User Accounts Domains And Directory

You are automating user creation via the Directory API. Which scope is required to create users?

Which tool would you use to sync local Active Directory users to Google Workspace?

An administrator mistakenly deleted a user account 10 days ago. How can you restore this account?

You have multiple domains in a single Google Workspace account. How can you provision users in a specific sub-domain?

You need to add a secondary domain to your Google Workspace account. What must you perform after adding the domain in the Admin console?

A new employee needs access to Google Workspace. What is the minimum action required in the Google Admin console to create the account?

What happens to a user's data when you suspend their account?

You need to add a custom attribute to user profiles. Where is this configured?

What is the primary function of an alias address?

Where can an administrator force a password reset for a single user?

An administrator needs to view all changes made to organizational units. Which report should they use?

You are migrating users from a secondary domain to the primary domain. What is the impact on their email?

You need to grant a user permission to manage only the 'Marketing' OU. Which administrative role do you assign?

Which feature prevents a user from being deleted during a directory sync?

What is the maximum number of custom aliases a user can have?

What happens when you delete an Organizational Unit?

How can you prevent users from changing their profile photo?

You are seeing a 'Domain already in use' error when adding a domain. What is the most likely cause?

You are using the Directory API to update user phone numbers. Which method should you use?

Where do you manage the shared contacts for your organization?

What is the difference between a primary domain and a secondary domain?

You want to automate user account creation based on a specific event. What is the recommended approach?

A user claims they cannot reset their password using the 'Forgot Password' link. What is the most likely cause?

Which TWO of the following are true regarding the Directory API?

Which TWO of the following are common reasons for a user sync failure in GCDS?

Which THREE actions can be performed using the Google Admin console's bulk user management tool?

Which THREE of the following are aspects of the Directory API 'user' resource?

Which TWO of the following tasks can be performed in the Users section of the Admin console?

Which THREE of the following are components of the Directory API 'group' resource?

Which TWO of the following are types of domains in Google Workspace?

Which TWO of the following can be modified in the Admin console's 'Company Profile' section?

Your company has a Google Workspace domain, example.com. A new subsidiary, subsidiary.com, will use Google Workspace but must remain a separate domain in the Admin console. You have added subsidiary.com as a secondary domain and verified ownership. Users at subsidiary.com need email addresses such as alice@subsidiary.com, but their accounts must be under the same Google Workspace subscription. What should you do next?

You are the Google Workspace administrator for a company with 5,000 users. The HR department needs to update the 'Department' and 'Manager' fields for all users. They will provide a CSV file. You want to minimize manual effort and ensure the updates are applied correctly. Which method should you use?

You are the Workspace administrator at a company where every employee's mailbox must be preserved for seven years after they leave. A user in the Sales organizational unit resigns, and you need to immediately block sign-in and stop new mail from being delivered to that mailbox while keeping all existing mail intact. What should you do?

A new employee joins the company, and the administrator wants the user's mailbox to be created in the Sales organizational unit with a Google Workspace license applied automatically. Which action accomplishes this?

Your organisation has a primary domain, example.com, and a secondary domain, example.net. The marketing team wants all new hires to receive an address at example.net while existing staff keep their example.com addresses. You have already verified example.net and created the necessary users. What must you do so that mail sent to the new users' example.net addresses is delivered?

As a Google Workspace administrator, you need to ensure that all users in your organization are required to use two-step verification. Which setting in the Admin console controls this enforcement?

A Google Workspace administrator at a company with a single primary domain wants to make a newly created OU named 'Contractors' immediately available as a target for dynamic group membership rules and shared drive access policies. A colleague suggests that the OU must be populated with at least one user before it can be referenced by policy. Which statement describes what actually happens after the OU is created in the Admin console?

A new employee joins the company and needs a Google Workspace account. The administrator wants to create the account manually, assign a license, and ensure the user is placed in the correct Organizational Unit (OU) from the start. Which sequence of steps should the administrator follow?

A Google Workspace administrator is preparing to add a new secondary domain and needs to ensure that users in that domain can sign in and receive mail. Which two actions must the administrator perform after adding the domain in the Admin console? (Choose two.)

A user in your Google Workspace domain has left the company. You need to immediately suspend their account to prevent access, but you may need to restore it later if they return. What should you do?

A company has a Google Workspace account with multiple domains. The administrator needs to ensure that when users sign in with their email address, they are redirected to the correct domain's login page. The company uses SAML SSO with a third-party IdP. Which setting should the administrator configure?

You are the Workspace administrator for a company that has just acquired a smaller business. The acquired business currently uses its own Google Workspace account with the domain 'acme-parts.com'. Your leadership team wants users from 'acme-parts.com' to appear in the same Global Directory as your primary domain 'yourcompany.com' and to share Google Workspace services, but they must keep sending and receiving email using '@acme-parts.com' addresses. You have already added and verified 'acme-parts.com' as a secondary domain in your Admin console. What should you do next to meet these requirements?

A Google Workspace administrator needs to give a user the ability to reset passwords for other users in the Support organizational unit only, without granting broader privileges. Which role should be assigned?

A school district's Workspace administrator needs every staff member's directory listing to display a job title and department that are visible to all users in the domain, including on the Contacts card in Gmail. The data already exists in the district's HR system. Which action accomplishes this with the least manual effort?

A multinational company has a primary domain, example.com, and a secondary domain, example.net, in the same Google Workspace account. The administrator wants users signing in with the example.net alias to appear in the Global Directory under example.net rather than under example.com. What must the administrator configure to achieve this?

Your company uses Google Cloud Directory Sync to provision users from an on-premises Active Directory. A user who left the company was removed from Active Directory last week, but the account still appears as active in the Google Admin console after multiple sync runs. What is the most likely cause?

An organization uses Google Cloud Directory Sync (GCDS) to keep its Workspace directory aligned with an on-premises LDAP directory. The administrator must ensure that local directory attributes map correctly and that deletes in the source system do not accidentally wipe out Workspace accounts and their data, while still allowing legitimate departures to be processed. Which two configuration practices should the administrator apply? (Choose two.)

Your organisation has multiple departments and you want to delegate password reset duties to a small group of team leads without giving them full administrator privileges. Each team lead should only be able to reset passwords for users in their own department's organizational unit. What is the most appropriate approach?

A Google Workspace administrator needs to enforce a policy that requires all users to have a recovery email address set. The administrator wants to monitor compliance and generate a report of users missing a recovery email. What is the most efficient way to achieve this?

Your company uses Google Workspace and has a Google Cloud Directory Sync (GCDS) deployment to synchronize users from an on-premises Active Directory. A new HR policy requires that when an employee is terminated, their account must be suspended immediately and not deleted, but their mailbox data must be preserved for eDiscovery. You need to configure GCDS so that terminated employees are suspended rather than deleted. What should you do?

You are the Workspace administrator for a company that has a mix of full-time employees and temporary contractors. Contractors are placed in a 'Contractors' organizational unit and must not have access to Google Chat or Google Meet. You need to configure the 'Contractors' OU to disable these services while keeping all other services enabled. Which TWO of the following steps should you perform? (Choose two.)

You are the Google Workspace administrator at Northwind Traders. The company has just acquired a small design studio that uses its own domain, studiobright.example. Executive leadership wants the acquired team to keep using their existing email addresses for at least six months while they transition to the corporate domain. You need to add studiobright.example to your Google Workspace account so those users can sign in and receive mail at their current addresses. What should you do first?