Associate Google Workspace Administrator 시험 - Google실제시험문제와 답 - 73문항

Question No : 1

You work at a large organization that prohibits employees from using Google Sites. However, a task force comprised of three people from five different departments has recently been formed to work on a project assigned by the Office of the CIO. You need to allow the users in this task force to temporarily use Google Sites. You want to use the least disruptive and most efficient approach.
What should you do?

A.Turn Google Sites access on for each of the 15 users in the task force.
B.Create a configuration group for the task force's 15 users. Grant Google Sites access to the group.
C.Place the 15 task force users into a new organizational unit (OU). Turn on Google Sites access for the O
D.Create an access group for the task force's 15 users. Grant Google Sites access to the group.

정답:
Explanation:
Creating a new organizational unit (OU) for the task force members and turning on Google Sites access for that OU is the least disruptive and most efficient approach. It allows you to target only the users in the task force, granting them temporary access to Google Sites without impacting the rest of the organization. This solution also provides clear control over the access, which can be easily modified when the task force’s work is completed.

Question No : 2

A user in your organization received a spam email that they reported for further investigation. You need to find out more details and the scope of this incident as quickly as possible.
What should you do?

A.Conduct a Vault search to find this email and identify if additional users were affected.
B.Conduct a search to find all emails sent by the sender by using the Gmail AP
C.Conduct an Email reports search to find this email and all of the email's recipients.
D.Conduct a search in the security investigation tool to find this email, and identify whether additional users were affected.

정답:
Explanation:
The security investigation tool is specifically designed for investigating security incidents like spam and phishing emails. It allows you to search for emails, review their details, and determine the scope of the incident, including identifying whether other users were affected. This tool is the most appropriate and efficient way to respond to the incident.

Question No : 3

Your company’s help desk is receiving technical support tickets from employees who report that messages from known external contacts are being sent to the spam label in Gmail. You need to correct the issue and ensure delivery of legitimate emails without introducing additional risk as soon as possible.
What should you do?

A.Ask employees to select the messages in Gmail that are being delivered to spam and mark them as Not spam.
B.Contact the external senders, and tell them to authenticate their sent mail by using domain-based message authentication, reporting, and conformance (DMARC).
C.Turn off more aggressive spam filtering in spam policies that are applied to the users’ organizational unit and add the senders’ mail system IP addresses to the email allowlist.
D.Create an address list of approved senders so messages from these users bypass Gmail’s spam filters and recipients can decide whether they are spam or not.

정답:
Explanation:
Asking employees to mark legitimate emails as "Not spam" helps train Gmail’s spam filter to correctly identify these senders as trusted. This is a quick and effective way to correct the issue without introducing any additional risk or changes to the email filtering settings. Over time, Gmail will learn to recognize these senders as legitimate, reducing the likelihood of their messages being misclassified as spam in the future.

Question No : 4

You are configuring Chrome browser security policies for your organization. These policies must restrict certain Chrome apps and extensions.
You need to ensure that these policies are applied on the devices regardless of which user logs into the device.
What should you do?

A.Configure the allowed list of apps in the Devices page in the apps and extensions settings.
B.Configure the Chrome user setting to require users to sign in to use Chrome apps and extensions.
C.Configure the Policy Precedence to override the domain-wide policy applied for apps and extensions.
D.Require 2SV for user logins.

정답:
Explanation:
To ensure that Chrome apps and extension policies are applied regardless of which user logs into the device, you should configure the allowed list of apps in the Devices section of the apps and extensions settings. This policy applies at the device level, ensuring that the restrictions are enforced for any user who logs into that device, providing consistent security across the organization.

Question No : 5

The names and capacities of several conference rooms have been updated. You need to use the most efficient way to update these details.
What should you do?

A.Export the resource list to a CSV file, make the changes, and re-import the updated file.
B.Edit each resource in the Google Admin console.
C.Add the modified rooms as new resources. Tell employees not to use old rooms.
D.Delete the existing resources and recreate the resources with the updated information.

정답:
Explanation:
Exporting the resource list to a CSV file, making the necessary updates, and then re-importing the file is the most efficient method for updating multiple conference rooms at once. This approach allows you to make bulk updates quickly without needing to edit each resource individually or delete and recreate rooms. It also ensures that the updated information is applied to all affected rooms at once.

Question No : 6

Multiple users in your organization are reporting that Calendar invitations sent from a specific department are not being received. You verified that the invitations are being sent and there are no error messages in the sender’s logs. You want to troubleshoot the issue.
What should you do?

A.Analyze the message headers of the sent invitations by using the Google Admin Toolbox to identify any delivery issues.
B.Verify that the senders in the specific department have the necessary permissions to share their calendars externally and send invitations outside of the organization.
C.Disable and re-enable the Calendar service for the affected users to refresh their connection.
D.Check the affected users’ Calendar settings to confirm whether they have accidentally blocked invitations from the specific department.

정답:
Explanation:
Using the Google Admin Toolbox to analyze the message headers of the sent invitations helps you identify if there are any issues with the delivery of the invitations, such as misrouted messages or issues with email delivery to the affected users. This approach will give you detailed information on what might be causing the issue, even if no error messages appear in the sender's logs.

Question No : 7

Your compliance team has observed that employees at your organization are frequently resetting their passwords and is concerned about account hijacking. You need to create a solution to notify the compliance team whenever a user updates or resets their password.
What should you do?

A.Create and enforce a new password policy for all users in your organization.
B.Move all compliance team members into a separate organizational unit (OU). Create and enforce a new password policy for the members of this O
C.Create an activity rule that is triggered by the User’s password changed event. Add compliance team members as email recipients.
D.Create a new alert by using user log events. Check that the challenge type is “Password”, and add the compliance team as email recipients.

정답:
Explanation:
Creating an activity rule that triggers on the "User’s password changed" event allows you to automatically notify the compliance team whenever a user updates or resets their password. This approach is efficient because it directly ties the event to the rule and sends alerts without requiring manual monitoring or additional steps. By adding the compliance team as email recipients, you ensure they are promptly notified of any changes.

Question No : 8

Your organization is migrating their current on-premises email solution to Google Workspace. You need to ensure that emails sent to your domain are correctly routed to Gmail.
What should you do?

A.Change the Mail Exchange (MX) records in your current email domain’s DNS settings to point to Google’s mail servers.
B.Set up email forwarding from your on-premises email provider to Gmail.
C.Create a content compliance rule to filter and route incoming emails.
D.Configure SPF, DKIM, and DMARC records in your current email domain’s DNS settings.

정답:
Explanation:
To ensure that emails sent to your domain are correctly routed to Gmail, you need to update the Mail Exchange (MX) records in your domain's DNS settings to point to Google's mail servers. This is a critical step in the migration process, as it ensures that all incoming email traffic is directed to Google Workspace after the switch.

Question No : 9

You are migrating your organization’s email to Google Workspace. Your organization uses the terramearth.com email domain. You need to configure Google Workspace to receive emails sent to terramearth.com.
What should you do?

A.Add terramearth.com as a primary, secondary, or alias domain in Google Workspace. Update the Mail Exchange (MX) records with your domain registrar to direct mail flow to Google’s mail servers.
B.Establish a Transport Layer Security (TLS) connection between your company’s existing mail servers and Google’s mail servers
C.Configure an email address in Google Workspace to capture emails sent to unverified domains, including terramearth.com.
D.Create a domain alias for terramearth.com in Google Workspace. Configure email forwarding to redirect emails to the new Google Workspace accounts.

정답:
Explanation:
To receive emails for your domain (terramearth.com) in Google Workspace, you need to add the domain to Google Workspace as either a primary, secondary, or alias domain, depending on your organization's requirements. After adding the domain, you must update the Mail Exchange (MX) records at your domain registrar to point to Google’s mail servers. This step is essential to ensure that emails are correctly routed to Google Workspace.

Question No : 10

You work for a healthcare provider that uses an external medical billing company to manage patient records and invoices. Your organization’s employees need to share patient documents with the billing company’s employees for processing. You need to configure access so the medical billing company’s employees can view and edit the documents, but they cannot delete the documents.
What should you do?

A.Create a shared drive that is managed by your organization's employees. Grant Contributor access to the billing company's staff.
B.Create a shared drive. Grant Content Manager access to your organization's employees and the billing company.
C.Create a group, and add the employees from your organization and the billing company. Create a shared folder on Google Drive. Grant Editor access to the group
D.Restrict access for the medical billing company's employees by using Data Loss Prevention (DLP) policies.

정답:
Explanation:
Creating a shared drive and granting Contributor access to the billing company’s staff allows them to view and edit documents, but not delete them. This is the most suitable approach because it ensures that only your organization's employees manage the overall shared drive, while still allowing external users to collaborate on documents without compromising their integrity by preventing deletion. The shared drive structure also offers better control over document permissions compared to shared folders.

Question No : 11

The innovation team at your organization has a dedicated room with prototype equipment. You need to make the room bookable, add the equipment, and ensure that there are no booking conflicts. Only the innovation team and the sales directors can access this room.
What should you do?

A.Create a separate Google Calendar resource for the room. Manually manage booking requests from both teams.
B.Create a Google Group for the innovation team and another Google Group for sales directors. Share the room's calendar with both groups.
C.Create a Google Calendar event for the room. Share the event with the innovation team and sales directors.
D.Edit the Google Calendar settings for the room resource. Adjust the permission settings so only the innovation team and sales director group can view and book time on this calendar.

정답:
Explanation:
By creating a dedicated Google Calendar resource for the room and adjusting its permission settings, you can ensure that only the innovation team and sales directors have access to book the room. This approach allows for centralized management of room bookings while preventing conflicts, as Google Calendar will automatically handle scheduling and prevent double-bookings.

Question No : 12

An executive at your organization asked you to give their executive administrator access to their Workspace account. You need to ensure that this executive administrator can manage emails in the executive’s account. You need to maintain security and privacy of the executive’s account.
What should you do?

A.Assist the executive in setting up email forwarding to their executive administrator.
B.Instruct the executive to share their password with their executive administrator.
C.Create a Google Group, and add all executive administrators. Enable delegated access to the Group.
D.Grant delegated access to the executive's Gmail account, and assign access to their executive administrator in Gmail settings.

정답:
Explanation:
Granting delegated access allows the executive administrator to manage the executive’s emails without requiring access to the executive’s password. This solution ensures security and privacy by limiting the permissions to email management only, while keeping the executive’s account secure. The executive administrator will be able to send, read, and delete emails on behalf of the executive, but they won’t have access to other aspects of the account.

Question No : 13

You are designing a group structure for your company that will be used to grant access to a specific shared drive. You need this solution to automatically add and remove employees based on their job role.
What should you do?

A.Create a security group. Add all employees with the desired job role. Grant the security group access to the shared drive.
B.Create a distribution list. Add all employees with the desired job role. Grant the distribution list access to the shared drive.
C.Create a dynamic group. Set the membership criteria to the desired job role. Grant the dynamic group access to the shared drive.
D.Create a configuration group. Add users on an exception basis. Grant the configuration group access to the shared drive.

정답:
Explanation:
A dynamic group automatically manages its membership based on user attributes, such as job role. This approach ensures that employees are automatically added or removed from the group based on their role, minimizing manual effort and ensuring that the group always reflects the current team composition. Granting this dynamic group access to the shared drive ensures that the right users have the appropriate permissions without requiring constant manual updates.

Question No : 14

Users at your company are reporting that they are not receiving some emails in their corporate Gmail account. You have checked the Google Workspace Status Dashboard and you found no service disruptions. You need to identify the root cause of the problem and resolve the mail delivery issues.
What should you do? (Choose two.)

A.Use Email Log Search (ELS) to identify specific delivery failures.
B.Verify whether the organization’s Mail Exchange (MX) records are correctly configured.
C.Check the users’ spam folders to determine whether emails are being misdirected.
D.Investigate the Gmail log events for error messages or unusual patterns.
E.Check the senders’ IP addresses in the inbound mail gateway.

정답:
Explanation:
Use Email Log Search (ELS): ELS allows you to trace email delivery and identify issues, such as undelivered or bounced messages. This is an essential tool for identifying the root cause of mail delivery issues.
Verify whether the organization’s Mail Exchange (MX) records are correctly configured: Incorrect MX records could prevent emails from being delivered to the organization's Gmail accounts. It's important to verify that these records are set up properly to ensure smooth email delivery.

Question No : 15

Your company’s security team should be able to investigate unauthorized external file sharing. You need to ensure that the security team can use the security investigation tool and you must follow the principle of least privilege.
What should you do?

A.Grant the super admin role to a delegate from the security team.
B.Create a pre-built reporting role. Assign the role to the security team alias.
C.Share the Drive audit log with the security team.
D.Create a custom admin role with security center privileges. Assign the role to the individual security team members.

정답:
Explanation:
By creating a custom admin role with security center privileges, you can ensure that the security team has the necessary access to investigate unauthorized external file sharing while adhering to the principle of least privilege. This approach provides the security team with the specific permissions they need without granting unnecessary broader privileges, such as those associated with the super admin role.

Google Associate Google Workspace Administrator 시험