Your organization requires that all iOS devices accessing corporate data be encrypted and have a passcode. You have enabled Google Mobile Management. Which configuration setting should you verify in the Google Admin console to ensure all devices enforce these policies?
An employee is reporting that they cannot access corporate Gmail on their personal Android device. You have set up 'Advanced mobile management'. What is the most likely cause if the device is showing as 'Blocked' in the Admin console?
A user has left the company. You need to ensure all corporate data is removed from their Android device, but you want to keep their personal data intact. Which action should you take?
Your organization uses ChromeOS devices. You want to enforce a policy that prevents users from using guest mode on these devices. Where do you configure this?
A company wants to prevent users from installing any Android apps outside the managed Google Play Store on their personally owned devices that access corporate data through Google Workspace. Mobile management is already enabled for these Android devices. What should you do?
A user reports that their company-owned Android device has been lost. You need to remotely remove all corporate data from the device while preserving the user's personal data. What should you do?
You are a Workspace administrator. Your organization recently purchased 50 new Windows 11 laptops for the sales team. You need to ensure these devices can access Google Workspace only if they meet specific security requirements, such as having disk encryption enabled and a screen lock configured. These devices are not domain-joined to a third-party identity provider. Which Google Workspace feature should you use to enforce these device-based access policies?
You are managing a fleet of ChromeOS devices. You need to allow users to enroll their own devices (BYOD) but still enforce certain security policies. Which TWO actions must you take? (Choose two.)
You are responsible for managing a large fleet of ChromeOS devices. You need to configure automatic updates so that devices receive ChromeOS updates but are pinned to a specific major version for compatibility with an internal web app. Which TWO settings should you configure in the Admin console? (Choose two.)
You are a Workspace administrator managing ChromeOS devices. You need to configure policies that apply to all users on these devices. Which TWO settings can be configured in the Admin console under Device settings > Chrome > User & browser settings? (Choose two.)
You are a Workspace administrator. Your organization has a mix of Android and iOS devices accessing corporate data. You want to apply different security policies to company-owned devices versus employee-owned (BYOD) devices. Which TWO of the following approaches should you use to achieve this? (Choose two.)
Your organization uses Chrome Browser Cloud Management to manage browsers on Windows and Mac devices. You need to ensure that users cannot bypass the proxy settings configured by your organization. Which policy should you set?
You are a Workspace administrator. Your company uses Chrome Browser Cloud Management to manage Chrome browsers on employee devices. You need to ensure that employees cannot install extensions from the Chrome Web Store unless they are explicitly allowed by your organization. Which setting should you configure?
You are the Workspace administrator for a company that has a mix of company-owned and personally owned iOS devices. Executives have asked you to ensure that work data on all iOS devices is isolated from personal data, without requiring users to enroll their personal devices in full device management. Which Google Workspace endpoint management approach should you implement?
You are setting up Context-Aware Access. You want to deny access to Google Workspace if the device is not encrypted. Which tool identifies the 'is_encrypted' attribute?
A user claims their corporate data is not being wiped after they left the company. You previously issued a 'wipe device' command. What should you check to verify the outcome?
A user reports that their Android work profile is no longer syncing corporate emails. As an administrator, which action should you perform first in the Google Admin console to investigate?
You want to ensure that only managed Chrome devices can access your organization's Google Workspace data. Which tool should you configure to verify the security posture of the device before allowing access?
You are implementing context-aware access and need to ensure that only devices with a disk-encrypted state are allowed to access Google Drive. Which feature enables this check?
Your organization uses Google Workspace and has a fleet of company-owned Windows 10 laptops. You want to ensure that only devices that are company-owned and meet specific security requirements (like disk encryption and screen lock) can access Gmail and Drive. You have already enrolled devices in Windows device management. Which additional step is required to enforce these device-based access policies?
Your organization uses Google Workspace and wants to enforce context-aware access for users accessing Gmail from desktop browsers. You need to ensure that only company-owned Windows devices with up-to-date OS patches and encrypted drives are allowed. Which two components are required to achieve this? (Choose two.)
You are a Workspace admin. Your company issues Android devices to field technicians. You need to ensure that if a device is lost or stolen, you can remotely wipe only corporate data (Gmail, Drive, Calendar) without erasing personal photos and apps. The devices are enrolled in advanced mobile management. Which action should you take?
You are a Workspace administrator. Your organization provides company-owned Windows 10 laptops to employees. You want to ensure that only these corporate laptops, which are already enrolled in Windows device management, can access Google Workspace services. You also need to block access from personal Windows devices. Which action should you take?
Your organization allows employees to use personal iOS devices for work. You need to ensure that when a user adds their corporate Google Workspace account to the native iOS Mail app, the device is automatically enrolled in advanced mobile management and a passcode is enforced. What should you do?
You are configuring Chrome policies for your organization's managed Chrome browser on Windows devices. You want to control which extensions users can install. Which two policies should you configure? (Choose two.)
Your organization uses Google Workspace and has a fleet of company-owned ChromeOS devices. You want to ensure that these devices automatically install a set of essential web apps and extensions for all users. You also need to prevent users from uninstalling these apps. Which configuration should you implement?
Your company uses Windows 10 laptops. You want to ensure that only devices with a valid and up-to-date Endpoint Verification extension and a recent sync can access Google Drive. You have already deployed the extension. Which additional step must you take to enforce this requirement?
A user reports that their company-owned Android device is not receiving work emails. You check the Admin console and see that the device is listed but the status is 'Pending'. What should you do first?
You are a Workspace administrator. Your organization has a fleet of company-owned Windows devices that are already enrolled in Windows device management and synced to Google Workspace. You want to prevent users from signing in to their Google Account on any Windows device that is not company-owned, without affecting Android or iOS users. What should you do?
A user reports that their company-owned Android device is not receiving work emails in the Gmail app. You check the Admin console and see that the device is listed as 'Compromised'. What is the most likely cause?
Your organization uses Google Workspace and has a fleet of Windows 10 laptops managed by a third-party UEM tool. You need to enforce Context-Aware Access so that users can access Workspace apps only from devices that meet your security policies. What should you deploy on each Windows device to enable device-based access levels?
Your organization wants to allow employees to use their personal iOS devices to access Google Workspace, but you need to ensure that corporate data can be wiped if the device is lost. You also want to avoid wiping personal data. Which mobile management setting should you enable?
Your company has a mix of ChromeOS devices and Windows laptops. You want to ensure that only devices that are company-owned and enrolled in your domain can access Google Workspace. You have already set up Context-Aware Access with an access level that requires the device to be company-owned. However, users on Windows laptops are still able to access Workspace from personal devices. What is the most likely cause?
A user reports that their company-owned Windows laptop is not appearing in the list of devices under Endpoint Verification. You have confirmed that the user is signed in to Chrome with their Workspace account. What is the most likely reason for this issue?
You are a Workspace administrator for a company that uses ChromeOS devices. You want to ensure that all ChromeOS devices are automatically enrolled in your organization's domain when they are first powered on by an employee. Which setting should you configure?
A user reports that their company-owned Android device has been lost. You need to remotely wipe all data from the device, including personal data. Which action should you take in the Admin console?
A user reports that their company-owned Android device is not receiving the latest security policies you configured in the Admin console. You have verified that the device is enrolled in Advanced mobile management. What should you check first to ensure policies are applied?
Your organization uses Chrome browser policies to manage extensions. You want to allow only a specific set of extensions and block all others for all users. You have created a JSON policy file and applied it to the organizational unit. However, users report that they can still install other extensions from the Chrome Web Store. What is the most likely reason?
Your organization wants to block access to Google Workspace from all Android devices that are not running the latest security patch. You have configured a Context-Aware Access access level that requires the device to have a security patch level within the last 90 days. However, you notice that some devices with outdated patches are still able to access Gmail. What is the most likely reason?
Your organization uses Chrome browser on Windows devices. You want to ensure that users cannot disable or remove the Endpoint Verification extension. What should you do?
You are deploying Endpoint Verification for your organization. You need to ensure that only devices with a valid endpoint verification certificate can access Google Workspace apps. You have already enforced the Endpoint Verification extension. What additional step is required to enforce device trust based on the certificate?
Your organization has a mix of Windows, macOS, and Linux devices. You want to use Context-Aware Access to block access to Google Drive from devices that do not have disk encryption enabled. You have deployed Endpoint Verification to all devices. Which access level condition should you use?
You are a Workspace administrator. Your organization has a policy that all iOS devices accessing Gmail must have a passcode and be encrypted. You have enabled advanced mobile management for iOS. However, some users report that they can still access Gmail on their iOS devices without setting a passcode. What is the most likely reason for this?
You are a Workspace administrator. A user reports that their company-owned Android device is not receiving work emails in the Gmail app. You check the Admin console and see that the device is listed as 'Pending' in the mobile devices list. What is the most likely reason for this status?
You are a Workspace administrator for a healthcare organization. You need to ensure that nurses using company-owned iPads can only access patient records through a specific internal app, and that they cannot copy patient data into personal apps like Mail or Messages. Which Google Workspace endpoint management feature should you configure?