Courseiva

GWS-ADMIN · domain

User Accounts Domains And Directory

This domain covers Google Workspace directory fundamentals: creating and managing users, organizational units, domains and aliases, and admin roles. Questions are scenario-based, asking you to choose the correct Admin console path or predict the effect of an action such as deleting an OU, renaming a domain, or suspending a user.

53 questions14 easy22 medium17 hard

Focused practice

Practice User Accounts Domains And Directory questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about User Accounts Domains And Directory

Be able to navigate the Admin console to create users, move them between OUs, manage domains and aliases, and suspend or delete accounts correctly. The most important thing: know that deleting an OU never deletes its users, and suspension preserves data while deletion does not.

Managing users, OUs, and groups in the Google Admin console directory

Primary vs secondary domains, domain aliases, and user alias email addresses

Suspending, deleting, and restoring users, plus data retention via Google Vault

Admin roles, delegated administration, and password reset and recovery options

Watch out for

Common User Accounts Domains And Directory exam traps

  • ▸Assuming deleting an OU deletes its users; it actually only removes the OU and moves users to the root.
  • ▸Confusing a domain alias with a secondary domain, which affects email addressing and user sign-in.
  • ▸Forgetting that suspending a user preserves data and licenses, while deleting starts a recovery window.

Question index

All User Accounts Domains And Directory questions (53)

Click any question to see the full explanation, or start a practice session above.

1

What is the maximum number of custom aliases a user can have?

Easy
2

A school district's Workspace administrator needs every staff member's directory listing to display a job title and department that are visible to all users in the domain, including on the Contacts card in Gmail. The data already exists in the district's HR system. Which action accomplishes this with the least manual effort?

Easy
3

You are the Workspace administrator for a company that has just acquired a smaller business. The acquired business currently uses its own Google Workspace account with the domain 'acme-parts.com'. Your leadership team wants users from 'acme-parts.com' to appear in the same Global Directory as your primary domain 'yourcompany.com' and to share Google Workspace services, but they must keep sending and receiving email using '@acme-parts.com' addresses. You have already added and verified 'acme-parts.com' as a secondary domain in your Admin console. What should you do next to meet these requirements?

Medium
4

A user in your Google Workspace domain has left the company. You need to immediately suspend their account to prevent access, but you may need to restore it later if they return. What should you do?

Easy
5

You are the Google Workspace administrator at Northwind Traders. The company has just acquired a small design studio that uses its own domain, studiobright.example. Executive leadership wants the acquired team to keep using their existing email addresses for at least six months while they transition to the corporate domain. You need to add studiobright.example to your Google Workspace account so those users can sign in and receive mail at their current addresses. What should you do first?

Medium
6

You are automating user creation via the Directory API. Which scope is required to create users?

Hard
7

An administrator needs to view all changes made to organizational units. Which report should they use?

Hard
8

What is the primary function of an alias address?

Medium
9

Which feature prevents a user from being deleted during a directory sync?

Medium
10

Your company uses Google Cloud Directory Sync to provision users from an on-premises Active Directory. A user who left the company was removed from Active Directory last week, but the account still appears as active in the Google Admin console after multiple sync runs. What is the most likely cause?

Hard
11

Where do you manage the shared contacts for your organization?

Easy
12

Which TWO of the following can be modified in the Admin console's 'Company Profile' section?

Medium
13

A user claims they cannot reset their password using the 'Forgot Password' link. What is the most likely cause?

Medium
14

You need to add a secondary domain to your Google Workspace account. What must you perform after adding the domain in the Admin console?

Easy
15

How can you prevent users from changing their profile photo?

Medium
16

You are seeing a 'Domain already in use' error when adding a domain. What is the most likely cause?

Hard
17

Which TWO of the following are true regarding the Directory API?

Medium
18

Your company uses Google Workspace and has a Google Cloud Directory Sync (GCDS) deployment to synchronize users from an on-premises Active Directory. A new HR policy requires that when an employee is terminated, their account must be suspended immediately and not deleted, but their mailbox data must be preserved for eDiscovery. You need to configure GCDS so that terminated employees are suspended rather than deleted. What should you do?

Medium
19

What is the difference between a primary domain and a secondary domain?

Easy
20

An organization uses Google Cloud Directory Sync (GCDS) to keep its Workspace directory aligned with an on-premises LDAP directory. The administrator must ensure that local directory attributes map correctly and that deletes in the source system do not accidentally wipe out Workspace accounts and their data, while still allowing legitimate departures to be processed. Which two configuration practices should the administrator apply? (Choose two.)

Hard
21

Which TWO of the following are types of domains in Google Workspace?

Medium
22

Which THREE of the following are components of the Directory API 'group' resource?

Hard
23

You want to automate user account creation based on a specific event. What is the recommended approach?

Medium
24

A new employee joins the company, and the administrator wants the user's mailbox to be created in the Sales organizational unit with a Google Workspace license applied automatically. Which action accomplishes this?

Easy
25

As a Google Workspace administrator, you need to ensure that all users in your organization are required to use two-step verification. Which setting in the Admin console controls this enforcement?

Easy
26

You are the Workspace administrator for a company that has a mix of full-time employees and temporary contractors. Contractors are placed in a 'Contractors' organizational unit and must not have access to Google Chat or Google Meet. You need to configure the 'Contractors' OU to disable these services while keeping all other services enabled. Which TWO of the following steps should you perform? (Choose two.)

Hard
27

You need to grant a user permission to manage only the 'Marketing' OU. Which administrative role do you assign?

Hard
28

A Google Workspace administrator is preparing to add a new secondary domain and needs to ensure that users in that domain can sign in and receive mail. Which two actions must the administrator perform after adding the domain in the Admin console? (Choose two.)

Hard
29

Your organisation has a primary domain, example.com, and a secondary domain, example.net. The marketing team wants all new hires to receive an address at example.net while existing staff keep their example.com addresses. You have already verified example.net and created the necessary users. What must you do so that mail sent to the new users' example.net addresses is delivered?

Medium
30

Which TWO of the following are common reasons for a user sync failure in GCDS?

Medium
31

What happens when you delete an Organizational Unit?

Medium
32

An administrator mistakenly deleted a user account 10 days ago. How can you restore this account?

Medium
33

You are the Google Workspace administrator for a company with 5,000 users. The HR department needs to update the 'Department' and 'Manager' fields for all users. They will provide a CSV file. You want to minimize manual effort and ensure the updates are applied correctly. Which method should you use?

Hard
34

A Google Workspace administrator needs to enforce a policy that requires all users to have a recovery email address set. The administrator wants to monitor compliance and generate a report of users missing a recovery email. What is the most efficient way to achieve this?

Hard
35

Which THREE actions can be performed using the Google Admin console's bulk user management tool?

Hard
36

Your organisation has multiple departments and you want to delegate password reset duties to a small group of team leads without giving them full administrator privileges. Each team lead should only be able to reset passwords for users in their own department's organizational unit. What is the most appropriate approach?

Medium
37

You need to add a custom attribute to user profiles. Where is this configured?

Medium
38

A new employee joins the company and needs a Google Workspace account. The administrator wants to create the account manually, assign a license, and ensure the user is placed in the correct Organizational Unit (OU) from the start. Which sequence of steps should the administrator follow?

Easy
39

A Google Workspace administrator needs to give a user the ability to reset passwords for other users in the Support organizational unit only, without granting broader privileges. Which role should be assigned?

Medium
40

A Google Workspace administrator at a company with a single primary domain wants to make a newly created OU named 'Contractors' immediately available as a target for dynamic group membership rules and shared drive access policies. A colleague suggests that the OU must be populated with at least one user before it can be referenced by policy. Which statement describes what actually happens after the OU is created in the Admin console?

Medium
41

A multinational company has a primary domain, example.com, and a secondary domain, example.net, in the same Google Workspace account. The administrator wants users signing in with the example.net alias to appear in the Global Directory under example.net rather than under example.com. What must the administrator configure to achieve this?

Hard
42

A company has a Google Workspace account with multiple domains. The administrator needs to ensure that when users sign in with their email address, they are redirected to the correct domain's login page. The company uses SAML SSO with a third-party IdP. Which setting should the administrator configure?

Hard
43

Which TWO of the following tasks can be performed in the Users section of the Admin console?

Easy
44

A new employee needs access to Google Workspace. What is the minimum action required in the Google Admin console to create the account?

Easy
45

Which tool would you use to sync local Active Directory users to Google Workspace?

Easy
46

You are the Workspace administrator at a company where every employee's mailbox must be preserved for seven years after they leave. A user in the Sales organizational unit resigns, and you need to immediately block sign-in and stop new mail from being delivered to that mailbox while keeping all existing mail intact. What should you do?

Easy
47

Where can an administrator force a password reset for a single user?

Easy
48

Which THREE of the following are aspects of the Directory API 'user' resource?

Hard
49

You have multiple domains in a single Google Workspace account. How can you provision users in a specific sub-domain?

Medium
50

You are using the Directory API to update user phone numbers. Which method should you use?

Hard
51

Your company has a Google Workspace domain, example.com. A new subsidiary, subsidiary.com, will use Google Workspace but must remain a separate domain in the Admin console. You have added subsidiary.com as a secondary domain and verified ownership. Users at subsidiary.com need email addresses such as alice@subsidiary.com, but their accounts must be under the same Google Workspace subscription. What should you do next?

Medium
52

What happens to a user's data when you suspend their account?

Medium
53

You are migrating users from a secondary domain to the primary domain. What is the impact on their email?

Hard

Frequently asked questions

What does the User Accounts Domains And Directory domain cover on the GWS-ADMIN exam?
Be able to navigate the Admin console to create users, move them between OUs, manage domains and aliases, and suspend or delete accounts correctly. The most important thing: know that deleting an OU never deletes its users, and suspension preserves data while deletion does not.
How many questions are in this domain?
This page lists all 53 User Accounts Domains And Directory questions in the GWS-ADMIN question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only User Accounts Domains And Directory questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
Google Cloud Associate Google Workspace Administrator (GWS-ADMIN) User Accounts Domains And Directory Practice Questions