Courseiva

GWS-ADMIN · domain

Endpoint Management

Practise Google Cloud Associate Google Workspace Administrator (GWS-ADMIN) Endpoint Management practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

36 questions8 easy16 medium12 hard

Focused practice

Practice Endpoint Management questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Endpoint Management

IPv6 questions usually test address types (link-local, global unicast, ULA), autoconfiguration (SLAAC), Neighbor Discovery Protocol and the differences from IPv4.

IPv6 address types and their scopes (link-local, global unicast, multicast, ULA).

SLAAC vs DHCPv6 vs stateful assignment.

Neighbor Discovery Protocol replacing ARP.

IPv6 routing differences and dual-stack coexistence.

Watch out for

Common Endpoint Management exam traps

  • Link-local addresses are not routable beyond the local link.
  • SLAAC uses EUI-64 or random interface IDs — not a DHCP server.
  • NDP uses ICMPv6, not ARP.
  • An IPv6 prefix is /64 for most host subnets, not /24.

Question index

All Endpoint Management questions (36)

Click any question to see the full explanation, or start a practice session above.

1

An employee is reporting that they cannot access corporate Gmail on their personal Android device. You have set up 'Advanced mobile management'. What is the most likely cause if the device is showing as 'Blocked' in the Admin console?

Medium
2

You need to block a specific version of the Chrome browser because of a security vulnerability. Which setting do you use?

Hard
3

You are configuring Endpoint Verification. What is the primary purpose of the Endpoint Verification extension on a user's browser?

Medium
4

Your organization uses ChromeOS devices. You want to enforce a policy that prevents users from using guest mode on these devices. Where do you configure this?

Easy
5

Where do you go to view a list of all devices currently accessing your organization's data?

Easy
6

Which THREE settings can be enforced on Android devices using Advanced mobile management?

Hard
7

You are implementing context-aware access and need to ensure that only devices with a disk-encrypted state are allowed to access Google Drive. Which feature enables this check?

Hard
8

You need to ensure that all corporate-owned Android devices require a screen lock. Where should you configure this setting?

Easy
9

Which of the following is true regarding 'Advanced' mobile management for iOS?

Hard
10

You need to distribute a specific internal Android app to a subset of users. What is the most efficient way to achieve this using Google Workspace?

Hard
11

Which THREE of the following attributes can be used in Context-Aware Access policies?

Hard
12

A user is unable to install a managed app on their iOS device. What is the first thing you should verify?

Medium
13

You want to require that all corporate-owned iOS devices are encrypted. How is this achieved?

Hard
14

Your company wants to prevent employees from using personal Google accounts on company-owned ChromeOS devices. Which setting should you enable?

Medium
15

You need to ensure that Chrome browsers on unmanaged devices are secure. What is a key step to take?

Medium
16

You have a mix of company-owned and BYOD mobile devices. You want to apply different policies to each. What is the recommended strategy?

Hard
17

Which THREE of the following are types of reports available in the 'Reports' section of the Admin console regarding mobile devices?

Hard
18

You want to prevent users from copying data from managed apps into personal apps on their mobile devices. Which feature should you configure?

Hard
19

You are setting up Context-Aware Access. You want to deny access to Google Workspace if the device is not encrypted. Which tool identifies the 'is_encrypted' attribute?

Hard
20

You need to deploy a specific Android application to a subset of users. What is the correct procedure?

Medium
21

What is required for a user to be able to manage their own mobile device in the Google Admin console?

Easy
22

A user reports that their Android work profile is no longer syncing corporate emails. As an administrator, which action should you perform first in the Google Admin console to investigate?

Easy
23

Which TWO of the following are prerequisites for setting up iOS device management?

Medium
24

You want to ensure that only company-managed ChromeOS devices can access your Google Workspace environment. Which setting should you modify?

Medium
25

A user claims their corporate data is not being wiped after they left the company. You previously issued a 'wipe device' command. What should you check to verify the outcome?

Medium
26

When managing ChromeOS devices, which TWO settings can be configured within the 'Device settings' section of the Admin console?

Medium
27

A user complains that they cannot access their work email. You see the device is marked as 'Blocked' in the Admin console. What should you do?

Easy
28

Which TWO of the following can be enforced via ChromeOS device settings?

Medium
29

Your organization requires that all iOS devices accessing corporate data be encrypted and have a passcode. You have enabled Google Mobile Management. Which configuration setting should you verify in the Google Admin console to ensure all devices enforce these policies?

Medium
30

Which TWO of the following actions can be performed on an Android device from the Admin console?

Medium
31

Which TWO of the following methods can be used to enroll Android devices?

Medium
32

You are configuring a 'Work profile' for Android. What is the primary benefit of this setup?

Medium
33

Which THREE of the following are settings that can be controlled in the Chrome browser for all users?

Hard
34

You want to ensure that only managed Chrome devices can access your organization's Google Workspace data. Which tool should you configure to verify the security posture of the device before allowing access?

Easy
35

A user has left the company. You need to ensure all corporate data is removed from their Android device, but you want to keep their personal data intact. Which action should you take?

Medium
36

An employee lost their company-issued Android device. What is the most effective way to secure the data?

Easy

Frequently asked questions

What does the Endpoint Management domain cover on the GWS-ADMIN exam?
IPv6 questions usually test address types (link-local, global unicast, ULA), autoconfiguration (SLAAC), Neighbor Discovery Protocol and the differences from IPv4.
How many questions are in this domain?
This page lists all 36 Endpoint Management questions in the GWS-ADMIN question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Endpoint Management questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
gws-admin GWS-ADMIN endpoint management Practice Questions