GWS-ADMIN · domain
User Accounts Domains And Directory
This domain covers Google Workspace directory fundamentals: creating and managing users, organizational units, domains and aliases, and admin roles. Questions are scenario-based, asking you to choose the correct Admin console path or predict the effect of an action such as deleting an OU, renaming a domain, or suspending a user.
Focused practice
Practice User Accounts Domains And Directory questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about User Accounts Domains And Directory
Be able to navigate the Admin console to create users, move them between OUs, manage domains and aliases, and suspend or delete accounts correctly. The most important thing: know that deleting an OU never deletes its users, and suspension preserves data while deletion does not.
Managing users, OUs, and groups in the Google Admin console directory
Primary vs secondary domains, domain aliases, and user alias email addresses
Suspending, deleting, and restoring users, plus data retention via Google Vault
Admin roles, delegated administration, and password reset and recovery options
Watch out for
Common User Accounts Domains And Directory exam traps
- ▸Assuming deleting an OU deletes its users; it actually only removes the OU and moves users to the root.
- ▸Confusing a domain alias with a secondary domain, which affects email addressing and user sign-in.
- ▸Forgetting that suspending a user preserves data and licenses, while deleting starts a recovery window.
Question index
All User Accounts Domains And Directory questions (53)
Click any question to see the full explanation, or start a practice session above.
What is the maximum number of custom aliases a user can have?
Easy2A school district's Workspace administrator needs every staff member's directory listing to display a job title and department that are visible to all users in the domain, including on the Contacts card in Gmail. The data already exists in the district's HR system. Which action accomplishes this with the least manual effort?
Easy3You are the Workspace administrator for a company that has just acquired a smaller business. The acquired business currently uses its own Google Workspace account with the domain 'acme-parts.com'. Your leadership team wants users from 'acme-parts.com' to appear in the same Global Directory as your primary domain 'yourcompany.com' and to share Google Workspace services, but they must keep sending and receiving email using '@acme-parts.com' addresses. You have already added and verified 'acme-parts.com' as a secondary domain in your Admin console. What should you do next to meet these requirements?
Medium4A user in your Google Workspace domain has left the company. You need to immediately suspend their account to prevent access, but you may need to restore it later if they return. What should you do?
Easy5You are the Google Workspace administrator at Northwind Traders. The company has just acquired a small design studio that uses its own domain, studiobright.example. Executive leadership wants the acquired team to keep using their existing email addresses for at least six months while they transition to the corporate domain. You need to add studiobright.example to your Google Workspace account so those users can sign in and receive mail at their current addresses. What should you do first?
Medium6You are automating user creation via the Directory API. Which scope is required to create users?
Hard7An administrator needs to view all changes made to organizational units. Which report should they use?
Hard8What is the primary function of an alias address?
Medium9Which feature prevents a user from being deleted during a directory sync?
Medium10Your company uses Google Cloud Directory Sync to provision users from an on-premises Active Directory. A user who left the company was removed from Active Directory last week, but the account still appears as active in the Google Admin console after multiple sync runs. What is the most likely cause?
Hard11Where do you manage the shared contacts for your organization?
Easy12Which TWO of the following can be modified in the Admin console's 'Company Profile' section?
Medium13A user claims they cannot reset their password using the 'Forgot Password' link. What is the most likely cause?
Medium14You need to add a secondary domain to your Google Workspace account. What must you perform after adding the domain in the Admin console?
Easy15How can you prevent users from changing their profile photo?
Medium16You are seeing a 'Domain already in use' error when adding a domain. What is the most likely cause?
Hard17Which TWO of the following are true regarding the Directory API?
Medium18Your company uses Google Workspace and has a Google Cloud Directory Sync (GCDS) deployment to synchronize users from an on-premises Active Directory. A new HR policy requires that when an employee is terminated, their account must be suspended immediately and not deleted, but their mailbox data must be preserved for eDiscovery. You need to configure GCDS so that terminated employees are suspended rather than deleted. What should you do?
Medium19What is the difference between a primary domain and a secondary domain?
Easy20An organization uses Google Cloud Directory Sync (GCDS) to keep its Workspace directory aligned with an on-premises LDAP directory. The administrator must ensure that local directory attributes map correctly and that deletes in the source system do not accidentally wipe out Workspace accounts and their data, while still allowing legitimate departures to be processed. Which two configuration practices should the administrator apply? (Choose two.)
Hard21Which TWO of the following are types of domains in Google Workspace?
Medium22Which THREE of the following are components of the Directory API 'group' resource?
Hard23You want to automate user account creation based on a specific event. What is the recommended approach?
Medium24A new employee joins the company, and the administrator wants the user's mailbox to be created in the Sales organizational unit with a Google Workspace license applied automatically. Which action accomplishes this?
Easy25As a Google Workspace administrator, you need to ensure that all users in your organization are required to use two-step verification. Which setting in the Admin console controls this enforcement?
Easy26You are the Workspace administrator for a company that has a mix of full-time employees and temporary contractors. Contractors are placed in a 'Contractors' organizational unit and must not have access to Google Chat or Google Meet. You need to configure the 'Contractors' OU to disable these services while keeping all other services enabled. Which TWO of the following steps should you perform? (Choose two.)
Hard27You need to grant a user permission to manage only the 'Marketing' OU. Which administrative role do you assign?
Hard28A Google Workspace administrator is preparing to add a new secondary domain and needs to ensure that users in that domain can sign in and receive mail. Which two actions must the administrator perform after adding the domain in the Admin console? (Choose two.)
Hard29Your organisation has a primary domain, example.com, and a secondary domain, example.net. The marketing team wants all new hires to receive an address at example.net while existing staff keep their example.com addresses. You have already verified example.net and created the necessary users. What must you do so that mail sent to the new users' example.net addresses is delivered?
Medium30Which TWO of the following are common reasons for a user sync failure in GCDS?
Medium31What happens when you delete an Organizational Unit?
Medium32An administrator mistakenly deleted a user account 10 days ago. How can you restore this account?
Medium33You are the Google Workspace administrator for a company with 5,000 users. The HR department needs to update the 'Department' and 'Manager' fields for all users. They will provide a CSV file. You want to minimize manual effort and ensure the updates are applied correctly. Which method should you use?
Hard34A Google Workspace administrator needs to enforce a policy that requires all users to have a recovery email address set. The administrator wants to monitor compliance and generate a report of users missing a recovery email. What is the most efficient way to achieve this?
Hard35Which THREE actions can be performed using the Google Admin console's bulk user management tool?
Hard36Your organisation has multiple departments and you want to delegate password reset duties to a small group of team leads without giving them full administrator privileges. Each team lead should only be able to reset passwords for users in their own department's organizational unit. What is the most appropriate approach?
Medium37You need to add a custom attribute to user profiles. Where is this configured?
Medium38A new employee joins the company and needs a Google Workspace account. The administrator wants to create the account manually, assign a license, and ensure the user is placed in the correct Organizational Unit (OU) from the start. Which sequence of steps should the administrator follow?
Easy39A Google Workspace administrator needs to give a user the ability to reset passwords for other users in the Support organizational unit only, without granting broader privileges. Which role should be assigned?
Medium40A Google Workspace administrator at a company with a single primary domain wants to make a newly created OU named 'Contractors' immediately available as a target for dynamic group membership rules and shared drive access policies. A colleague suggests that the OU must be populated with at least one user before it can be referenced by policy. Which statement describes what actually happens after the OU is created in the Admin console?
Medium41A multinational company has a primary domain, example.com, and a secondary domain, example.net, in the same Google Workspace account. The administrator wants users signing in with the example.net alias to appear in the Global Directory under example.net rather than under example.com. What must the administrator configure to achieve this?
Hard42A company has a Google Workspace account with multiple domains. The administrator needs to ensure that when users sign in with their email address, they are redirected to the correct domain's login page. The company uses SAML SSO with a third-party IdP. Which setting should the administrator configure?
Hard43Which TWO of the following tasks can be performed in the Users section of the Admin console?
Easy44A new employee needs access to Google Workspace. What is the minimum action required in the Google Admin console to create the account?
Easy45Which tool would you use to sync local Active Directory users to Google Workspace?
Easy46You are the Workspace administrator at a company where every employee's mailbox must be preserved for seven years after they leave. A user in the Sales organizational unit resigns, and you need to immediately block sign-in and stop new mail from being delivered to that mailbox while keeping all existing mail intact. What should you do?
Easy47Where can an administrator force a password reset for a single user?
Easy48Which THREE of the following are aspects of the Directory API 'user' resource?
Hard49You have multiple domains in a single Google Workspace account. How can you provision users in a specific sub-domain?
Medium50You are using the Directory API to update user phone numbers. Which method should you use?
Hard51Your company has a Google Workspace domain, example.com. A new subsidiary, subsidiary.com, will use Google Workspace but must remain a separate domain in the Admin console. You have added subsidiary.com as a secondary domain and verified ownership. Users at subsidiary.com need email addresses such as alice@subsidiary.com, but their accounts must be under the same Google Workspace subscription. What should you do next?
Medium52What happens to a user's data when you suspend their account?
Medium53You are migrating users from a secondary domain to the primary domain. What is the impact on their email?
HardOther domains
All GWS-ADMIN exam domains
Frequently asked questions
- What does the User Accounts Domains And Directory domain cover on the GWS-ADMIN exam?
- Be able to navigate the Admin console to create users, move them between OUs, manage domains and aliases, and suspend or delete accounts correctly. The most important thing: know that deleting an OU never deletes its users, and suspension preserves data while deletion does not.
- How many questions are in this domain?
- This page lists all 53 User Accounts Domains And Directory questions in the GWS-ADMIN question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only User Accounts Domains And Directory questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.