GWS-ADMIN User Accounts Domains And Directory — Timed 20 Questions

Question 1

You are automating user creation via the Directory API. Which scope is required to create users?

Accepted Answer

https://www.googleapis.com/auth/admin.directory.user. The admin.directory.user scope is required for CRUD operations on user objects.

Answer

https://www.googleapis.com/auth/admin.reports.audit.readonly

Answer

https://www.googleapis.com/auth/admin.directory.group

Answer

https://www.googleapis.com/auth/admin.directory.domain.readonly

Question 2

Which tool would you use to sync local Active Directory users to Google Workspace?

Accepted Answer

Google Cloud Directory Sync. Google Cloud Directory Sync (GCDS) is the standard tool for one-way synchronization from AD to Google.

Answer

Google Workspace Migrate

Answer

Directory API

Answer

Admin SDK

Question 3

An administrator mistakenly deleted a user account 10 days ago. How can you restore this account?

Accepted Answer

Use the Restore User tool in the Admin console. Deleted users can be restored within 20 days via the Admin console.

Answer

Contact Google Support for data recovery

Answer

Restore from a Vault export

Answer

Create a new user with the same email

Question 4

You have multiple domains in a single Google Workspace account. How can you provision users in a specific sub-domain?

Accepted Answer

Select the domain from the dropdown in the 'Add user' dialog. During user creation, you can select the domain from the dropdown menu of verified domains.

Answer

Rename the primary domain

Answer

Use a group alias

Answer

Create an OU for the domain

Question 5

You need to bulk upload 500 users using a CSV file. What is the required format for the CSV header row?

Accepted Answer

First Name, Last Name, Password, Email Address. The Google Admin console bulk upload tool requires specific headers like First Name, Last Name, and Email Address to process the file.

Answer

Email, Phone, Address

Answer

FirstName, LastName, Password

Answer

Username, Role, OU

Question 6

You need to add a secondary domain to your Google Workspace account. What must you perform after adding the domain in the Admin console?

Accepted Answer

Verify domain ownership. Verification is mandatory to prove domain ownership via DNS records.

Answer

Create a new OU

Answer

Set up SPF records

Answer

Provision user accounts

Question 7

A user in the 'Sales' OU is not receiving policy updates applied to that OU. What is the most likely cause?

Accepted Answer

Inheritance is disabled for the Sales OU. Inheritance is the default behavior; if it is broken, child OUs do not receive parent policies.

Answer

The user is in a group

Answer

The domain is not verified

Answer

The user has a suspended account

Question 8

A new employee needs access to Google Workspace. What is the minimum action required in the Google Admin console to create the account?

Accepted Answer

Add a user and assign a Google Workspace license. Creating a user in the Admin console requires defining a primary email address and assigning a license for access.

Answer

Assign a Google Groups membership

Answer

Configure an alias

Answer

Create an organizational unit

Question 9

What happens to a user's data when you suspend their account?

Accepted Answer

Data remains, but the user cannot log in. Suspension keeps data intact and accessible to the admin, but the user cannot log in.

Answer

License is automatically released

Answer

Data is deleted after 30 days

Answer

User can still access data via API

Question 10

You need to add a custom attribute to user profiles. Where is this configured?

Accepted Answer

Directory > Users > Manage custom attributes. Custom attributes are managed under Directory > Users > More > Manage custom attributes.

Answer

Account > Organization profile

Answer

Security > Profile settings

Answer

Directory > OU management

Question 11

What is the primary function of an alias address?

Accepted Answer

To provide an alternative email address for an existing user. An alias is an additional email address for an existing user that routes mail to the same inbox.

Answer

To act as a mailing list

Answer

To bypass domain verification

Answer

To create a separate inbox

Question 12

You want to restrict which users can sign in to Google Workspace based on IP address. Where do you configure this?

Accepted Answer

Security > Authentication > Network access. Network-based sign-in restrictions are configured in the Security > Authentication section.

Answer

Account Settings

Answer

Organizational Units

Answer

Directory settings

Question 13

Where can an administrator force a password reset for a single user?

Accepted Answer

Directory > Users > [User] > Reset password. You can initiate a password reset directly from the user's profile page in the Admin console.

Answer

Account > User security

Answer

Directory > Security

Answer

Security > Password management

Question 14

An administrator needs to view all changes made to organizational units. Which report should they use?

Accepted Answer

Admin audit log. The Admin Audit log records all configuration changes within the Google Admin console.

Answer

User activity report

Answer

Login audit log

Answer

OAuth token audit

Question 15

You are migrating users from a secondary domain to the primary domain. What is the impact on their email?

Accepted Answer

The old email address becomes an alias. Changing a primary domain email requires renaming the user, which creates an alias of the old address.

Answer

The user must re-verify their identity

Answer

Data is lost

Answer

The user is automatically suspended

Question 16

You need to grant a user permission to manage only the 'Marketing' OU. Which administrative role do you assign?

Accepted Answer

Custom Admin role with OU scope. Custom Admin roles allow granular control over OU access.

Answer

User Management Admin

Answer

Super Admin

Answer

Group Admin

Question 17

Which feature prevents a user from being deleted during a directory sync?

Accepted Answer

GCDS 'Do not delete' rule. The 'Do not delete' flag in GCDS prevents the sync process from removing accounts that don't match the source directory.

Answer

OU locking

Answer

Account suspension

Answer

Admin role assignment

Question 18

What is the maximum number of custom aliases a user can have?

Accepted Answer

30. Google allows up to 30 aliases per user.

Answer

10

Answer

50

Answer

Unlimited

Question 19

You need to export a list of all users and their license status. What is the best method?

Accepted Answer

Export via Admin console Users list. The User report in the Admin console allows exporting user data to Google Sheets.

Answer

Use the Security investigation tool

Answer

Check the Billing report

Answer

Use the Directory API

Question 20

What happens when you delete an Organizational Unit?

Accepted Answer

The OU cannot be deleted until it is empty. Deleting an OU requires moving all users and sub-OUs out of it first.

Answer

Users inside are suspended

Answer

Users are deleted along with the OU

Answer

Users inside are automatically moved to root