GWS-ADMIN Practice Test 4 — 10 Questions

Question 1

Which TWO of the following can be restricted in Google Drive sharing settings?

Accepted Answer

Sharing with users who do not have a Google account. You can restrict sharing to external domains and prevent sharing with non-Google accounts.

Answer

The size of files shared via links

Answer

The specific users who can use the Drive app

Answer

The number of files a user can share per day

Question 2

An organization wants to configure SSO with a third-party SAML IdP. Which THREE advanced settings can be configured within the Google Workspace SAML application settings? (Choose three.)

Accepted Answer

Name ID format selection (e.g., EMAIL, PERSISTENT). Advanced SAML settings include configuring Start URL, Name ID format, and Signed requests/responses.

Answer

Direct database connection pool size for real-time user lookup

Answer

Custom SSL cipher suites for the Google Workspace login button rendering

Question 3

You have multiple domains in a single Google Workspace account. How can you provision users in a specific sub-domain?

Accepted Answer

Select the domain from the dropdown in the 'Add user' dialog. During user creation, you can select the domain from the dropdown menu of verified domains.

Answer

Rename the primary domain

Answer

Use a group alias

Answer

Create an OU for the domain

Question 4

You have enabled 'Google+ ' for your organization, but some users cannot see it. What is the most likely cause?

Accepted Answer

They are in the wrong OU. Service visibility is controlled at the OU level; ensure the service is 'ON' for that specific OU.

Answer

They need a higher license

Answer

The API is disabled

Answer

Their browser cache is full

Question 5

Which THREE of the following are aspects of the Directory API 'user' resource?

Accepted Answer

Suspension status. The user resource includes primary email, name, and suspension status as standard fields.

Answer

Device serial number

Answer

Account creation date

Question 6

Which TWO tools in the Admin Console help you identify potentially compromised accounts?

Accepted Answer

Security dashboard. The Security dashboard and the Investigation tool are the primary means of identifying suspicious activity in user accounts.

Answer

Vault search

Answer

Group settings

Answer

Data regions

Question 7

Your organization requires that all Google Meet recordings be saved to a specific shared folder. How can you automate this?

Accepted Answer

It is not possible to change the default location via Admin Console settings. Google Meet recordings are saved to the meeting organizer's 'Meet Recordings' folder in My Drive by default. You cannot redirect this to a shared folder via admin settings.

Answer

Set the 'Default storage' path in Apps > Google Workspace > Meet

Answer

Configure the 'Recording location' in Meet settings

Answer

Create a Drive retention policy for Meet

Question 8

You are configuring Endpoint Verification. What is the primary purpose of the Endpoint Verification extension on a user's browser?

Accepted Answer

To collect device information for context-aware access. Endpoint Verification collects device metadata (serial number, encryption, OS) and reports it to the Admin console for access context.

Answer

To enable remote wipe capabilities

Answer

To enforce password complexity

Answer

To block all malicious websites

Question 9

A department requires a custom building resource to be added to Google Calendar. Where do you add this?

Accepted Answer

Directory > Buildings and resources. Building resources are managed under Directory > Buildings and resources.

Answer

Apps > Google Workspace > Directory > Calendar

Answer

Apps > Google Workspace > Calendar > Resources

Answer

Organization > Settings > Resources

Question 10

Which TWO of the following are valid methods to audit file access in Google Drive?

Accepted Answer

Use the Security Investigation Tool. Audit logs and the Investigation tool are the standard ways to monitor file activity.

Answer

Enable Google Vault for Drive exports

Answer

Set up alerts for all file deletions

Answer

Check the user's 'My Drive' settings