GWS-ADMIN · domain
Troubleshooting
This domain covers diagnosing Google Workspace issues across authentication, Gmail delivery, SAML SSO, and sharing. Questions present a user-reported symptom and ask you to identify the cause or the next diagnostic step, using Admin console tools, audit logs, and message headers rather than guesswork.
Focused practice
Practice Troubleshooting questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Troubleshooting
Be able to trace a symptom to its source using Admin console audit logs, Gmail headers, and SAML/calendar settings. The key skill is reading the actual error or log evidence before changing configuration, rather than guessing at the fix.
Reading Gmail message headers and SMTP error codes to diagnose bounces
Investigating login failures via Admin console security and user audit logs
Checking SAML app configuration: ACS URL, entity ID, and certificate
Verifying calendar sharing permissions, ACLs, and visibility settings
Watch out for
Common Troubleshooting exam traps
- ▸Assuming repeated lockouts mean the user forgot their password, instead of checking for suspicious sign-in attempts or credential-stuffing from multiple IPs.
- ▸Treating a 550 5.7.1 bounce as a Google Workspace outage, when it usually reflects the recipient server rejecting the message.
- ▸Debugging SAML errors by only re-uploading the certificate, ignoring mismatched ACS URLs, entity IDs, or attribute mappings.
Question index
All Troubleshooting questions (42)
Click any question to see the full explanation, or start a practice session above.
A Google Workspace administrator is troubleshooting a Google Meet issue for a user. The user reports that when they try to join a meeting from a Chrome browser, they see a 'You cannot join this call' error, but other participants can join successfully. The user can join the same meeting from the Google Meet mobile app without issues. The administrator checks the user's OU and confirms that Google Meet is enabled and that the user has a valid license. Which is the MOST likely cause of the browser-specific error?
Hard2A user reports that they are unable to access a Google Meet link shared by an external partner. The user can access other Google Meet links from within the organization. Which TWO of the following should the administrator check to resolve this? (Choose two.)
Medium3A Workspace administrator is troubleshooting a report that calendar invitations sent by a user are not appearing on recipients' calendars. The recipients are internal users in the same domain. The administrator confirms that the sender can create events and that recipients receive the invitation emails. Which setting should the administrator check to resolve the issue?
Medium4A Google Workspace administrator is troubleshooting why a user cannot access a Google Drive file shared by another user in the same domain. The file is owned by a user in the same domain, and the sharing settings are set to 'Anyone in the organization with the link can view'. The user reports seeing a 'You need permission' error. The administrator has verified that the user is signed in with the correct account. Which of the following is the most likely cause?
Hard5A Google Workspace administrator needs to quickly identify which users have been suspended in the domain. Which tool should the administrator use to get this information?
Easy6A user claims they cannot share a file with an external partner. What is the most likely cause within the Admin console?
Easy7A user is unable to access Google Drive. Which TWO of the following should you check first?
Easy8A Google Workspace administrator receives reports that users in the sales department cannot access a shared drive named 'Sales Proposals'. The shared drive still appears in their Google Drive interface, but when they try to open it, they get a 'You need permission' error. The admin confirms the shared drive exists and that the sales team is a member of a Google Group that was previously added as a member of the shared drive. What is the most likely cause?
Hard9An administrator notices unusual login activity from a specific geographic location. What is the first step to prevent further unauthorized access?
Hard10When troubleshooting a SAML application error, which THREE of the following should you check?
Hard11An organization is failing to receive emails from a specific sender. The logs show the messages were rejected by the 'Spam Filter'. What should you do?
Hard12A user has left the company. You need to migrate their data to another user. Which tool should you use?
Easy13A user needs to see their login history. Where can you find this information?
Easy14A Google Workspace administrator is investigating why a user's Google Calendar events are not syncing to their mobile device. The user has an Android device with the Google Calendar app installed and signed in with their Workspace account. The administrator confirms that the user can access Calendar on the web and that events appear there. Which TWO of the following should the administrator check to resolve the mobile sync issue? (Choose two.)
Medium15An organization uses a third-party gateway to route email. Users report that emails are being marked as spam frequently. Which DNS record should you investigate to ensure Google trusts the gateway?
Hard16A mobile device is not syncing corporate email. Which THREE of the following should you investigate?
Medium17A user reports that they are not receiving emails from an external vendor. As an administrator, where should you first look to verify if the messages reached Google's servers?
Easy18A Google Workspace administrator is troubleshooting an issue with Google Groups. A user reports that they are not receiving email sent to a group they are a member of. The administrator checks the group's settings and confirms that the user is a direct member with 'Email' subscription. The group's access settings allow external senders. The administrator also verifies that the group's email address is correct and that messages are not being caught by spam filters. Which is the MOST likely cause of the user not receiving group emails?
Hard19A user reports that their mobile device is no longer syncing corporate data. What is the most likely cause?
Hard20A Workspace administrator at a financial services firm configures a new SMTP relay service in the Admin console to allow an on-premises application to send notifications through Google Workspace. After configuration, the application's messages are being rejected with an authentication error. The administrator confirms the application is sending to smtp-relay.gmail.com on port 587 and that the sending server's IP address is included in the allowed list. Which additional requirement must be met for the SMTP relay service to accept the messages?
Hard21A user in your organization reports that when they try to open a Google Docs file shared by a colleague, they see a message stating they need to request access. The colleague confirms the file is shared with the entire organization as Editor. What should you check first to resolve this?
Medium22An administrator at a retail company notices that a user's Google Drive files are suddenly inaccessible to colleagues who previously had access. The administrator checks the file's sharing settings and sees that the sharing permissions still list the colleagues. The administrator also confirms the colleagues can access other files in the same shared drive. Which action should the administrator take first to troubleshoot the issue?
Easy23A Google Workspace administrator receives a report from a user who cannot access Google Drive. The user sees a 'Service not enabled for this account' error when attempting to open Drive. The administrator confirms that the user is in an organizational unit (OU) where Google Drive is turned ON. What should the administrator check NEXT to resolve this issue?
Easy24A user is receiving 'Account temporarily unavailable' messages. What is the primary thing to check?
Hard25You have configured a new transport rule, but it is not triggering as expected. What is the first troubleshooting step?
Medium26A user reports that emails are not being sent to an external mailing list. The logs show '550 5.1.1'. What does this code indicate?
Hard27You notice that a user's account is generating a large amount of spam. What is the immediate action you should take?
Medium28When an email is reported as missing, which THREE logs or tools can help you track the issue?
Hard29A Workspace administrator receives reports that several users in the sales organizational unit cannot sign in to their accounts from newly issued corporate Android devices. The users can sign in successfully from their laptops. The administrator has already confirmed the users' passwords are correct and that no account suspensions are in place. Which TWO of the following should the administrator check to resolve the mobile sign-in failures? (Choose two.)
Hard30A Google Workspace administrator receives reports that some users are not receiving email notifications from a third-party ticketing system. The ticketing system sends from a domain that has a strict DMARC policy. The notifications are not in spam. What should the administrator check first?
Hard31A Google Workspace administrator is investigating why a user is not receiving email notifications from an external CRM system. The CRM vendor confirms emails are sent from notifications@crmvendor.com, but the user's inbox shows nothing. The admin runs a message trace in the Google Admin console and sees the messages were delivered to the user's mailbox. What should the admin check next?
Medium32A Google Workspace administrator notices that a user's account is repeatedly locked out after multiple failed login attempts from different IP addresses. The user insists they are not attempting to sign in. What should the administrator do first to mitigate the issue?
Hard33Which TWO of the following steps are useful when troubleshooting a user's inability to share a file externally?
Medium34A user is unable to access a specific mobile app on their managed device. Which tool should you use to check the device policy status?
Easy35A user claims they cannot see a shared calendar. What should you check to resolve this?
Medium36A Workspace administrator uses the Email Log Search tool in the Admin console to investigate a message that a user says never arrived. The search returns a single entry with the delivery status 'Rejected' and the SMTP response code '550 5.7.1'. The recipient's mailbox exists and is active. What is the most likely reason the message was rejected?
Medium37A user reports their Gmail is not receiving external mail. Which TWO of the following could be the cause?
Easy38A user reports that emails sent to a specific external domain are bouncing with a '550 5.7.1' error. What is the likely reason?
Hard39A user is unable to sync their Google Drive files to their local machine using Drive for Desktop. What is the first step you should recommend?
Medium40A user is unable to send email to a group. What is the most common cause?
Medium41A Google Workspace administrator needs to investigate why a specific user's Google Drive files were suddenly shared externally. The administrator must identify which user action triggered the sharing and when it occurred. Which tool should the administrator use to find this information?
Medium42A Google Workspace administrator is troubleshooting a user's inability to sign in to their account. The user reports that after entering their password, they see a message saying 'Your account is not allowed to sign in from this device.' The admin checks the user's account status and sees it is active. What should the admin check next?
EasyOther domains
All GWS-ADMIN exam domains
Frequently asked questions
- What does the Troubleshooting domain cover on the GWS-ADMIN exam?
- Be able to trace a symptom to its source using Admin console audit logs, Gmail headers, and SAML/calendar settings. The key skill is reading the actual error or log evidence before changing configuration, rather than guessing at the fix.
- How many questions are in this domain?
- This page lists all 42 Troubleshooting questions in the GWS-ADMIN question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Troubleshooting questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.