GWS-ADMIN Troubleshooting Practice Test 3 — 15 Questions

Question 1

A user claims they cannot share a file with an external partner. What is the most likely cause within the Admin console?

Accepted Answer

The Drive sharing settings for the user's OU restrict external sharing.. Sharing settings in Drive and Docs are controlled at the Organizational Unit (OU) level, which can restrict external sharing.

Answer

The user's password has expired.

Answer

The storage quota for the domain is full.

Answer

The partner does not have a Google account.

Question 2

A user is unable to send email to a group. What is the most common cause?

Accepted Answer

The group's 'Who can post' settings.. Google Groups have specific 'Who can post' settings that often restrict who can send messages to the group.

Answer

The group name is invalid.

Answer

The group's storage is full.

Answer

The user is not a member of the group.

Question 3

A user needs to see their login history. Where can you find this information?

Accepted Answer

Account Activity report in the Admin Console.. The Account Activity report in the Admin Console (Security > Dashboard/Account activity, or the user's Account activity page) shows a user's login history, including successful and failed sign-ins, IP addresses, devices, and timestamps. This is the canonical place for a user or admin to review login history.

Answer

Google Analytics.

Answer

The user's Gmail inbox.

Answer

Drive Audit logs.

Question 4

A user is unable to access a specific mobile app on their managed device. Which tool should you use to check the device policy status?

Accepted Answer

Device Management dashboard. To check the device policy status for a managed device, you should use the Device Management dashboard. This dashboard provides an overview of all managed devices, their compliance status, and applied policies. It allows you to drill down into a specific device to see which policies are applied and if there are any issues.

Answer

Directory settings

Answer

Group settings

Answer

Security Investigation Tool

Question 5

An administrator notices unusual login activity from a specific geographic location. What is the first step to prevent further unauthorized access?

Accepted Answer

Suspend the user account.. Suspending the user account is the immediate action to stop ongoing unauthorized access while investigating.

Answer

Reset the user's password.

Answer

Delete the user account.

Answer

Clear the user's browser cookies.

Question 6

A user is receiving 'Account temporarily unavailable' messages. What is the primary thing to check?

Accepted Answer

The user's account status in the Admin console.. This error often occurs when an account has exceeded bandwidth limits or is undergoing a security review.

Answer

The user's browser version.

Answer

The user's internet connection.

Answer

The domain's MX records.

Question 7

A user reports that emails are not being sent to an external mailing list. The logs show '550 5.1.1'. What does this code indicate?

Accepted Answer

The recipient address is invalid.. A 550 5.1.1 error code indicates that the recipient address does not exist or is invalid.

Answer

The sender is blocked.

Answer

The message was marked as spam.

Answer

The server is temporarily down.

Question 8

You have configured a new transport rule, but it is not triggering as expected. What is the first troubleshooting step?

Accepted Answer

Check the Gmail Audit logs.. Gmail Audit logs in the Admin Console record every transport rule evaluation and action, so they reveal whether the rule matched, what action was taken, and why it may not have fired. Checking logs first is non-destructive and gives concrete evidence before changing configuration. This is the standard 'observe before you modify' troubleshooting discipline for Workspace rules.

Answer

Delete and recreate the rule.

Answer

Change the priority of the rule.

Answer

Restart the Google Workspace service.

Question 9

A user reports that their mobile device is no longer syncing corporate data. What is the most likely cause?

Accepted Answer

The device no longer meets security compliance requirements.. If a security policy change has occurred or the device has become non-compliant, sync will be automatically blocked by Google Workspace.

Answer

The device battery is low.

Answer

The user is on the wrong Wi-Fi network.

Answer

The mobile carrier has blocked the connection.

Question 10

A user is unable to access Google Drive. Which TWO of the following should you check first?

Accepted Answer

User account status (Suspended/Active). Option B (User account status Suspended/Active) is correct because if the user's Google Workspace account has been suspended or disabled by an administrator, the user will be unable to sign in to Google Drive regardless of network or device conditions, making account status a primary troubleshooting check. Option D (Google Workspace Status Dashboard) is correct because it reports current service health and outages for Google Workspace apps including Drive; if Drive is experiencing a widespread outage, the issue is on Google's side and no client-side fix will help. Option A (browser history) is not relevant because cached browsing history does not cause or explain access failures to Drive. Option C (computer model) is irrelevant since Google Drive access depends on the browser and account, not the hardware model. Option E (printer configuration) is unrelated because printing has no bearing on the ability to access Google Drive.

Answer

User's browser history

Answer

The user's computer model

Answer

The user's printer configuration

Question 11

A user reports their Gmail is not receiving external mail. Which TWO of the following could be the cause?

Accepted Answer

Incorrect MX records. Option D is correct because MX records tell the internet where to deliver mail for a domain; if they are incorrect or missing, external senders cannot route messages to Gmail's mail servers, so inbound mail fails. Option E is correct because aggressive spam filtering rules can quarantine, label, or delete legitimate external messages before they reach the inbox, making it appear that external mail is not being received. Option A is not correct because password length affects account security and authentication, not the delivery path for inbound external mail. Option B is not correct because a 30-day inactivity period may affect account state or access, but it does not by itself explain why external mail is not being delivered. Option C is not correct because display language settings only affect the user interface and do not influence SMTP routing or spam filtering.

Answer

The user's password is too short

Answer

The user has not logged in for 30 days

Answer

The user's display language settings

Question 12

An organization is failing to receive emails from a specific sender. The logs show the messages were rejected by the 'Spam Filter'. What should you do?

Accepted Answer

Add the sender to the 'Approved senders' list.. Adding the sender's domain or IP to the 'Approved senders' list in the Gmail settings will allow the messages to bypass spam filtering.

Answer

Disable all spam filtering for the domain.

Answer

Delete the sender's email address.

Answer

Increase the domain storage limit.

Question 13

A mobile device is not syncing corporate email. Which THREE of the following should you investigate?

Accepted Answer

User account password reset. Option A (User account password reset) is correct because if the user's account password was recently reset, the cached credentials on the mobile device become stale, causing authentication failures against the mail server (e.g., Exchange ActiveSync or IMAP) and halting sync until the password is updated on the device. Option B (Mobile management settings in the Admin console) is correct because MDM/MAM policies such as ActiveSync access rules, device enrollment requirements, or conditional access settings can block or disable email synchronization for that user or device. Option C (Device compliance status) is correct because if the device falls out of compliance (e.g., missing encryption, outdated OS, no passcode, or jailbroken/rooted), conditional access policies will deny it access to corporate email until compliance is restored. Option D (The user's home network speed) is not relevant because slow bandwidth would degrade performance but would not selectively stop corporate email sync while other connectivity works. Option E (The user's browser plugin list) is not relevant because mobile email sync relies on native mail clients and MDM/ActiveSync protocols, not browser plugins.

Answer

The user's home network speed

Answer

The user's browser plugin list

Question 14

When troubleshooting a SAML application error, which THREE of the following should you check?

Accepted Answer

SAML application metadata. Option A (SAML application metadata) is correct because the metadata XML defines the entity ID, ACS URL, and signing certificates that the IdP and SP exchange; a mismatched or stale metadata file is a common cause of SAML assertion failures. Option C (User attribute mapping) is correct because SAML assertions must carry the attributes the SP expects (for example NameID, email, or role claims), and incorrect or missing mappings cause authorization or login errors. Option E (Certificate expiration status) is correct because SAML signing and encryption certificates have validity periods, and an expired IdP or SP certificate will invalidate assertions and break the trust relationship. Option B (the user's computer operating system) is not relevant because SAML is a browser-based federation protocol independent of the client OS, and Option D (the user's physical location) is not relevant because SAML troubleshooting focuses on identity configuration, not geographic location.

Answer

The user's computer operating system

Answer

The user's physical location

Question 15

Which TWO of the following steps are useful when troubleshooting a user's inability to share a file externally?

Accepted Answer

Review Drive sharing policies in the Admin console. Option A is correct because external sharing in Google Workspace is governed by Admin console settings under Apps > Google Workspace > Drive and Docs > Sharing settings, where policies such as "Sharing outside of <domain>" can be set to OFF or restricted to whitelisted domains, directly blocking a user's ability to share a file externally. Option C is correct because files in a shared drive are subject to the shared drive's own membership and access rules, and external sharing may be limited by the shared drive's settings or by the user lacking the required role (e.g., Manager or Content Manager with sharing privileges), so confirming the file's location is essential. Option B is wrong because changing the primary email address does not affect sharing permissions and would only disrupt the user's identity. Option D is wrong because browser version is unrelated to Drive sharing policy enforcement. Option E is wrong because resetting the Google account is a drastic, unrelated action that would not resolve a sharing policy or shared drive permission issue.

Answer

Change the user's primary email address

Answer

Verify the user's browser version

Answer

Reset the user's Google account