GWS-ADMIN Practice Test 6 — 10 Questions

Question 1

Which THREE security settings are commonly configured using Context-Aware Access?

Accepted Answer

Device security posture (e.g., screen lock). Context-aware access allows restricting access to apps based on device security posture, IP, and location.

Answer

Email signature format

Answer

User password strength

Question 2

You are setting up a new service account to access Gmail APIs. Where must you provide the required OAuth scopes to authorize access?

Accepted Answer

Security > Access and data control > API controls > Manage domain-wide delegation. For service accounts performing domain-wide delegation, scopes must be defined in the Security > Access and data control > API controls > Manage domain-wide delegation section.

Answer

Account > Security > App access

Answer

Directory > Users > Service Accounts

Answer

Apps > Google Workspace > Gmail > API

Question 3

Which TWO of the following are prerequisites for setting up iOS device management?

Accepted Answer

Apple Push Certificate. An Apple Push Certificate and Advanced Mobile Management are required to manage iOS devices effectively.

Answer

Physical access to each device

Answer

A custom domain name

Answer

Android Enterprise registration

Question 4

Your organization requires that all iOS devices accessing corporate data be encrypted and have a passcode. You have enabled Google Mobile Management. Which configuration setting should you verify in the Google Admin console to ensure all devices enforce these policies?

Accepted Answer

Configure iOS password requirements in Mobile & endpoints > Settings > iOS. The 'Password requirements' setting under Device > Mobile & endpoints > Settings > iOS ensures that MDM-enforced policies apply to the device.

Answer

Use the Google Cloud Directory Sync tool

Answer

Set up Basic mobile management

Answer

Enable Chrome browser management for iOS

Question 5

You need to change the default language and region settings for all new users in a specific Organizational Unit. How do you do this?

Accepted Answer

Account > Account settings. Account settings, including time zone and language, are configured per OU under Account > Account settings.

Answer

Security > General > Account

Answer

Directory > Users > Account settings

Answer

Apps > Google Workspace > Profile

Question 6

Your organization wants to ensure that all outgoing mail is routed through a third-party email security gateway for scanning. What is the correct configuration?

Accepted Answer

Apps > Google Workspace > Gmail > Routing. Outbound routing is configured in Apps > Google Workspace > Gmail > Routing by setting an outbound gateway.

Answer

Security > Compliance > Gateway

Answer

Apps > Google Workspace > Gmail > Compliance

Answer

Account > Network > SMTP relay

Question 7

A user is seeing an 'Unable to verify account' error when signing in. What is the first thing to check?

Accepted Answer

Account suspension status. Checking if the account is suspended in the Admin console is the most common reason for this error.

Answer

User's password

Answer

Domain's DNS records

Answer

User's mobile phone number

Question 8

Your security team requires that all administrators must use a hardware security key (FIDO2) for 2-Step Verification and are prohibited from using SMS or phone prompts. Where can you enforce this requirement specifically for admin accounts?

Accepted Answer

Security > Admin security > Enforce 2-Step Verification and specify security keys.. Admin security policies, including strict 2SV methods for administrators, are configured under Security > Admin security.

Answer

Directory > Admin roles > Security policies

Answer

Security > Authentication > 2-step verification > Allow only security keys for administrators

Answer

Account settings > Administrator privileges > Authentication

Question 9

A new employee needs access to Google Workspace. What is the minimum action required in the Google Admin console to create the account?

Accepted Answer

Add a user and assign a Google Workspace license. Creating a user in the Admin console requires defining a primary email address and assigning a license for access.

Answer

Assign a Google Groups membership

Answer

Configure an alias

Answer

Create an organizational unit

Question 10

What is the difference between a primary domain and a secondary domain?

Accepted Answer

Primary is the identity foundation for the account. The primary domain is the identity foundation of the Workspace account, used for initial setup and service naming.

Answer

Secondary domains cost more

Answer

Secondary domains do not support OUs

Answer

Primary is for email; secondary is for Drive