GWS-ADMIN Core Workspace Services — 15 Questions

Question 1

You want to ensure that all internal Google Calendar invites include a link to a Google Meet session. Where do you configure this?

Accepted Answer

Apps > Google Workspace > Google Meet > Meet video settings. This is configured in the Google Meet settings, which automatically adds video conferencing to new calendar events.

Answer

Apps > Google Workspace > Calendar > Settings

Answer

Security > Calendar > Video call settings

Answer

Apps > Google Workspace > Calendar > Sharing options

Question 2

You need to limit the number of participants in a Google Meet session to 10 for a specific organizational unit. How do you achieve this?

Accepted Answer

It is not possible to limit participant counts via Admin Console. Google Meet does not support limiting the number of participants via the Admin Console.

Answer

Modify the OU policy in Apps > Google Workspace > Meet

Answer

Use a group policy for Meet access

Answer

Set 'Participant limit' in the Meet settings

Question 3

A user deleted a document from their Google Drive three days ago. As an administrator, what is the maximum time you can restore this file?

Accepted Answer

25 days. Google Workspace administrators can restore deleted Drive files for up to 25 days after deletion, which is the maximum retention window for user-deleted content in the Admin console. After 25 days, the file is permanently purged and cannot be restored by the administrator. This makes 25 days the correct maximum.

Answer

7 days

Answer

30 days

Answer

Unlimited

Question 4

A user reports that external emails are being rejected by the organization's domain. Where should you check the email authentication settings to ensure SPF, DKIM, and DMARC are correctly configured?

Accepted Answer

Apps > Google Workspace > Gmail > Compliance. Google Workspace security settings for email authentication are managed under Apps > Google Workspace > Gmail > Compliance.

Answer

Security > Authentication > Email verification

Answer

Account > Settings > Domain verification

Answer

Security > Data protection > Gmail

Question 5

An employee has left the company. You need to migrate their email and calendar data to their manager's account. Which tool should you use?

Accepted Answer

Data Migration Service. The Data Migration Service is the correct tool for migrating email and calendar data from one user to another. It allows administrators to transfer data between Google Workspace accounts, including Gmail and Calendar, ensuring a seamless transition when an employee leaves.

Answer

Google Cloud Storage Transfer Service

Answer

GAM (Google Apps Manager)

Answer

Vault

Question 6

A department requires a custom building resource to be added to Google Calendar. Where do you add this?

Accepted Answer

Directory > Buildings and resources. In the Google Workspace Admin Console, building resources (like meeting rooms) are managed under Directory > Buildings and resources. This section allows admins to add, edit, and manage buildings and their associated resources, which then become available in Google Calendar for scheduling.

Answer

Apps > Google Workspace > Directory > Calendar

Answer

Apps > Google Workspace > Calendar > Resources

Answer

Organization > Settings > Resources

Question 7

A user is complaining that they cannot send emails to a specific external domain. Where do you check for blocklists or routing issues?

Accepted Answer

Apps > Google Workspace > Gmail > Routing. The correct location to check for blocklists or routing issues that affect outbound email to a specific external domain is Apps > Google Workspace > Gmail > Routing. This section contains the Routing settings where administrators can configure rules that determine how messages are routed, including whether they are blocked or sent to a specific destination. If a user cannot send to a particular domain, it is likely due to a routing rule or blocklist configured here. The other options are either for authentication (SPF) or compliance settings, which do not control outbound routing or blocklists.

Answer

Security > Authentication > SPF

Answer

Apps > Google Workspace > Gmail > Compliance

Answer

Security > Gmail > Routing

Question 8

You need to prevent users from installing third-party Marketplace apps that request Drive read/write access. How do you configure this?

Accepted Answer

Security > Access and data control > API controls > Manage Google Services. To prevent users from installing third-party Marketplace apps that request Drive read/write access, you configure API controls under Security > Access and data control > API controls > Manage Google Services. This allows you to set app access control policies that restrict which apps can access Google services, including Drive.

Answer

Apps > Google Workspace > Marketplace > Settings

Answer

Security > App access control

Answer

Apps > Google Workspace > Drive > API settings

Question 9

You need to ensure that Google Meet sessions created by your users always require a password/PIN for external participants. How do you enforce this?

Accepted Answer

This feature is not available in Google Workspace. Google Meet does not use PINs for external participants; it uses host management and entry controls.

Answer

Configure 'External participation' in Meet settings

Answer

Require 'Admin approval' for all meetings

Answer

Enable 'Meet Entry PIN' in Meet settings

Question 10

Where can you enable the automatic creation of Google Meet links for calendar events?

Accepted Answer

Apps > Google Workspace > Google Meet. The automatic creation of Google Meet links for Calendar events is controlled from the Google Meet service settings in the Admin console, specifically Apps > Google Workspace > Google Meet. Within that service, the 'Meet video settings' section contains the toggle for 'Automatic recording' and, more relevantly, the Calendar-related options that govern whether Meet links are auto-generated for events. This is the canonical location because Meet is the service that owns the conferencing feature, even though the link surfaces inside Calendar.

Answer

Security > Meet > Calendar sync

Answer

Apps > Google Workspace > Calendar

Answer

Apps > Google Workspace > Directory

Question 11

A user accidentally moved a shared drive to the trash. As an admin, where do you restore it from?

Accepted Answer

Apps > Google Workspace > Drive and Docs > Manage Shared Drives. To restore a shared drive that was moved to trash, the admin must go to Apps > Google Workspace > Drive and Docs > Manage Shared Drives. This section lists all shared drives, including those in trash, and provides a restore option. Restoring from here recovers the shared drive and its contents.

Answer

Reports > Audit > Drive

Answer

Directory > Groups > Shared Drives

Answer

Security > Data > Restore

Question 12

You need to prevent users from adding personal Google accounts to their company-managed devices. How do you restrict this?

Accepted Answer

Devices > Mobile and endpoints > Settings > iOS/Android. The correct path is Devices > Mobile and endpoints > Settings > iOS/Android, where administrators configure device management policies per platform. Within these settings, the 'Personal accounts' or 'Account management' options let you block users from adding personal Google accounts to managed Android or iOS devices. This is the only location in the Admin console that governs account-adding behavior on enrolled mobile endpoints.

Answer

Apps > Google Workspace > Settings

Answer

Directory > Users > Device settings

Answer

Security > Account > Personal account restriction

Question 13

Which TWO of the following are true about Google Meet recording storage?

Accepted Answer

Recordings are stored in the Admin's Vault account. Recordings are saved to the organizer's Drive and count toward their quota.

Answer

Recordings are deleted automatically after 7 days

Answer

All participants receive a copy in their Drive

Answer

Recordings are stored in a global Meet storage bucket

Question 14

Which TWO of the following actions can an administrator perform using the Google Workspace Data Migration Service?

Accepted Answer

Migrate email from another Gmail account. Option A is correct because the Google Workspace Data Migration Service (DMS) supports migrating email, calendar, and contacts from a source Gmail account into a target Google Workspace user's mailbox. Option D is correct because DMS provides a dedicated Microsoft Exchange migration path that migrates mail, calendar, and contacts from Exchange (including Exchange Online/on-premises) into Google Workspace. Option B is not correct because DMS does not manage or automate password changes for migrated accounts; password provisioning is handled via the Admin console, Directory API, or SSO/identity providers. Option C is not correct because DMS migrates Drive content into a user's My Drive, not directly into a specific shared drive; shared drive content is typically moved afterward using Drive for desktop or the Drive API. Option E is not correct because DMS does not sync browser bookmarks; Chrome bookmark management is handled through Chrome Browser Cloud Management or user profile sync, not DMS.

Answer

Automate password changes for migrated accounts

Answer

Migrate Drive files to a specific shared drive

Answer

Sync browser bookmarks for migrated users

Question 15

Which THREE security settings can be enforced for Gmail in the Admin Console?

Accepted Answer

Attachment scanning for viruses. In the Google Admin Console, Gmail security settings include attachment scanning for viruses (B), which lets admins enable or disable the built-in virus scanning of inbound and outbound messages to protect users from malicious attachments. S/MIME encryption (D) is also enforceable, allowing admins to require or allow S/MIME for sending and receiving encrypted, digitally signed email within the organization. Safe Browsing for links (E) is another enforceable setting, where admins can enable scanning of links in Gmail messages to warn users about potentially malicious URLs. The other options do not belong: forcing a specific email client (A) is not a Gmail Admin Console security setting, and automatic email deletion after 30 days (C) is not a standard enforceable Gmail security control in the Admin Console.

Answer

Force user to use specific email client

Answer

Automatic email deletion after 30 days