GWS-ADMIN Core Workspace Services — 20 Questions

Question 1

A user reports that external emails are being rejected by the organization's domain. Where should you check the email authentication settings to ensure SPF, DKIM, and DMARC are correctly configured?

Accepted Answer

Apps > Google Workspace > Gmail > Compliance. Google Workspace security settings for email authentication are managed under Apps > Google Workspace > Gmail > Compliance.

Answer

Security > Authentication > Email verification

Answer

Account > Settings > Domain verification

Answer

Security > Data protection > Gmail

Question 2

Which TWO of the following are true about Google Meet recording storage?

Accepted Answer

Recordings are stored in the Admin's Vault account. Recordings are saved to the organizer's Drive and count toward their quota.

Answer

Recordings are deleted automatically after 7 days

Answer

All participants receive a copy in their Drive

Answer

Recordings are stored in a global Meet storage bucket

Question 3

Which setting allows you to see what files are being shared externally across your entire domain?

Accepted Answer

Security Investigation Tool. The Security Investigation Tool allows administrators to search and audit Drive file sharing activities across the organization.

Answer

Drive Audit Log

Answer

Apps > Google Workspace > Drive > Sharing audit

Answer

Report > User Reports > Drive

Question 4

You need to prevent users from sharing Google Drive files with people outside the organization. Which setting should you modify?

Accepted Answer

Apps > Google Workspace > Drive and Docs > Sharing settings. Sharing settings are controlled at the Organizational Unit level under Apps > Google Workspace > Drive and Docs > Sharing settings.

Answer

Directory > Users > Sharing

Answer

Account > Organizational units > Restrictions

Answer

Security > Access and data control > Drive

Question 5

You want to ensure that all internal Google Calendar invites include a link to a Google Meet session. Where do you configure this?

Accepted Answer

Apps > Google Workspace > Google Meet > Meet video settings. This is configured in the Google Meet settings, which automatically adds video conferencing to new calendar events.

Answer

Apps > Google Workspace > Calendar > Settings

Answer

Security > Calendar > Video call settings

Answer

Apps > Google Workspace > Calendar > Sharing options

Question 6

You need to limit the number of participants in a Google Meet session to 10 for a specific organizational unit. How do you achieve this?

Accepted Answer

It is not possible to limit participant counts via Admin Console. Google Meet does not support limiting the number of participants via the Admin Console.

Answer

Modify the OU policy in Apps > Google Workspace > Meet

Answer

Use a group policy for Meet access

Answer

Set 'Participant limit' in the Meet settings

Question 7

A user deleted a document from their Google Drive three days ago. As an administrator, what is the maximum time you can restore this file?

Accepted Answer

25 days. Administrators can restore files deleted by users from the Admin Console for up to 25 days after the file has been emptied from the Trash.

Answer

7 days

Answer

30 days

Answer

Unlimited

Question 8

Your organization requires that all Google Meet recordings be saved to a specific shared folder. How can you automate this?

Accepted Answer

It is not possible to change the default location via Admin Console settings. Google Meet recordings are saved to the meeting organizer's 'Meet Recordings' folder in My Drive by default. You cannot redirect this to a shared folder via admin settings.

Answer

Set the 'Default storage' path in Apps > Google Workspace > Meet

Answer

Configure the 'Recording location' in Meet settings

Answer

Create a Drive retention policy for Meet

Question 9

An employee has left the company. You need to migrate their email and calendar data to their manager's account. Which tool should you use?

Accepted Answer

Data Migration Service. The Data Migration Service is the primary tool for migrating user data between Google Workspace accounts.

Answer

Google Cloud Storage Transfer Service

Answer

GAM (Google Apps Manager)

Answer

Vault

Question 10

You want to ensure that users cannot change their profile photo. Where is this setting located?

Accepted Answer

Account > Account settings > Profile editing. User profile photo settings are found under Account > Account settings > Profile editing.

Answer

Security > Account settings

Answer

Directory > Users > Permissions

Answer

Apps > Google Workspace > Directory

Question 11

A department requires a custom building resource to be added to Google Calendar. Where do you add this?

Accepted Answer

Directory > Buildings and resources. Building resources are managed under Directory > Buildings and resources.

Answer

Apps > Google Workspace > Directory > Calendar

Answer

Apps > Google Workspace > Calendar > Resources

Answer

Organization > Settings > Resources

Question 12

A user is complaining that they cannot send emails to a specific external domain. Where do you check for blocklists or routing issues?

Accepted Answer

Apps > Google Workspace > Gmail > Routing. Gmail routing, including blocklists and custom routing rules, is managed under Apps > Google Workspace > Gmail > Routing.

Answer

Security > Authentication > SPF

Answer

Apps > Google Workspace > Gmail > Compliance

Answer

Security > Gmail > Routing

Question 13

You need to prevent users from installing third-party Marketplace apps that request Drive read/write access. How do you configure this?

Accepted Answer

Security > Access and data control > API controls > Manage Google Services. This is managed in Security > Access and data control > API controls > Manage Google Services.

Answer

Apps > Google Workspace > Marketplace > Settings

Answer

Security > App access control

Answer

Apps > Google Workspace > Drive > API settings

Question 14

You are setting up a new service account to access Gmail APIs. Where must you provide the required OAuth scopes to authorize access?

Accepted Answer

Security > Access and data control > API controls > Manage domain-wide delegation. For service accounts performing domain-wide delegation, scopes must be defined in the Security > Access and data control > API controls > Manage domain-wide delegation section.

Answer

Account > Security > App access

Answer

Directory > Users > Service Accounts

Answer

Apps > Google Workspace > Gmail > API

Question 15

You need to change the default language and region settings for all new users in a specific Organizational Unit. How do you do this?

Accepted Answer

Account > Account settings. Account settings, including time zone and language, are configured per OU under Account > Account settings.

Answer

Security > General > Account

Answer

Directory > Users > Account settings

Answer

Apps > Google Workspace > Profile

Question 16

Where can an administrator view the status of a user's 2-Step Verification enrollment?

Accepted Answer

Directory > Users > [User] > Security. User security information, including 2SV status, is found in the individual user's profile within the Directory.

Answer

Security > Authentication > 2SV

Answer

Reports > Audit > Security

Answer

Account > Security Dashboard

Question 17

You need to ensure that Google Meet sessions created by your users always require a password/PIN for external participants. How do you enforce this?

Accepted Answer

This feature is not available in Google Workspace. Google Meet does not use PINs for external participants; it uses host management and entry controls.

Answer

Configure 'External participation' in Meet settings

Answer

Require 'Admin approval' for all meetings

Answer

Enable 'Meet Entry PIN' in Meet settings

Question 18

Where can you enable the automatic creation of Google Meet links for calendar events?

Accepted Answer

Apps > Google Workspace > Google Meet. This is enabled in the Google Meet service settings.

Answer

Security > Meet > Calendar sync

Answer

Apps > Google Workspace > Calendar

Answer

Apps > Google Workspace > Directory

Question 19

Which report would you use to identify users who haven't logged in for more than 30 days?

Accepted Answer

Reports > User Reports > User accounts. The 'User accounts' report, found under Reports, provides the last login timestamp for each user.

Answer

Reports > Security > Login

Answer

Apps > Google Workspace > Reports

Answer

Directory > Users > Account status

Question 20

Which TWO of the following are valid methods to audit file access in Google Drive?

Accepted Answer

Use the Security Investigation Tool. Audit logs and the Investigation tool are the standard ways to monitor file activity.

Answer

Enable Google Vault for Drive exports

Answer

Set up alerts for all file deletions

Answer

Check the user's 'My Drive' settings