GWS-ADMIN Endpoint Management Practice Test 2 — 15 Questions

Question 1

What is required for a user to be able to manage their own mobile device in the Google Admin console?

Accepted Answer

User must have the 'Mobile device manager' role. Users do not manage their devices in the Admin console; that is for administrators only.

Answer

User must be in the 'Everyone' group

Answer

There is no way for a user to manage devices

Answer

User must be an owner of the device

Question 2

An employee lost their company-issued Android device. What is the most effective way to secure the data?

Accepted Answer

Use the 'Wipe device' command in the Admin console. Performing a 'Wipe account' or 'Wipe device' command removes corporate data or everything from the device remotely.

Answer

Disable the user's account in Active Directory

Answer

Change the user's password

Answer

Send an email to the employee to delete the data

Question 3

You need to ensure that Chrome browsers on unmanaged devices are secure. What is a key step to take?

Accepted Answer

Use Chrome browser cloud management to enforce policies. Enforcing Chrome browser management allows you to apply policies to the browser regardless of the OS of the underlying device.

Answer

Force users to use Incognito mode

Answer

Require a VPN for all browser traffic

Answer

Disable all extensions

Question 4

Which TWO of the following actions can be performed on an Android device from the Admin console?

Accepted Answer

Remote removal of the work profile. Wiping an account and checking the device's last sync time are core features of MDM.

Answer

Remote control of the camera shutter

Answer

Remote installation of a specific version of Android OS

Answer

Remote physical battery removal

Question 5

Which TWO of the following are prerequisites for setting up iOS device management?

Accepted Answer

Apple Push Certificate. An Apple Push Certificate and Advanced Mobile Management are required to manage iOS devices effectively.

Answer

Physical access to each device

Answer

A custom domain name

Answer

Android Enterprise registration

Question 6

Which of the following is true regarding 'Advanced' mobile management for iOS?

Accepted Answer

It allows administrators to manage Wi-Fi profiles and certificates. Advanced management provides more control, such as certificate management and enterprise Wi-Fi configuration, compared to Basic management.

Answer

It replaces the need for an Apple Push Certificate

Answer

It automatically removes the device after 30 days

Answer

It is required for all Android devices

Question 7

A user complains that they cannot access their work email. You see the device is marked as 'Blocked' in the Admin console. What should you do?

Accepted Answer

Approve the device in the mobile management list. If a device is blocked, changing the status to 'Approved' or 'Unblocked' will restore access.

Answer

Send a 'Sync' command

Answer

Factory reset the device

Answer

Delete the device record

Question 8

You are configuring a 'Work profile' for Android. What is the primary benefit of this setup?

Accepted Answer

It separates work data and apps from personal data on the same device. Work profiles isolate work data from personal data, ensuring privacy for the user and security for the company.

Answer

It allows the company to see all personal messages

Answer

It prevents the user from taking photos

Answer

It forces the user to use a specific launcher

Question 9

You need to block a specific version of the Chrome browser because of a security vulnerability. Which setting do you use?

Accepted Answer

Browser settings > Apps and extensions > Version pinning. Chrome browser management allows you to enforce version policies to ensure users are on secure versions.

Answer

Device settings > Chrome > Version control

Answer

Admin console > Security > Browser blocking

Answer

User settings > Chrome > Update policy

Question 10

Which THREE of the following are types of reports available in the 'Reports' section of the Admin console regarding mobile devices?

Accepted Answer

Device security report. Device usage, audit events, and compliance reports are standard reports in Google Workspace.

Answer

Data usage report

Answer

User password report

Question 11

Which THREE of the following attributes can be used in Context-Aware Access policies?

Accepted Answer

OS version. Device management status, encryption, and OS version are commonly used in access policies.

Answer

User's favorite browser

Answer

User's physical GPS location

Question 12

Which TWO of the following methods can be used to enroll Android devices?

Accepted Answer

QR code scanning. QR code and Zero-touch enrollment are the standard methods for provisioning corporate devices.

Answer

Manually entering the server IP address

Answer

Physical USB cable connection to the Admin's PC

Answer

Installing a third-party root certificate

Question 13

Which TWO of the following can be enforced via ChromeOS device settings?

Accepted Answer

Forced re-enrollment after factory reset. Enforcing forced re-enrollment and restricted sign-in are core device security policies.

Answer

Automatic screen cleaning

Answer

Mandatory screen brightness levels

Answer

Automatic battery calibration

Question 14

Which THREE of the following are settings that can be controlled in the Chrome browser for all users?

Accepted Answer

Force-installing extensions. Extension installation, homepage URL, and bookmark sync are controllable browser policies.

Answer

Forcing a specific font size

Answer

Enforcing a specific desktop wallpaper

Question 15

Your organization requires that all iOS devices accessing corporate data be encrypted and have a passcode. You have enabled Google Mobile Management. Which configuration setting should you verify in the Google Admin console to ensure all devices enforce these policies?

Accepted Answer

Configure iOS password requirements in Mobile & endpoints > Settings > iOS. The 'Password requirements' setting under Device > Mobile & endpoints > Settings > iOS ensures that MDM-enforced policies apply to the device.

Answer

Use the Google Cloud Directory Sync tool

Answer

Set up Basic mobile management

Answer

Enable Chrome browser management for iOS