1
MCQeasy
What is the maximum number of custom aliases a user can have?
A.30
B.10
C.50
D.Unlimited
AnswerA
This is the official limit for aliases per user.
Why this answer
Google allows up to 30 aliases per user.
40 questions · User Accounts Domains And Directory · All types, answers revealed
What is the maximum number of custom aliases a user can have?
This is the official limit for aliases per user.
Why this answer
Google allows up to 30 aliases per user.
Which TWO of the following steps are required to offboard a user and protect company data?
This ensures critical data is retained.
Why this answer
Offboarding involves transferring ownership of Drive data and potentially revoking access to devices/apps.
You are automating user creation via the Directory API. Which scope is required to create users?
This is the specific scope for managing user directory resources.
Why this answer
The admin.directory.user scope is required for CRUD operations on user objects.
An administrator needs to view all changes made to organizational units. Which report should they use?
The Admin audit log tracks all administrative actions in the console.
Why this answer
The Admin Audit log records all configuration changes within the Google Admin console.
What is the primary function of an alias address?
Aliases allow users to receive mail at multiple addresses in one account.
Why this answer
An alias is an additional email address for an existing user that routes mail to the same inbox.
Which feature prevents a user from being deleted during a directory sync?
This prevents accidental deletion via sync.
Why this answer
The 'Do not delete' flag in GCDS prevents the sync process from removing accounts that don't match the source directory.
Where do you manage the shared contacts for your organization?
This is where directory sharing and shared contacts are configured.
Why this answer
Shared contacts are managed in the Directory settings of the Admin console.
Which TWO of the following can be modified in the Admin console's 'Company Profile' section?
This is a standard company profile field.
Why this answer
The company profile section manages organization-wide details like the company name and support contact information.
A user claims they cannot reset their password using the 'Forgot Password' link. What is the most likely cause?
This setting controls access to the self-service password tool.
Why this answer
If 'Allow users to reset their passwords' is disabled in the Security settings, they cannot use the self-service flow.
You have enabled 'Google+ ' for your organization, but some users cannot see it. What is the most likely cause?
If the service is off for their OU, they cannot use it.
Why this answer
Service visibility is controlled at the OU level; ensure the service is 'ON' for that specific OU.
You need to add a secondary domain to your Google Workspace account. What must you perform after adding the domain in the Admin console?
Verification via TXT or CNAME record is a prerequisite for domain use.
Why this answer
Verification is mandatory to prove domain ownership via DNS records.
How can you prevent users from changing their profile photo?
This setting allows admins to restrict photo and other profile edits.
Why this answer
Directory profile settings allow admins to restrict which profile details users can modify.
You are seeing a 'Domain already in use' error when adding a domain. What is the most likely cause?
Google enforces domain exclusivity per workspace instance.
Why this answer
A domain can only be registered in one Google Workspace account at a time; it must be removed from the other instance first.
Which TWO of the following are true regarding the Directory API?
OAuth 2.0 is the standard for API security.
Why this answer
The Directory API uses OAuth 2.0 for authentication and requires specific scopes to function.
What is the difference between a primary domain and a secondary domain?
Primary defines the account foundation and initial login.
Why this answer
The primary domain is the identity foundation of the Workspace account, used for initial setup and service naming.
Which TWO of the following are types of domains in Google Workspace?
This is an additional domain added to the account.
Why this answer
Google Workspace recognizes primary domains and secondary domains as types of managed domains.
Which THREE of the following are components of the Directory API 'group' resource?
The name is a required field.
Why this answer
The group resource includes the group email, name, and description as standard fields.
You want to automate user account creation based on a specific event. What is the recommended approach?
Service accounts provide secure, automated access to the API.
Why this answer
Google Apps Script or the Directory API via a webhook/event-driven architecture is the standard method.
Which THREE of the following are benefits of using Organizational Units (OUs)?
Service customization is a core use of OUs.
Why this answer
OUs allow you to group users to apply different service settings, security policies, and mobile management settings.
You need to bulk upload 500 users using a CSV file. What is the required format for the CSV header row?
These are the mandatory fields for bulk user creation.
Why this answer
The Google Admin console bulk upload tool requires specific headers like First Name, Last Name, and Email Address to process the file.
Which THREE of the following settings are inherited by child OUs from the parent OU?
Mobile settings are inherited.
Why this answer
Inheritance applies to most Google Workspace settings, including service status, mobile management, and security policies.
You need to export a list of all users and their license status. What is the best method?
The 'Download users' button generates a CSV with license info.
Why this answer
The User report in the Admin console allows exporting user data to Google Sheets.
A user in the 'Sales' OU is not receiving policy updates applied to that OU. What is the most likely cause?
If inheritance is disabled, the OU stops receiving policies from its parent.
Why this answer
Inheritance is the default behavior; if it is broken, child OUs do not receive parent policies.
You need to grant a user permission to manage only the 'Marketing' OU. Which administrative role do you assign?
You can create a role and scope it to a specific OU.
Why this answer
Custom Admin roles allow granular control over OU access.
Which TWO of the following are common reasons for a user sync failure in GCDS?
If the query fails to find users, no sync happens.
Why this answer
Common sync issues include misconfigured LDAP queries and invalid OU mappings in the GCDS configuration.
What happens when you delete an Organizational Unit?
Google prevents deletion of non-empty OUs.
Why this answer
Deleting an OU requires moving all users and sub-OUs out of it first.
An administrator mistakenly deleted a user account 10 days ago. How can you restore this account?
The Restore User tool allows restoration within the 20-day window.
Why this answer
Deleted users can be restored within 20 days via the Admin console.
Which THREE actions can be performed using the Google Admin console's bulk user management tool?
Bulk suspension is supported.
Why this answer
The bulk upload tool allows creating new users, updating existing user information, and suspending/unsuspending multiple users via CSV.
You need to add a custom attribute to user profiles. Where is this configured?
This is the path to define custom user schema fields.
Why this answer
Custom attributes are managed under Directory > Users > More > Manage custom attributes.
Which TWO of the following tasks can be performed in the Users section of the Admin console?
Group membership is managed from the user view.
Why this answer
The Users section is the central hub for creating, managing, and monitoring user accounts.
Which TWO of the following are valid ways to verify domain ownership in Google Workspace?
This is the most common verification method.
Why this answer
Domain verification can be done by adding a TXT record or a CNAME record to the domain's DNS settings.
A new employee needs access to Google Workspace. What is the minimum action required in the Google Admin console to create the account?
This is the standard procedure for provisioning a new user.
Why this answer
Creating a user in the Admin console requires defining a primary email address and assigning a license for access.
Which tool would you use to sync local Active Directory users to Google Workspace?
GCDS keeps Google Directory in sync with local AD.
Why this answer
Google Cloud Directory Sync (GCDS) is the standard tool for one-way synchronization from AD to Google.
You want to restrict which users can sign in to Google Workspace based on IP address. Where do you configure this?
This allows defining allowed IP ranges for login.
Why this answer
Network-based sign-in restrictions are configured in the Security > Authentication section.
Where can an administrator force a password reset for a single user?
This is the correct path for a specific user reset.
Why this answer
You can initiate a password reset directly from the user's profile page in the Admin console.
Which THREE of the following are aspects of the Directory API 'user' resource?
The 'suspended' boolean is a standard property.
Why this answer
The user resource includes primary email, name, and suspension status as standard fields.
You have multiple domains in a single Google Workspace account. How can you provision users in a specific sub-domain?
The Admin console allows choosing any verified domain during user creation.
Why this answer
During user creation, you can select the domain from the dropdown menu of verified domains.
You are using the Directory API to update user phone numbers. Which method should you use?
PATCH is used for partial updates to resources.
Why this answer
The 'patch' method allows updating specific fields without needing to send the entire user resource.
What happens to a user's data when you suspend their account?
Suspension is a temporary lock on access, preserving all data.
Why this answer
Suspension keeps data intact and accessible to the admin, but the user cannot log in.
You are migrating users from a secondary domain to the primary domain. What is the impact on their email?
Renaming automatically adds the old address as an alias.
Why this answer
Changing a primary domain email requires renaming the user, which creates an alias of the old address.
Ready to test yourself?
Try a timed practice session using only User Accounts Domains And Directory questions.