GWS-ADMIN Multiple Select — 50 Questions

Question 1

Which TWO settings in Drive sharing can help prevent data leakage?

Accepted Answer

Prevent viewers from downloading, printing, or copying. Restricting sharing to the organization and preventing viewers from downloading files are effective ways to protect data.

Answer

Allow external sharing for all users

Answer

Enable 'Allow user to set their own sharing'

Answer

Disable all Drive sharing

Question 2

Which TWO of the following actions can be performed on an Android device from the Admin console?

Accepted Answer

Remote removal of the work profile. Wiping an account and checking the device's last sync time are core features of MDM.

Answer

Remote control of the camera shutter

Answer

Remote installation of a specific version of Android OS

Answer

Remote physical battery removal

Question 3

Which THREE settings can be configured within the Gmail Compliance section?

Accepted Answer

Content compliance. Compliance includes content compliance, attachment compliance, and profanity checks.

Answer

SPF record generation

Answer

Default signature settings

Question 4

Which TWO mechanisms can an administrator use to recover access if a Super Administrator loses their 2-Step Verification device and is locked out? (Choose two.)

Accepted Answer

Have another Super Administrator reset the locked admin's 2-Step Verification status in the Google Admin console.. Super admin account recovery can be achieved using backup verification codes generated in advance or by another Super Admin resetting 2SV.

Answer

Call Google Workspace technical support to instantly disable 2SV without verification.

Answer

Send a password reset request to the external SAML IdP to bypass Google 2SV.

Answer

Log in using the root domain controller administrative credentials.

Question 5

Which THREE security settings can be enforced for Gmail in the Admin Console?

Accepted Answer

Attachment scanning for viruses. Gmail security supports S/MIME, attachment scanning, and link protection.

Answer

Force user to use specific email client

Answer

Automatic email deletion after 30 days

Question 6

Which TWO of the following actions can an administrator perform using the Google Workspace Data Migration Service?

Accepted Answer

Migrate email from another Gmail account. DMS supports IMAP-based mail and calendar migration.

Answer

Automate password changes for migrated accounts

Answer

Migrate Drive files to a specific shared drive

Answer

Sync browser bookmarks for migrated users

Question 7

Which TWO actions can you take when a user account is under a Vault hold?

Accepted Answer

Prevent data deletion. A hold ensures the data is not deleted, even if the user attempts to delete it or if the account is suspended/deleted.

Answer

Automatically delete old emails

Answer

Enable 2-Step Verification

Answer

Allow the user to change their password

Question 8

Which THREE items can be managed through the 'Directory' section in the Admin Console?

Accepted Answer

User profile editing permissions. Directory manages buildings, resources, and user profiles.

Answer

Device management policies

Answer

Gmail routing rules

Question 9

Which TWO of the following can be restricted in Google Drive sharing settings?

Accepted Answer

Sharing with users who do not have a Google account. You can restrict sharing to external domains and prevent sharing with non-Google accounts.

Answer

The size of files shared via links

Answer

The specific users who can use the Drive app

Answer

The number of files a user can share per day

Question 10

An organization wants to configure SSO with a third-party SAML IdP. Which THREE advanced settings can be configured within the Google Workspace SAML application settings? (Choose three.)

Accepted Answer

Name ID format selection (e.g., EMAIL, PERSISTENT). Advanced SAML settings include configuring Start URL, Name ID format, and Signed requests/responses.

Answer

Direct database connection pool size for real-time user lookup

Answer

Custom SSL cipher suites for the Google Workspace login button rendering

Question 11

Which THREE of the following are aspects of the Directory API 'user' resource?

Accepted Answer

Suspension status. The user resource includes primary email, name, and suspension status as standard fields.

Answer

Device serial number

Answer

Account creation date

Question 12

Which TWO tools in the Admin Console help you identify potentially compromised accounts?

Accepted Answer

Security dashboard. The Security dashboard and the Investigation tool are the primary means of identifying suspicious activity in user accounts.

Answer

Vault search

Answer

Group settings

Answer

Data regions

Question 13

Which TWO of the following are valid methods to audit file access in Google Drive?

Accepted Answer

Use the Security Investigation Tool. Audit logs and the Investigation tool are the standard ways to monitor file activity.

Answer

Enable Google Vault for Drive exports

Answer

Set up alerts for all file deletions

Answer

Check the user's 'My Drive' settings

Question 14

Which TWO of the following can be configured in the Google Workspace Admin Console to restrict user access to Google Drive?

Accepted Answer

Restrict sharing settings for external domains. Access to Drive is controlled by Sharing settings and Drive API controls.

Answer

Limit the number of files a user can create

Answer

Restrict access to specific file types

Answer

Set a file size limit for all uploads

Question 15

Which THREE security settings are commonly configured using Context-Aware Access?

Accepted Answer

Device security posture (e.g., screen lock). Context-aware access allows restricting access to apps based on device security posture, IP, and location.

Answer

Email signature format

Answer

User password strength

Question 16

Which TWO of the following are prerequisites for setting up iOS device management?

Accepted Answer

Apple Push Certificate. An Apple Push Certificate and Advanced Mobile Management are required to manage iOS devices effectively.

Answer

Physical access to each device

Answer

A custom domain name

Answer

Android Enterprise registration

Question 17

Which THREE of the following are valid ways to manage Google Calendar resource availability?

Accepted Answer

Auto-accept invitations. Resources are managed via building assignment, auto-accept rules, and visibility settings.

Answer

Enable recurring meeting limits

Answer

Restrict resource access by device type

Question 18

Which THREE of the following attributes can be used in Context-Aware Access policies?

Accepted Answer

OS version. Device management status, encryption, and OS version are commonly used in access policies.

Answer

User's favorite browser

Answer

User's physical GPS location

Question 19

Which TWO of the following methods can be used to enroll Android devices?

Accepted Answer

QR code scanning. QR code and Zero-touch enrollment are the standard methods for provisioning corporate devices.

Answer

Manually entering the server IP address

Answer

Physical USB cable connection to the Admin's PC

Answer

Installing a third-party root certificate

Question 20

When managing ChromeOS devices, which TWO settings can be configured within the 'Device settings' section of the Admin console?

Accepted Answer

Auto-update settings. Device settings allow for controlling device-level behaviors like Auto-update and sign-in restrictions.

Answer

User password rotation

Answer

Browser history retention

Answer

Default home page for all users