GWS-ADMIN Practice Test 11 — 15 Questions

Question 1

An administrator is configuring Context-Aware Access to secure corporate data. Which TWO criteria can be evaluated within a Context-Aware Access access level expression? (Choose two.)

Accepted Answer

User's current geographic location (country/region).. Context-Aware Access evaluates attributes such as device security status (screen lock, encryption, management) and IP subnets.

Answer

The number of unread emails in the user's Gmail inbox.

Answer

The user's local operating system password complexity and history length.

Answer

The user's direct manager name listed in the directory schema.

Question 2

A user in the 'Sales' OU is not receiving policy updates applied to that OU. What is the most likely cause?

Accepted Answer

Inheritance is disabled for the Sales OU. Inheritance is the default behavior; if it is broken, child OUs do not receive parent policies.

Answer

The user is in a group

Answer

The domain is not verified

Answer

The user has a suspended account

Question 3

A user complains that they cannot access their work email. You see the device is marked as 'Blocked' in the Admin console. What should you do?

Accepted Answer

Approve the device in the mobile management list. If a device is blocked, changing the status to 'Approved' or 'Unblocked' will restore access.

Answer

Send a 'Sync' command

Answer

Factory reset the device

Answer

Delete the device record

Question 4

An administrator wants to ensure that users cannot reuse any of their last 5 passwords when changing their password. Where is this setting configured?

Accepted Answer

Security > Password management > Password history. Password history and restriction settings are located under Security > Password management.

Answer

Directory > Users > Security > Passwords

Answer

Account settings > Security > Password recycling

Answer

Apps > Google Workspace > Settings > Password policy

Question 5

Which THREE of the following are types of reports available in the 'Reports' section of the Admin console regarding mobile devices?

Accepted Answer

Device security report. Device usage, audit events, and compliance reports are standard reports in Google Workspace.

Answer

Data usage report

Answer

User password report

Question 6

You need to distribute a specific internal Android app to a subset of users. What is the most efficient way to achieve this using Google Workspace?

Accepted Answer

Add the app to the Managed Google Play store and assign to an OU. Adding the app to the managed Google Play store and assigning it to specific organizational units (OUs) allows for controlled distribution.

Answer

Enable 'Allow all apps' in the mobile device settings

Answer

Manually install the APK on every user's device

Answer

Send the APK via email to all employees

Question 7

Which TWO of the following can be enforced via ChromeOS device settings?

Accepted Answer

Forced re-enrollment after factory reset. Enforcing forced re-enrollment and restricted sign-in are core device security policies.

Answer

Automatic screen cleaning

Answer

Mandatory screen brightness levels

Answer

Automatic battery calibration

Question 8

You need to enforce 2-Step Verification for a specific department while allowing others to opt-in voluntarily. Which configuration path should you use?

Accepted Answer

Move the department users into a dedicated Organizational Unit and enable 'Enforce' in the 2-Step Verification settings.. To enforce 2SV for specific users, you must use Organizational Units (OUs) or Groups and manage the enforcement settings under Security > Authentication > 2-step verification.

Answer

Apply the enforcement policy at the root Organizational Unit level.

Answer

Use the Google Cloud Identity platform to create a conditional access policy for individual users.

Answer

Set the 'Allowed to opt-in' setting to 'Off' for the entire domain.

Question 9

Which THREE settings can be enforced on Android devices using Advanced mobile management?

Accepted Answer

Managed application deployment. Advanced management allows for mandatory passcodes, managed applications, and remote wipe capabilities.

Answer

Enable the device's GPS tracking

Answer

Force an OS update

Question 10

You are using the Directory API to update user phone numbers. Which method should you use?

Accepted Answer

PATCH. The 'patch' method allows updating specific fields without needing to send the entire user resource.

Answer

GET

Answer

POST

Answer

DELETE

Question 11

You need to add a secondary domain to your Google Workspace account. What must you perform after adding the domain in the Admin console?

Accepted Answer

Verify domain ownership. Verification is mandatory to prove domain ownership via DNS records.

Answer

Create a new OU

Answer

Set up SPF records

Answer

Provision user accounts

Question 12

You are migrating users from a secondary domain to the primary domain. What is the impact on their email?

Accepted Answer

The old email address becomes an alias. Changing a primary domain email requires renaming the user, which creates an alias of the old address.

Answer

The user must re-verify their identity

Answer

Data is lost

Answer

The user is automatically suspended

Question 13

Which TWO of the following tasks can be performed in the Users section of the Admin console?

Accepted Answer

Assigning a user to a group. The Users section is the central hub for creating, managing, and monitoring user accounts.

Answer

Verifying the domain

Answer

Configuring SMTP relays

Answer

Creating a new domain

Question 14

An organization is using Google Workspace Sync for Microsoft Outlook (GWSMO). A user is experiencing sync delays. What tool should you use to check the GWSMO status?

Accepted Answer

GWSMO Status tool on the user's machine.. The GWSMO 'Set up a Google Workspace Sync user' tool or local log files are used to monitor and debug sync status.

Answer

Google Drive sync tool.

Answer

Password reset tool.

Answer

Admin Console Reports

Question 15

An enterprise organization is planning its 2-Step Verification (2SV) rollout. Which THREE methods or tokens are natively supported by Google Workspace for 2SV authentication? (Choose three.)

Accepted Answer

Time-based One-Time Password (TOTP) authenticator apps (e.g., Google Authenticator). Google Workspace supports security keys (FIDO2/U2F), Google Prompts on mobile devices, and authenticator app OTP codes (TOTP).

Answer

Biometric retina scans processed by local BIOS firmware

Answer

Automatic voice call verification through landline pulse dialing tones