Google

Google

Question 1 of 16
29722722
A school wants assistance configuring the school's Google Admin console and associating the Chrome devices to the correct organizational units. What Chrome device enrollment option should be recommended?


✅ Google's Chrome Partner services.



Question 2 of 16
29722722
Once a school receives the acceptance email for Google Workspace for Education, what can they do?


✅ Access the Google Admin console.


Question 3 of 16
29722722
A school would like assistance with training and professional development for Google for Education. What should be recommended?


✅ Engage a Google Professional Development Partner.

Question 4 of 16
29722722
A Higher Ed instituion has separate domains for each school within the instituion, such as "law.university.edu", "eng.university.edu", and "med.university.edu". Each student body has different email policy requirements. What domain setup should you recommend?


✅ Multiple domains with a single Google Workspace for Education account.

Question 5 of 16
29722722
A school wants to enroll a Chrome device, and has followed the prompts to connect to a Wi-Fi network and completed the user agreement. On the Google account login screen, what keys are pressed for manual enrollment?


✅ Ctrl+Alt+E

Question 6 of 16
29722722
If a school has an existing domain, why is verification of domain ownership required?


✅ To ensure that the domain is not being used for a Google service without permission.

Question 7 of 16
29722722
When an IT admin submits a ticket to Google support, what should be included?


✅ The Chrome and platform version of the affected Chrome device.


Question 8 of 16
29722722
A region with multiple districts and schools wants to set up an organizational unit structure and has delegated administrators for each first-level organizational unit. Organization and control is a priority. What organizational structure should you recommend?


✅ Organization-oriented structure


Question 9 of 16
29722722
A school has turned on Google Workspace for Education core services, but the IT admin wants to prevent sharing outside of the school domain. What core service setting should the IT admin check?


✅ Drive sharing settings

Question 10 of 16
29722722
A school has decided to roll out Google for Education, and has set up and provisioned the IT staff accounts. For a successful rollout, what other activities should happen in the first phase?


✅ Profile the user community and develop plans for training, communications, marketing, and Google Guides.

Question 11 of 16
29722722
A large school district with multiple schools wants to set up an organizational unit structure that is simple to maintain. What organizational structure should you recommend?


✅ Role-oriented structure

Question 12 of 16
29722722
A district with multiple schools wants to allow specific roles to consume Chrome Education Upgrades. What user policy allows users in a specific organizational unit to enroll new Chrome OS devices?


✅ Device enrollment permission

Question 13 of 16
29722722
What domain setup option is generally not recommended for schools because it creates management overhead?


✅ Separate Google Workspace for Education accounts for multiple domains.

Question 14 of 16
29722722
A school IT admin wants to allow a group of users to manage certain service settings and devices. What admin role should the school IT admin assign?


✅ Services Admin

Question 15 of 16
29722722
A school wants to disable student access to browse the web during an exam. How should the school set up the exam with Chromebooks?


✅ Set up the exam as a single app kiosk.

Question 16 of 16
29722722
A school wants all of its teachers to have access to the "Remind: School Communication" app. What should the IT admin do?


✅ Set Chrome policies to force-install the app and pin it to the Chrome taskbar.





Question 1 of 54: You are in the Early Adopters phase of a Google Workspace deployment. Which set of users does Google recommend that you deploy in this phase?

✅ 10% of users from across all business units


Question 2 of 54: Google Workspace Migration for Microsoft Exchange (GWMME) uses a control comma-separated values (CSV) file to map legacy accounts to Google Workspace accounts. An organization yourdomain.com is migrating from Exchange where user Google Workspace addresses will remain unchanged from the Exchange environment. How should each user entry be entered into the control file?

✅ [email protected]


Explanation: The GWMME control file requires a specific format: LegacyEmailAddress, GoogleWorkspaceEmailAddress, OrganizationalUnit. Since the email addresses are unchanged, the legacy and Google Workspace addresses will be the same. The Organizational Unit (OU) is required to place the user correctly in the Google Admin console structure.
Question 3 of 54: What is Google’s maximum suggested latency for Google Meet?

✅ 400ms


Question 4 of 54: An organization has created a Google Workspace Vault default retention rule which retains all Gmail messages for all users in the domain for 30 days. There are no active custom rules. A user receives a message on January 1. The user deletes the message and empties it from Trash on January 15. What is the earliest date on which the message will no longer be searchable in Vault?

✅ February 15


Question 5 of 54: An organization has the following Vault rules configured:
-A default rule that retains messages for 5 years.
-A custom rule that retains messages with label “misc” for 3 years.
For a conversation started on 1/1/2013, if a user put the “misc” label on a single message in the conversation sent on February 1, 2013, what will the status of all messages in the conversation be on February 1, 2016?



✅ All messages up to the labelled message are deleted. All messages sent after are retained until 2018.


Question 6 of 54: A Google Workspace account is set up with a third-party Single Sign-On (SSO) solution. Which access method will require the user to enter their password stored in Google Workspace versus their SSO login credential?

✅ Google Admin console


Question 7 of 54: An organization has configured their domain to automatically cancel calendar events for deleted users in the Google Workspace Admin console. Which best describes what happens when a user account is deleted?

✅ Future events on the user's primary calendar are cancelled 21 days later. No cancellation emails are sent.


Question 8 of 54: As the administrator for your Google Workspace domain you need to investigate why one of your users didn’t receive an important message. The message was sent to them 45 days ago. What should you do?

✅ Obtain the message ID from the sender and use the Email Log Search feature to confirm the post delivery message status.


Question 9 of 54: A customer wants to disable all the Google Workspace marketplace applications that access Drive and Gmail. What is the recommended approach to disabling users from adding applications that access Drive and Gmail?

✅ Use the Google Workspace Admin console to disable all OAuth access to the selected services


Question 10 of 54: Which of the following is true when handling conflict accounts with Google Workspace customers?

✅ User’s can decide whether to allow their existing data to be added to the corporate Google Workspace tenant


Question 11 of 54: Which of the following is not a supported source for identifying users during a login challenge to Google Workspace?

✅ Google Authenticator code



Question 12 of 54: Which of the following is not available as a means of interoperability between Google Workspace and legacy platforms?

✅ Federation for XMPP standard based chat systems


Question 13 of 54: An organization's MX record points to an inbound mail gateway (gateway1) that must relay all messages through a second gateway (gateway2) before sending messages to Gmail. What are the two Google recommended settings in this architecture?

✅ Add IPs for both gateway1 and gateway2 to the Inbound gateway setting.
✅ Check "Automatically detect external IP" in the Inbound gateway configuration.

Question 14 of 54
Question: An organization is using Google Calendar Interop for Microsoft Exchange. Users are provisioned in both Google and the legacy environment. When doing lookups from a Google Workspace account, you want to ensure that free/busy status for a user comes from Exchange. Which two methods should you choose?




✅ Move the user in Google to an organizational unit (OU) with the Calendar service disabled.
✅ Delete the user's primary Google calendar.

Question 15 of 54
Question: You have developed a script that uses the Drive API to add files to Google Drive. The script exits early with a 403: Rate Limit exceeded response from the Google servers. What two steps can you take?



✅ Implement exponential back-off in your code
✅ Batch your requests.




Question 16 of 54
Question: A customer has set the Google session control expiration for 8 hours, but reports that users are not being prompted to re-authenticate as expected. What are the two possible causes of this issue?



✅ Users reporting the issue are on mobile devices which are not subject to the authentication timeout
✅ The session timeout setting on a third party SSO provider is set longer than the Google session configuration


Question 1 of 54
29722772
What is Google's recommended approach for analyzing patterns in mail flow for large organizations?


Use Google Workspace’s Big Query export functionality and use the SQL interface for analyzing patterns

Question 2 of 54
29722772
Which of the following is required In order to achieve free/busy interoperability between Google and Microsoft Exchange?

Exchange web services must be opened on port 443 for a small subset of Google’s IP blocks

Question 3 of 54
29722772
You are using Google Workspace Calendar Interop for Microsoft Exchange to share availability information between legacy and Google Workspace calendars. Which of the following must you do to allow Exchange users to see Google Calendar availability information?

Create a role account in Google Workspace to be used by Exchange to get each Google user's availability information.

Question 6 of 54
29722772
A customer with over 25,000 Windows machines wants to enforce strict control over Chrome extensions installed in their environment. What should they do?

Use Google provided group policy templates (.adm and .admx) to create a centrally controlled level of restriction

Question 7 of 54
29722772
An organization's primary mail domain is altostrat.com. They would like to set up dual delivery of mail and have chosen the subdomain apps.altostrat.com to facilitate mail routing to Google Workspace. Which action must they take?

Point the MX record for apps.altostrat.com to aspmx.l.google.com.

Question 8 of 54
29722772
You are installing Google Workspace Migration for HCL Notes (GWMHN) and want to ensure that it will run in the organization's environment. What should you do?

Sign the GWMHN templates with the migration server ID or the ID of a user who has the rights to run agents on the server.

Question 11 of 54
29722772
Which Gmail policy type can alter the inbound route of email for specific users?

Default routing

Question 12 of 54
29722772
Which option do Google Workspace administrators NOT have for enforcing second factor authentication (2SV) for their users?

Admins can enroll and enforce users in 2SV automatically

Question 13 of 54
29722772
Which three of the following actions can be configured for messages matching a content compliance rule?

Select 3 Correct Responses

Deliver with modification
Reject
Quarantine

Question 14 of 54
29722772
What is the Google-recommended SPF setting for a domain that uses Google Workspace as the primary mail system?

v=spf1 include:_spf.google.com ~all

Question 15 of 54
29722772
Which of the following is true regarding Google’s native mobile device management (MDM) platform?

Basic mode MDM is enabled by default for all Google Workspace accounts


Question 18 of 54
29722772
An organization wants to enforce policies on iOS devices. Which step must you perform before enabling iOS Sync in the Admin console?


Install and set up the Apple Push Certificate.


Question 19 of 54
29722772
Due to security requirements, an organization requires blocking access to consumer Gmail (gmail.com) while allowing enterprise Google Workspace account access (company.com). How is this accomplished?


Add a "X-GoogApps-Allowed-Domains HTTP header" header to outbound Google Workspace traffic at your network perimeter.

Question 20 of 54
29722772
A user created a Google Site in the domain altostrat.com. The user wants to make the site accessible using the URL http://myproject.altostrat.com. What should the administrator do?


Configure a web address mapping in the Admin console.

Question 21 of 54
29722772
You are migrating Exchange accounts to Google Workspace with Google Workspace Migration for Microsoft Exchange (GWMME). When must a mapping file be used?


When you need to migrate Calendars and the legacy email addresses are different from the Google Workspace addresses.

Question 22 of 54
29722772
A customer moving to Google Workspace wants to replace the current ticketing system with a Google Workspace account [email protected]. Which of the following limits is likely to cause issues with this goal?


2,000 sent messages per day

Question 25 of 54
29722772
What must an administrator ensure before using a third party mobile device management (MDM) system for Google Workspace devices?


Google advanced mode MDM must be disabled

Question 26 of 54
29722772
What is Google’s recommended network protocol for Google Meet traffic?


Unsecured UDP


Question 27 of 54
29722772
Which two types of data CANNOT be retained using Google Workspace Vault?

Select 2 Correct Responses


Calendar Entries
Off-the-record Chat conversations

Question 28 of 54
29722772
An organization, domain.com, wants to change their primary Google Workspace domain to newdomain.com. Which steps will achieve this goal?


Add newdomain.com as an additional domain in the Google Workspace Admin console of domain.com; then use the MAKE PRIMARY option to promote newdomain.com as the account's primary domain.

Question 29 of 54
29722772
An organization has provisioned all of their employees in Google Workspace and pointed their MX records to Google. They want to configure email for some users to be delivered in Gmail, while email for other users is delivered to a legacy mail system. What should they do?


Add legacy mail system users to an organizational unit and configure a Routing setting to direct mail to the legacy system.

Question 30 of 54
29722772
How can a Google Workspace administrator programmatically access a user's data without any manual authorization on the user’s part?


Grant a service account domain-wide delegation of authority

Question 32 of 54
29722772
An organization has successfully installed Password Sync in their environment. They report that not all Active Directory user passwords are syncing to Google Workspace. What should they do to resolve this problem?


Ensure that Password Sync is installed on every writable domain controller.


Question 34 of 54
29722772
A 300-person company is running Microsoft Exchange 2010. Google Workspace Migration for Microsoft Exchange (GWMME) will be used to migrate data from Exchange to Google Workspace. Which action must be taken to run GWMME?


Create a Service account and authorize its Client ID in the Google Workspace Admin console domain.


Question 36 of 54
29722772
A customer reports that a large percentage of their users received a phishing email. The customer wants to immediately remove the message from their environment. What action should they take?


Search for and remove the message from all mailboxes via the Admin Console Investigation Tool


Question 38 of 54
29722772
An organization has many administrators across different regions and wants to segment the user management by region. How is this accomplished?


Delegate administrators to specific OUs using the “User Management Admin” system role.

Question 39 of 54
29722772
What of the following is NOT required to use Endpoint Verification?


Chrome OS

Question 40 of 54
29722772
You are working in the Google Workspace Admin console. You need to block sign-in attempts from applications that do not use modern security standards, and thus are considered less secure. What type of applications should you block?


Applications that rely on username/password authentication to access an account programmatically

Question 41 of 54
29722772
An organization reports that valid email messages sent by their users are being marked as spam by several recipient domains. They ask for your help addressing this issue. What should you do?


Ensure that SPF, DKIM, and DMARC are set up correctly for their domain.

Question 42 of 54
29722772
An organization wants to deploy Google Drive File Stream but is concerned about potential implications to their network due to limited bandwidth. What is the Google recommended way to mitigate these concerns?


Use registry (Windows) and defaults (macOS) controls on specific clients to reduce requirements

Question 43 of 54
29722772
An organization with 10,000 employees has multiple Active Directory forests within their environment. When provisioning users for Google Workspace, which two actions does Google recommend when possible?

Select 2 Correct Responses

Configure a dedicated (aggregated) LDAP system for GCDS provisioning.
Consolidate all forests into a single Active Directory.

Question 45 of 54
29722772
An organization is migrating all the employees to Google Workspace except for a small, independent group of users in Antarctica. You want to include the users in Antarctica in the global address list for Google Workspace without additional licensing costs. What should you do?


Add domain shared contact records for the Antarctic users.

Question 46 of 54
29722772
Which API can you use to list, create, and modify Google Workspace users?


Admin SDK Directory API

Question 47 of 54
29722772
An organization wants to achieve optimal network performance when accessing Google Workspace. Which of the following is a Google recommended best practice for network routing?


Perform DNS lookups geographically close to users

Question 49 of 54
29722772
Which access method does NOT allow enforcement of policy controls on iOS devices by Google Workspace?


Adding an account type of “Google” through the Mail, Calendar, and Contacts menu

Question 51 of 54
29722772
When using Password Sync to synchronize passwords, how is the password sent to Google from Active Directory?


Salted SHA-512 over HTTPS

Question 52 of 54
29722772
Which two of the following are supported by Google Workspace Migration for Microsoft Exchange (GWMME)?

Select 2 Correct Responses


PST
Microsoft Exchange profile

Question 54 of 54
29722772
While using Google Cloud Directory Sync (GCDS) to provision groups, an administrator notices that GCDS creates the desired groups, but does not populate them with users. What is the most likely cause of this problem?


The administrator entered an incorrect value for the User Email Address attribute.

Question 7 of 16
29722772
Select the correct response to the customer's question: What happens if a Chrome device is not enrolled?


Policies cannot be applied and/or enforced on the device.

Question 10 of 16
29722772
A single school with the domain "school.edu" would like to set up the school domain to ensure simple management. What domain setup should you recommend?


A single Google Workspace for Education account with the primary domain.


What is the first step an educational institution must take to get started with Google for Education?


Sign up for a Google Workspace for Education account.

Question 16 of 16
29722847
A school IT admin wants to ensure that only the school's registered students, staff, and teachers can use school Chrome devices. What device policy should be disabled?



Guest mode