GWS-ADMIN · domain
Core Workspace Services
This domain covers the day-to-day administration of Gmail, Google Drive, Calendar, Meet, Chat, and shared services in Google Workspace. Questions present operational scenarios — routing mail through gateways, scoping service accounts, retaining messages for eDiscovery, and restricting Drive sharing — and ask you to pick the correct Admin console setting, organizational unit scope, or API configuration.
Focused practice
Practice Core Workspace Services questions
Scored sessions drawing only from this domain — pick a length below.
What this domain covers
What to know about Core Workspace Services
Be able to translate an administrative scenario into the exact Admin console location, organizational unit scope, and service configuration. The single most important thing is knowing which control — routing, retention, sharing, or OAuth scope — actually enforces the requirement, since similar-sounding settings do different jobs.
Configuring Gmail routing and compliance rules, including third-party gateway and dual delivery
Authorizing service accounts for Gmail API access using OAuth scopes and domain-wide delegation
Setting retention and holds for eDiscovery across Gmail and Drive via Vault
Applying Drive sharing policies at the organizational unit level, including allowlists and link sharing
Watch out for
Common Core Workspace Services exam traps
- ▸Assuming a Gmail routing rule alone archives mail; retention and eDiscovery require Vault holds or retention rules, not just routing.
- ▸Placing Drive sharing restrictions at the top-level organization when the scenario requires a specific organizational unit or group.
- ▸Granting service account OAuth scopes in the Admin console without enabling domain-wide delegation or the correct API scopes.
Question index
All Core Workspace Services questions (28)
Click any question to see the full explanation, or start a practice session above.
You need to prevent users from sharing Google Drive files with people outside the organization. Which setting should you modify?
Medium2Which TWO of the following can be restricted in Google Drive sharing settings?
Medium3Which setting allows you to see what files are being shared externally across your entire domain?
Easy4Your organization uses Google Workspace and you have been asked to ensure that all email sent from your domain passes SPF, DKIM, and DMARC checks. You have already published SPF and DKIM records. Which action should you take to complete the DMARC configuration?
Medium5Which THREE settings can be configured within the Gmail Compliance section?
Hard6Which TWO of the following can be configured in the Google Workspace Admin Console to restrict user access to Google Drive?
Medium7Your organization uses Google Workspace and has a mix of full-time employees and temporary contractors. You need to ensure that contractors cannot access Google Drive from unmanaged mobile devices, while employees can. Which TWO configurations should you implement? (Choose two.)
Hard8Your organization has a policy that employees must not be able to download Google Drive files on unmanaged devices. You have already set up Context-Aware Access with an access level that requires managed devices. However, users report they can still download files from Drive on personal devices. What is the most likely reason?
Hard9Which THREE of the following are valid ways to manage Google Calendar resource availability?
Medium10You need to change the default language and region settings for all new users in a specific Organizational Unit. How do you do this?
Medium11Which THREE items can be managed through the 'Directory' section in the Admin Console?
Hard12Where can an administrator view the status of a user's 2-Step Verification enrollment?
Easy13Which TWO of the following are valid methods to audit file access in Google Drive?
Medium14Your organization is migrating from Microsoft Exchange to Google Workspace. The IT director wants to ensure that all existing calendar events, including recurring meetings and resource bookings, are transferred to Google Calendar with minimal user intervention. Which Google Workspace service should you use to accomplish this?
Medium15Which report would you use to identify users who haven't logged in for more than 30 days?
Easy16A user in your organization reports that they cannot access their Google Drive files from their mobile device. They can access Drive from their laptop without issue. You suspect a device-based access policy is blocking mobile access. Where in the Google Admin console should you check?
Easy17Your organization has a policy that all Google Drive files must be owned by the organization, not by individual users. A user creates a new Google Doc and shares it with an external collaborator. You need to ensure that the file remains owned by the organization even if the user leaves. What should you do?
Medium18Your company has a Google Workspace subscription. The IT team wants to ensure that all users' Chrome browsers are configured to block third-party cookies and that this setting cannot be changed by users. Which Google Workspace setting should you configure?
Medium19A manager needs to know which users in the sales organizational unit have not signed in to their Google Workspace account in the past 30 days. The manager does not have admin access. What should the administrator do to provide this information?
Hard20You are the Workspace administrator for a healthcare company. A new compliance policy requires that all external email sent from your domain be digitally signed so that recipients can verify the messages are genuinely from your organization. You need to configure this in the Google Workspace Admin console. What should you do?
Medium21A user in your organization reports that they accidentally deleted a Google Calendar event that contained important meeting notes and attachments. The event was deleted from a secondary calendar they own. Where can the user recover the deleted event?
Easy22Your organization wants to ensure that all outgoing mail is routed through a third-party email security gateway for scanning. What is the correct configuration?
Hard23You are setting up a new service account to access Gmail APIs. Where must you provide the required OAuth scopes to authorize access?
Hard24You are the Workspace administrator for a retail company. The legal department needs to ensure that all email sent to and received from a specific external domain is archived for eDiscovery, even if users delete the messages. Which Google Workspace feature should you configure?
Medium25Your company's security team wants to ensure that all outgoing email from your Google Workspace domain is authenticated so that external recipients can verify it. They ask you to check the current email authentication configuration for the domain. Where should you look in the Google Workspace Admin console to review and manage these settings?
Medium26You are the Google Workspace administrator for a company that wants to enforce stricter controls on how users share Google Drive files. You need to configure sharing settings at the organizational unit level. Which TWO of the following actions can you perform in the Google Drive sharing settings for an organizational unit? (Choose two.)
Hard27Your organization requires that all Google Meet recordings be saved to a specific shared folder. How can you automate this?
Hard28You want to ensure that users cannot change their profile photo. Where is this setting located?
EasyOther domains
All GWS-ADMIN exam domains
Frequently asked questions
- What does the Core Workspace Services domain cover on the GWS-ADMIN exam?
- Be able to translate an administrative scenario into the exact Admin console location, organizational unit scope, and service configuration. The single most important thing is knowing which control — routing, retention, sharing, or OAuth scope — actually enforces the requirement, since similar-sounding settings do different jobs.
- How many questions are in this domain?
- This page lists all 28 Core Workspace Services questions in the GWS-ADMIN question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Core Workspace Services questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.