GWS-ADMIN Practice Test 8 — 10 Questions

Question 1

An administrator wants to ensure that users cannot use weak or commonly breached passwords. Where can password monitoring be enabled in the Google Admin console?

Accepted Answer

Security > Password management > Monitor password reuse and strength. Password monitoring for breached credentials is enabled under Security > Password management.

Answer

Security Center > Security health page > Password strength

Answer

Account settings > Legal and compliance > Password audit

Answer

Directory > Users > Security alerts

Question 2

A user reports that their Android work profile is no longer syncing corporate emails. As an administrator, which action should you perform first in the Google Admin console to investigate?

Accepted Answer

View the device details in the Device Management section of the Admin console. Checking the device status in the Admin console provides immediate insight into sync errors or compliance issues.

Answer

Force a factory reset on the user's device

Answer

Remove the user from the mobile management organizational unit

Answer

Disable the user's account in Google Workspace

Question 3

Your company uses a third-party Identity Provider (IdP) for Single Sign-On (SSO) via SAML. A newly hired employee is unable to sign in, and you suspect their account is not properly mapped or provisioned. Where can you check SAML sign-in activity and error logs in the Google Admin console?

Accepted Answer

Reporting > Audit > SAML. Log events related to SAML and SSO authentication failures are recorded in the SAML log events section of the Google Admin console.

Answer

Directory > Users > [User] > Activity > Sign-in activity

Answer

Reporting > Audit > Admin log events

Answer

Security > Authentication > SAML log events

Question 4

Your organization uses ChromeOS devices. You want to enforce a policy that prevents users from using guest mode on these devices. Where do you configure this?

Accepted Answer

Device settings. ChromeOS device settings are managed under Devices > Chrome > Settings > Device settings.

Answer

Network settings

Answer

Users & browsers settings

Answer

Apps & extensions settings

Question 5

Which TWO of the following methods can be used to enroll Android devices?

Accepted Answer

QR code scanning. QR code and Zero-touch enrollment are the standard methods for provisioning corporate devices.

Answer

Manually entering the server IP address

Answer

Physical USB cable connection to the Admin's PC

Answer

Installing a third-party root certificate

Question 6

A user has left the company. You need to migrate their data to another user. Which tool should you use?

Accepted Answer

Data Migration Service. The Data Migration Service is specifically designed for moving data from one Google account to another.

Answer

Security Investigation Tool

Answer

Google Takeout

Answer

Google Vault

Question 7

A user reports that emails are not being sent to an external mailing list. The logs show '550 5.1.1'. What does this code indicate?

Accepted Answer

The recipient address is invalid.. A 550 5.1.1 error code indicates that the recipient address does not exist or is invalid.

Answer

The sender is blocked.

Answer

The message was marked as spam.

Answer

The server is temporarily down.

Question 8

You want to ensure that all users have a strong password policy. Where can you enforce password length and complexity requirements?

Accepted Answer

Security > Authentication > Password management. Password policies are managed in the Security section under Password management.

Answer

Directory > User settings

Answer

Security > Context-Aware Access

Answer

Account > Account settings

Question 9

An administrator needs to enforce 2-Step Verification for all users in the Sales organizational unit (OU). Where in the Google Admin console should the administrator navigate to configure this setting?

Accepted Answer

Security > Authentication > 2-step verification. Enforcing 2-Step Verification requires navigating to Security > Authentication > 2-step verification in the Google Admin console.

Answer

Account settings > Security settings > 2SV

Answer

Directory > Users > Security > Access control

Answer

Devices > Mobile & endpoints > Settings > Universal settings

Question 10

Your company has deployed a custom internal web application that integrates with Google Workspace via SAML. During testing, users receive a '403. That’s an error. Error: app_not_configured_for_user' message. What is the most likely cause of this error?

Accepted Answer

The SAML app service status is set to OFF for the user's organizational unit or access group.. This error occurs when the SAML app is configured in the Google Admin console, but access is turned OFF for the user or their organizational unit.

Answer

The IdP signing certificate has expired.

Answer

The user's password has expired and needs to be reset.

Answer

The user does not have a Google Cloud Platform billing account attached.