Be able to trace a symptom to its source using Admin console audit logs, Gmail headers, and SAML/calendar settings. The key skill is reading the actual error or log evidence before changing configuration, rather than guessing at the fix.
Start practicing
Troubleshooting — choose a session length
Free · No account required
Domain overview
This domain covers diagnosing Google Workspace issues across authentication, Gmail delivery, SAML SSO, and sharing. Questions present a user-reported symptom and ask you to identify the cause or the next diagnostic step, using Admin console tools, audit logs, and message headers rather than guesswork.
Exam objectives
Reading Gmail message headers and SMTP error codes to diagnose bounces
Investigating login failures via Admin console security and user audit logs
Checking SAML app configuration: ACS URL, entity ID, and certificate
Verifying calendar sharing permissions, ACLs, and visibility settings
Assuming repeated lockouts mean the user forgot their password, instead of checking for suspicious sign-in attempts or credential-stuffing from multiple IPs.
Treating a 550 5.7.1 bounce as a Google Workspace outage, when it usually reflects the recipient server rejecting the message.
Debugging SAML errors by only re-uploading the certificate, ignoring mismatched ACS URLs, entity IDs, or attribute mappings.
Click any question to see the full explanation and answer options, or start a focused practice session above.
A user is unable to sync their Google Drive files to their local machine using Drive for Desktop. What is the first step you should recommend?
2An organization uses a third-party gateway to route email. Users report that emails are being marked as spam frequently. Which DNS record should you investigate to ensure Google trusts the gateway?
3A user has left the company. You need to migrate their data to another user. Which tool should you use?
4A user claims they cannot see a shared calendar. What should you check to resolve this?
5A user reports that they are not receiving emails from an external vendor. As an administrator, where should you first look to verify if the messages reached Google's servers?
6A user reports that emails sent to a specific external domain are bouncing with a '550 5.7.1' error. What is the likely reason?
7A user claims they cannot share a file with an external partner. What is the most likely cause within the Admin console?
8A user is unable to send email to a group. What is the most common cause?
9A user needs to see their login history. Where can you find this information?
10A user is unable to access a specific mobile app on their managed device. Which tool should you use to check the device policy status?
11An administrator notices unusual login activity from a specific geographic location. What is the first step to prevent further unauthorized access?
12A user is receiving 'Account temporarily unavailable' messages. What is the primary thing to check?
13A user reports that emails are not being sent to an external mailing list. The logs show '550 5.1.1'. What does this code indicate?
14You have configured a new transport rule, but it is not triggering as expected. What is the first troubleshooting step?
15A user reports that their mobile device is no longer syncing corporate data. What is the most likely cause?
16A user is unable to access Google Drive. Which TWO of the following should you check first?
17A user reports their Gmail is not receiving external mail. Which TWO of the following could be the cause?
18An organization is failing to receive emails from a specific sender. The logs show the messages were rejected by the 'Spam Filter'. What should you do?
19A mobile device is not syncing corporate email. Which THREE of the following should you investigate?
20When troubleshooting a SAML application error, which THREE of the following should you check?
21Which TWO of the following steps are useful when troubleshooting a user's inability to share a file externally?
22When an email is reported as missing, which THREE logs or tools can help you track the issue?
23You notice that a user's account is generating a large amount of spam. What is the immediate action you should take?
24A Workspace administrator uses the Email Log Search tool in the Admin console to investigate a message that a user says never arrived. The search returns a single entry with the delivery status 'Rejected' and the SMTP response code '550 5.7.1'. The recipient's mailbox exists and is active. What is the most likely reason the message was rejected?
25A Google Workspace administrator is troubleshooting why a user cannot access a Google Drive file shared by another user in the same domain. The file is owned by a user in the same domain, and the sharing settings are set to 'Anyone in the organization with the link can view'. The user reports seeing a 'You need permission' error. The administrator has verified that the user is signed in with the correct account. Which of the following is the most likely cause?
26A user in your organization reports that when they try to open a Google Docs file shared by a colleague, they see a message stating they need to request access. The colleague confirms the file is shared with the entire organization as Editor. What should you check first to resolve this?
27A Google Workspace administrator is investigating why a user is not receiving email notifications from an external CRM system. The CRM vendor confirms emails are sent from notifications@crmvendor.com, but the user's inbox shows nothing. The admin runs a message trace in the Google Admin console and sees the messages were delivered to the user's mailbox. What should the admin check next?
28A Google Workspace administrator receives reports that some users are not receiving email notifications from a third-party ticketing system. The ticketing system sends from a domain that has a strict DMARC policy. The notifications are not in spam. What should the administrator check first?
29A Google Workspace administrator receives reports that users in the sales department cannot access a shared drive named 'Sales Proposals'. The shared drive still appears in their Google Drive interface, but when they try to open it, they get a 'You need permission' error. The admin confirms the shared drive exists and that the sales team is a member of a Google Group that was previously added as a member of the shared drive. What is the most likely cause?
30A user reports that they are unable to access a Google Meet link shared by an external partner. The user can access other Google Meet links from within the organization. Which TWO of the following should the administrator check to resolve this? (Choose two.)
31A Workspace administrator receives reports that several users in the sales organizational unit cannot sign in to their accounts from newly issued corporate Android devices. The users can sign in successfully from their laptops. The administrator has already confirmed the users' passwords are correct and that no account suspensions are in place. Which TWO of the following should the administrator check to resolve the mobile sign-in failures? (Choose two.)
32A Google Workspace administrator is troubleshooting a user's inability to sign in to their account. The user reports that after entering their password, they see a message saying 'Your account is not allowed to sign in from this device.' The admin checks the user's account status and sees it is active. What should the admin check next?
33A Google Workspace administrator is troubleshooting a Google Meet issue for a user. The user reports that when they try to join a meeting from a Chrome browser, they see a 'You cannot join this call' error, but other participants can join successfully. The user can join the same meeting from the Google Meet mobile app without issues. The administrator checks the user's OU and confirms that Google Meet is enabled and that the user has a valid license. Which is the MOST likely cause of the browser-specific error?
34An administrator at a retail company notices that a user's Google Drive files are suddenly inaccessible to colleagues who previously had access. The administrator checks the file's sharing settings and sees that the sharing permissions still list the colleagues. The administrator also confirms the colleagues can access other files in the same shared drive. Which action should the administrator take first to troubleshoot the issue?
35A Google Workspace administrator receives a report from a user who cannot access Google Drive. The user sees a 'Service not enabled for this account' error when attempting to open Drive. The administrator confirms that the user is in an organizational unit (OU) where Google Drive is turned ON. What should the administrator check NEXT to resolve this issue?
36A Workspace administrator is troubleshooting a report that calendar invitations sent by a user are not appearing on recipients' calendars. The recipients are internal users in the same domain. The administrator confirms that the sender can create events and that recipients receive the invitation emails. Which setting should the administrator check to resolve the issue?
37A Workspace administrator at a financial services firm configures a new SMTP relay service in the Admin console to allow an on-premises application to send notifications through Google Workspace. After configuration, the application's messages are being rejected with an authentication error. The administrator confirms the application is sending to smtp-relay.gmail.com on port 587 and that the sending server's IP address is included in the allowed list. Which additional requirement must be met for the SMTP relay service to accept the messages?
38A Google Workspace administrator notices that a user's account is repeatedly locked out after multiple failed login attempts from different IP addresses. The user insists they are not attempting to sign in. What should the administrator do first to mitigate the issue?
39A Google Workspace administrator is investigating why a user's Google Calendar events are not syncing to their mobile device. The user has an Android device with the Google Calendar app installed and signed in with their Workspace account. The administrator confirms that the user can access Calendar on the web and that events appear there. Which TWO of the following should the administrator check to resolve the mobile sync issue? (Choose two.)
40A Google Workspace administrator is troubleshooting an issue with Google Groups. A user reports that they are not receiving email sent to a group they are a member of. The administrator checks the group's settings and confirms that the user is a direct member with 'Email' subscription. The group's access settings allow external senders. The administrator also verifies that the group's email address is correct and that messages are not being caught by spam filters. Which is the MOST likely cause of the user not receiving group emails?
41A Google Workspace administrator needs to investigate why a specific user's Google Drive files were suddenly shared externally. The administrator must identify which user action triggered the sharing and when it occurred. Which tool should the administrator use to find this information?
42A Google Workspace administrator needs to quickly identify which users have been suspended in the domain. Which tool should the administrator use to get this information?
Be able to trace a symptom to its source using Admin console audit logs, Gmail headers, and SAML/calendar settings. The key skill is reading the actual error or log evidence before changing configuration, rather than guessing at the fix.
The Courseiva GWS-ADMIN question bank contains 42 questions in the Troubleshooting domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Troubleshooting domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included