Security Policies And Access Controls →hardMultiple ChoiceObjective-mapped

GWS-ADMIN Security Policies And Access Controls Practice Question

An administrator needs to restrict access to Google Workspace apps so that users can only log in from corporate-managed Chromebooks and Windows devices enrolled in Endpoint Management, while blocking all mobile devices entirely. How should this be implemented?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Use Context-Aware Access with access levels checking for device policy compliance and specific operating systems (desktop OS only).

Context-Aware Access rules can evaluate device OS and management state to block mobile devices and permit only managed corporate devices.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Use Context-Aware Access with access levels checking for device policy compliance and specific operating systems (desktop OS only).
Why this is correct
CAA allows filtering by OS (Windows, ChromeOS, macOS) and device compliance status, effectively excluding mobile OS types.
✗
Set up IAM conditions in the Google Cloud console for Google Workspace endpoints.
Why it's wrong here
Google Workspace access policies are managed in the Google Admin console under Context-Aware Access, not GCP IAM conditions.
✗
Apply an Advanced Protection policy for all mobile users.
Why it's wrong here
Advanced Protection does not block mobile device access based on management status.
✗
Configure mobile device management settings to turn off Google sync for iOS and Android.
Why it's wrong here
This only stops data sync, it does not prevent web browser sign-ins on mobile devices.

About these practice questions

This GWS-ADMIN question is part of Courseiva's 208-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Google Cloud exam blueprint

Ready to practise?

Put this into practice with a full scored session.

Start practice session

Practice tests

Short scored sets — answer, get feedback, read the explanation, move on.

GWS-ADMIN Practice Test 5 — 25 Questions→GWS-ADMIN Exam Simulation 1 — 100 Questions→

Practice by domain

Drill one exam section at a time instead of jumping between unrelated topics.

Security Policies And Access Controls Endpoint Management User Accounts Domains And Directory

Filter by question format

Filter questions by type — troubleshooting, exhibit, drag-and-drop, multi-select, and more.

Browse scenarios

Practice by topic

One concept per page — questions, worked explanations, and a short concept guide.

Security Policies And Access Controls practice questions GWS-ADMIN scenario practice questions User Accounts Domains And Directory practice questions

Continue studying

Study guide Exam domains All GWS-ADMIN questions

This GWS-ADMIN practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GWS-ADMIN exam.