GWS-ADMIN Practice Test 5 — 10 Questions

Question 1

You need to prevent users from installing third-party Marketplace apps that request Drive read/write access. How do you configure this?

Accepted Answer

Security > Access and data control > API controls > Manage Google Services. This is managed in Security > Access and data control > API controls > Manage Google Services.

Answer

Apps > Google Workspace > Marketplace > Settings

Answer

Security > App access control

Answer

Apps > Google Workspace > Drive > API settings

Question 2

Which TWO of the following can be configured in the Google Workspace Admin Console to restrict user access to Google Drive?

Accepted Answer

Restrict sharing settings for external domains. Access to Drive is controlled by Sharing settings and Drive API controls.

Answer

Limit the number of files a user can create

Answer

Restrict access to specific file types

Answer

Set a file size limit for all uploads

Question 3

Where do you go to view a list of all devices currently accessing your organization's data?

Accepted Answer

Devices > Mobile & endpoints > Devices. The 'Devices' section in the Admin console provides a centralized view of all mobile and desktop devices.

Answer

Reports > Audit > Mobile

Answer

Directory > Users > Device list

Answer

Security > Devices

Question 4

You need to limit the number of participants in a Google Meet session to 10 for a specific organizational unit. How do you achieve this?

Accepted Answer

It is not possible to limit participant counts via Admin Console. Google Meet does not support limiting the number of participants via the Admin Console.

Answer

Modify the OU policy in Apps > Google Workspace > Meet

Answer

Use a group policy for Meet access

Answer

Set 'Participant limit' in the Meet settings

Question 5

Where can an administrator view the status of a user's 2-Step Verification enrollment?

Accepted Answer

Directory > Users > [User] > Security. User security information, including 2SV status, is found in the individual user's profile within the Directory.

Answer

Security > Authentication > 2SV

Answer

Reports > Audit > Security

Answer

Account > Security Dashboard

Question 6

You are setting up Context-Aware Access. You want to deny access to Google Workspace if the device is not encrypted. Which tool identifies the 'is_encrypted' attribute?

Accepted Answer

Endpoint Verification extension. Endpoint Verification reports device attributes like encryption status back to Google, which Context-Aware Access then uses to evaluate policies.

Answer

Device policy controller

Answer

Admin console audit logs

Answer

Google Cloud Identity sync

Question 7

An employee lost their company-issued Android device. What is the most effective way to secure the data?

Accepted Answer

Use the 'Wipe device' command in the Admin console. Performing a 'Wipe account' or 'Wipe device' command removes corporate data or everything from the device remotely.

Answer

Disable the user's account in Active Directory

Answer

Change the user's password

Answer

Send an email to the employee to delete the data

Question 8

You want to ensure that all internal Google Calendar invites include a link to a Google Meet session. Where do you configure this?

Accepted Answer

Apps > Google Workspace > Google Meet > Meet video settings. This is configured in the Google Meet settings, which automatically adds video conferencing to new calendar events.

Answer

Apps > Google Workspace > Calendar > Settings

Answer

Security > Calendar > Video call settings

Answer

Apps > Google Workspace > Calendar > Sharing options

Question 9

You need to ensure that Google Meet sessions created by your users always require a password/PIN for external participants. How do you enforce this?

Accepted Answer

This feature is not available in Google Workspace. Google Meet does not use PINs for external participants; it uses host management and entry controls.

Answer

Configure 'External participation' in Meet settings

Answer

Require 'Admin approval' for all meetings

Answer

Enable 'Meet Entry PIN' in Meet settings

Question 10

Where do you go in the Admin Console to view the current data region for your organization?

Accepted Answer

Account > Account settings > Data regions. The 'Account settings' section under 'Account' contains the data regions configuration.

Answer

Vault > Settings

Answer

Apps > Google Workspace

Answer

Security > Data protection