GWS-ADMIN · domain
Endpoint Management
Practise Google Cloud Associate Google Workspace Administrator (GWS-ADMIN) Endpoint Management practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice Endpoint Management questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Endpoint Management
IPv6 questions usually test address types (link-local, global unicast, ULA), autoconfiguration (SLAAC), Neighbor Discovery Protocol and the differences from IPv4.
IPv6 address types and their scopes (link-local, global unicast, multicast, ULA).
SLAAC vs DHCPv6 vs stateful assignment.
Neighbor Discovery Protocol replacing ARP.
IPv6 routing differences and dual-stack coexistence.
Watch out for
Common Endpoint Management exam traps
- ▸Link-local addresses are not routable beyond the local link.
- ▸SLAAC uses EUI-64 or random interface IDs — not a DHCP server.
- ▸NDP uses ICMPv6, not ARP.
- ▸An IPv6 prefix is /64 for most host subnets, not /24.
Question index
All Endpoint Management questions (36)
Click any question to see the full explanation, or start a practice session above.
An employee is reporting that they cannot access corporate Gmail on their personal Android device. You have set up 'Advanced mobile management'. What is the most likely cause if the device is showing as 'Blocked' in the Admin console?
Medium2You need to block a specific version of the Chrome browser because of a security vulnerability. Which setting do you use?
Hard3You are configuring Endpoint Verification. What is the primary purpose of the Endpoint Verification extension on a user's browser?
Medium4Your organization uses ChromeOS devices. You want to enforce a policy that prevents users from using guest mode on these devices. Where do you configure this?
Easy5Where do you go to view a list of all devices currently accessing your organization's data?
Easy6Which THREE settings can be enforced on Android devices using Advanced mobile management?
Hard7You are implementing context-aware access and need to ensure that only devices with a disk-encrypted state are allowed to access Google Drive. Which feature enables this check?
Hard8You need to ensure that all corporate-owned Android devices require a screen lock. Where should you configure this setting?
Easy9Which of the following is true regarding 'Advanced' mobile management for iOS?
Hard10You need to distribute a specific internal Android app to a subset of users. What is the most efficient way to achieve this using Google Workspace?
Hard11Which THREE of the following attributes can be used in Context-Aware Access policies?
Hard12A user is unable to install a managed app on their iOS device. What is the first thing you should verify?
Medium13You want to require that all corporate-owned iOS devices are encrypted. How is this achieved?
Hard14Your company wants to prevent employees from using personal Google accounts on company-owned ChromeOS devices. Which setting should you enable?
Medium15You need to ensure that Chrome browsers on unmanaged devices are secure. What is a key step to take?
Medium16You have a mix of company-owned and BYOD mobile devices. You want to apply different policies to each. What is the recommended strategy?
Hard17Which THREE of the following are types of reports available in the 'Reports' section of the Admin console regarding mobile devices?
Hard18You want to prevent users from copying data from managed apps into personal apps on their mobile devices. Which feature should you configure?
Hard19You are setting up Context-Aware Access. You want to deny access to Google Workspace if the device is not encrypted. Which tool identifies the 'is_encrypted' attribute?
Hard20You need to deploy a specific Android application to a subset of users. What is the correct procedure?
Medium21What is required for a user to be able to manage their own mobile device in the Google Admin console?
Easy22A user reports that their Android work profile is no longer syncing corporate emails. As an administrator, which action should you perform first in the Google Admin console to investigate?
Easy23Which TWO of the following are prerequisites for setting up iOS device management?
Medium24You want to ensure that only company-managed ChromeOS devices can access your Google Workspace environment. Which setting should you modify?
Medium25A user claims their corporate data is not being wiped after they left the company. You previously issued a 'wipe device' command. What should you check to verify the outcome?
Medium26When managing ChromeOS devices, which TWO settings can be configured within the 'Device settings' section of the Admin console?
Medium27A user complains that they cannot access their work email. You see the device is marked as 'Blocked' in the Admin console. What should you do?
Easy28Which TWO of the following can be enforced via ChromeOS device settings?
Medium29Your organization requires that all iOS devices accessing corporate data be encrypted and have a passcode. You have enabled Google Mobile Management. Which configuration setting should you verify in the Google Admin console to ensure all devices enforce these policies?
Medium30Which TWO of the following actions can be performed on an Android device from the Admin console?
Medium31Which TWO of the following methods can be used to enroll Android devices?
Medium32You are configuring a 'Work profile' for Android. What is the primary benefit of this setup?
Medium33Which THREE of the following are settings that can be controlled in the Chrome browser for all users?
Hard34You want to ensure that only managed Chrome devices can access your organization's Google Workspace data. Which tool should you configure to verify the security posture of the device before allowing access?
Easy35A user has left the company. You need to ensure all corporate data is removed from their Android device, but you want to keep their personal data intact. Which action should you take?
Medium36An employee lost their company-issued Android device. What is the most effective way to secure the data?
EasyOther domains
All GWS-ADMIN exam domains
Frequently asked questions
- What does the Endpoint Management domain cover on the GWS-ADMIN exam?
- IPv6 questions usually test address types (link-local, global unicast, ULA), autoconfiguration (SLAAC), Neighbor Discovery Protocol and the differences from IPv4.
- How many questions are in this domain?
- This page lists all 36 Endpoint Management questions in the GWS-ADMIN question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Endpoint Management questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.