen lock. Where should you configure this setting?

You want to require that all corporate-owned iOS devices are encrypted. How is this achieved?

You are configuring Endpoint Verification. What is the primary purpose of the Endpoint Verification extension on a user's browser?

You are setting up Context-Aware Access. You want to deny access to Google Workspace if the device is not encrypted. Which tool identifies the 'is_encrypted' attribute?

You need to deploy a specific Android application to a subset of users. What is the correct procedure?

A user claims their corporate data is not being wiped after they left the company. You previously issued a 'wipe device' command. What should you check to verify the outcome?

A user reports that their Android work profile is no longer syncing corporate emails. As an administrator, which action should you perform first in the Google Admin console to investigate?

Where do you go to view a list of all devices currently accessing your organization's data?

A user is unable to install a managed app on their iOS device. What is the first thing you should verify?

You want to prevent users from copying data from managed apps into personal apps on their mobile devices. Which feature should you configure?

An employee lost their company-issued Android device. What is the most effective way to secure the data?

You need to ensure that Chrome browsers on unmanaged devices are secure. What is a key step to take?

Which TWO of the following actions can be performed on an Android device from the Admin console?

Which of the following is true regarding 'Advanced' mobile management for iOS?

A user complains that they cannot access their work email. You see the device is marked as 'Blocked' in the Admin console. What should you do?

You are configuring a 'Work profile' for Android. What is the primary benefit of this setup?

Which THREE of the following attributes can be used in Context-Aware Access policies?

Which TWO of the following methods can be used to enroll Android devices?

Which TWO of the following can be enforced via ChromeOS device settings?

Which THREE of the following are settings that can be controlled in the Chrome browser for all users?

You want to ensure that only managed Chrome devices can access your organization's Google Workspace data. Which tool should you configure to verify the security posture of the device before allowing access?

You need to distribute a specific internal Android app to a subset of users. What is the most efficient way to achieve this using Google Workspace?

You are implementing context-aware access and need to ensure that only devices with a disk-encrypted state are allowed to access Google Drive. Which feature enables this check?

Which THREE settings can be enforced on Android devices using Advanced mobile management?

When managing ChromeOS devices, which TWO settings can be configured within the 'Device settings' section of the Admin console?

Your organization uses Google Workspace and has a fleet of company-owned Windows 10 laptops. You want to ensure that only devices that are company-owned and meet specific security requirements (like disk encryption and screen lock) can access Gmail and Drive. You have already enrolled devices in Windows device management. Which additional step is required to enforce these device-based access policies?

Your organization uses Google Workspace and wants to enforce context-aware access for users accessing Gmail from desktop browsers. You need to ensure that only company-owned Windows devices with up-to-date OS patches and encrypted drives are allowed. Which two components are required to achieve this? (Choose two.)

You are a Workspace admin. Your company issues Android devices to field technicians. You need to ensure that if a device is lost or stolen, you can remotely wipe only corporate data (Gmail, Drive, Calendar) without erasing personal photos and apps. The devices are enrolled in advanced mobile management. Which action should you take?

You are a Workspace administrator. Your organization provides company-owned Windows 10 laptops to employees. You want to ensure that only these corporate laptops, which are already enrolled in Windows device management, can access Google Workspace services. You also need to block access from personal Windows devices. Which action should you take?

Your organization allows employees to use personal iOS devices for work. You need to ensure that when a user adds their corporate Google Workspace account to the native iOS Mail app, the device is automatically enrolled in advanced mobile management and a passcode is enforced. What should you do?

You are configuring Chrome policies for your organization's managed Chrome browser on Windows devices. You want to control which extensions users can install. Which two policies should you configure? (Choose two.)

Your organization uses Google Workspace and has a fleet of company-owned ChromeOS devices. You want to ensure that these devices automatically install a set of essential web apps and extensions for all users. You also need to prevent users from uninstalling these apps. Which configuration should you implement?

Your company uses Windows 10 laptops. You want to ensure that only devices with a valid and up-to-date Endpoint Verification extension and a recent sync can access Google Drive. You have already deployed the extension. Which additional step must you take to enforce this requirement?

A user reports that their company-owned Android device is not receiving work emails. You check the Admin console and see that the device is listed but the status is 'Pending'. What should you do first?

You are a Workspace administrator. Your organization has a fleet of company-owned Windows devices that are already enrolled in Windows device management and synced to Google Workspace. You want to prevent users from signing in to their Google Account on any Windows device that is not company-owned, without affecting Android or iOS users. What should you do?

A user reports that their company-owned Android device is not receiving work emails in the Gmail app. You check the Admin console and see that the device is listed as 'Compromised'. What is the most likely cause?

Your organization uses Google Workspace and has a fleet of Windows 10 laptops managed by a third-party UEM tool. You need to enforce Context-Aware Access so that users can access Workspace apps only from devices that meet your security policies. What should you deploy on each Windows device to enable device-based access levels?

Your organization wants to allow employees to use their personal iOS devices to access Google Workspace, but you need to ensure that corporate data can be wiped if the device is lost. You also want to avoid wiping personal data. Which mobile management setting should you enable?

Your company has a mix of ChromeOS devices and Windows laptops. You want to ensure that only devices that are company-owned and enrolled in your domain can access Google Workspace. You have already set up Context-Aware Access with an access level that requires the device to be company-owned. However, users on Windows laptops are still able to access Workspace from personal devices. What is the most likely cause?

A user reports that their company-owned Windows laptop is not appearing in the list of devices under Endpoint Verification. You have confirmed that the user is signed in to Chrome with their Workspace account. What is the most likely reason for this issue?

You are a Workspace administrator for a company that uses ChromeOS devices. You want to ensure that all ChromeOS devices are automatically enrolled in your organization's domain when they are first powered on by an employee. Which setting should you configure?

A user reports that their company-owned Android device has been lost. You need to remotely wipe all data from the device, including personal data. Which action should you take in the Admin console?

A user reports that their company-owned Android device is not receiving the latest security policies you configured in the Admin console. You have verified that the device is enrolled in Advanced mobile management. What should you check first to ensure policies are applied?

Your organization uses Chrome browser policies to manage extensions. You want to allow only a specific set of extensions and block all others for all users. You have created a JSON policy file and applied it to the organizational unit. However, users report that they can still install other extensions from the Chrome Web Store. What is the most likely reason?

Your organization wants to block access to Google Workspace from all Android devices that are not running the latest security patch. You have configured a Context-Aware Access access level that requires the device to have a security patch level within the last 90 days. However, you notice that some devices with outdated patches are still able to access Gmail. What is the most likely reason?

Your organization uses Chrome browser on Windows devices. You want to ensure that users cannot disable or remove the Endpoint Verification extension. What should you do?

You are deploying Endpoint Verification for your organization. You need to ensure that only devices with a valid endpoint verification certificate can access Google Workspace apps. You have already enforced the Endpoint Verification extension. What additional step is required to enforce device trust based on the certificate?

Your organization has a mix of Windows, macOS, and Linux devices. You want to use Context-Aware Access to block access to Google Drive from devices that do not have disk encryption enabled. You have deployed Endpoint Verification to all devices. Which access level condition should you use?

You are a Workspace administrator. Your organization has a policy that all iOS devices accessing Gmail must have a passcode and be encrypted. You have enabled advanced mobile management for iOS. However, some users report that they can still access Gmail on their iOS devices without setting a passcode. What is the most likely reason for this?

You are a Workspace administrator. A user reports that their company-owned Android device is not receiving work emails in the Gmail app. You check the Admin console and see that the device is listed as 'Pending' in the mobile devices list. What is the most likely reason for this status?

You are a Workspace administrator for a healthcare organization. You need to ensure that nurses using company-owned iPads can only access patient records through a specific internal app, and that they cannot copy patient data into personal apps like Mail or Messages. Which Google Workspace endpoint management feature should you configure?