GWS-ADMIN Practice Question: Which feature prevents a user from being deleted during a directory sync?

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  OU locking

  Why it's wrong here

  There is no 'OU locking' feature in Google Workspace that protects accounts from directory sync. Accounts are protected from being deleted by Google Cloud Directory Sync through its own settings: exclusion rules that make the sync ignore matching users or organisational units, and deletion policies, such as suspending instead of deleting. The name sounds plausible, which is why it appears as a distractor.

• ✗

  Account suspension

  Why it's wrong here

  Suspending an account blocks sign-in while keeping its data, but a suspended user that is not in the LDAP source can still be deleted by the next GCDS sync if the deletion policy allows it. Suspension is the right tool for temporarily removing access, for example during leave or an investigation, not for protecting an account from synchronisation; that requires GCDS exclusion rules or deletion settings.

• ✓

  GCDS 'Do not delete' rule

  Why this is correct

  GCDS lets you control what happens to Google accounts that are not found in the LDAP directory, including rules that stop them from being deleted and exclusion rules that make the sync ignore specific users or units entirely. That protects accounts that exist only in Google, such as service accounts or external administrators. Always run a simulated sync first, because its report lists every deletion it would perform.

• ✗

  Admin role assignment

  Why it's wrong here

  Admin roles grant management privileges in the Google Admin console; they do not exempt an account from directory synchronisation. A super administrator missing from the LDAP source can still be suspended or deleted by GCDS unless excluded, which is why administrator accounts are commonly excluded from sync, so a directory change cannot remove the ability to manage the domain.

You might also like

Similar GWS-ADMIN questions

• →Your company uses Google Cloud Directory Sync to provision users from an on-premises Active Directory. A user who left t…
• →Where do you manage the shared contacts for your organization?
• →Which TWO of the following can be modified in the Admin console's 'Company Profile' section?
• →A user claims they cannot reset their password using the 'Forgot Password' link. What is the most likely cause?
• →You need to add a secondary domain to your Google Workspace account. What must you perform after adding the domain in th…