Associate Google Workspace Administrator 시험 - Google실제시험문제와 답 - 73문항

Question No : 1

The innovation team at your organization has a dedicated room with prototype equipment. You need to make the room bookable, add the equipment, and ensure that there are no booking conflicts. Only the innovation team and the sales directors can access this room.
What should you do?

A.Create a separate Google Calendar resource for the room. Manually manage booking requests from both teams.
B.Create a Google Group for the innovation team and another Google Group for sales directors. Share the room's calendar with both groups.
C.Create a Google Calendar event for the room. Share the event with the innovation team and sales directors.
D.Edit the Google Calendar settings for the room resource. Adjust the permission settings so only the innovation team and sales director group can view and book time on this calendar.

정답:
Explanation:
By creating a dedicated Google Calendar resource for the room and adjusting its permission settings, you can ensure that only the innovation team and sales directors have access to book the room. This approach allows for centralized management of room bookings while preventing conflicts, as Google Calendar will automatically handle scheduling and prevent double-bookings.

Question No : 2

An executive at your organization asked you to give their executive administrator access to their Workspace account. You need to ensure that this executive administrator can manage emails in the executive’s account. You need to maintain security and privacy of the executive’s account.
What should you do?

A.Assist the executive in setting up email forwarding to their executive administrator.
B.Instruct the executive to share their password with their executive administrator.
C.Create a Google Group, and add all executive administrators. Enable delegated access to the Group.
D.Grant delegated access to the executive's Gmail account, and assign access to their executive administrator in Gmail settings.

정답:
Explanation:
Granting delegated access allows the executive administrator to manage the executive’s emails without requiring access to the executive’s password. This solution ensures security and privacy by limiting the permissions to email management only, while keeping the executive’s account secure. The executive administrator will be able to send, read, and delete emails on behalf of the executive, but they won’t have access to other aspects of the account.

Question No : 3

You are designing a group structure for your company that will be used to grant access to a specific shared drive. You need this solution to automatically add and remove employees based on their job role.
What should you do?

A.Create a security group. Add all employees with the desired job role. Grant the security group access to the shared drive.
B.Create a distribution list. Add all employees with the desired job role. Grant the distribution list access to the shared drive.
C.Create a dynamic group. Set the membership criteria to the desired job role. Grant the dynamic group access to the shared drive.
D.Create a configuration group. Add users on an exception basis. Grant the configuration group access to the shared drive.

정답:
Explanation:
A dynamic group automatically manages its membership based on user attributes, such as job role. This approach ensures that employees are automatically added or removed from the group based on their role, minimizing manual effort and ensuring that the group always reflects the current team composition. Granting this dynamic group access to the shared drive ensures that the right users have the appropriate permissions without requiring constant manual updates.

Question No : 4

Users at your company are reporting that they are not receiving some emails in their corporate Gmail account. You have checked the Google Workspace Status Dashboard and you found no service disruptions. You need to identify the root cause of the problem and resolve the mail delivery issues.
What should you do? (Choose two.)

A.Use Email Log Search (ELS) to identify specific delivery failures.
B.Verify whether the organization’s Mail Exchange (MX) records are correctly configured.
C.Check the users’ spam folders to determine whether emails are being misdirected.
D.Investigate the Gmail log events for error messages or unusual patterns.
E.Check the senders’ IP addresses in the inbound mail gateway.

정답:
Explanation:
Use Email Log Search (ELS): ELS allows you to trace email delivery and identify issues, such as undelivered or bounced messages. This is an essential tool for identifying the root cause of mail delivery issues.
Verify whether the organization’s Mail Exchange (MX) records are correctly configured: Incorrect MX records could prevent emails from being delivered to the organization's Gmail accounts. It's important to verify that these records are set up properly to ensure smooth email delivery.

Question No : 5

Your company’s security team should be able to investigate unauthorized external file sharing. You need to ensure that the security team can use the security investigation tool and you must follow the
principle of least privilege.
What should you do?

A.Grant the super admin role to a delegate from the security team.
B.Create a pre-built reporting role. Assign the role to the security team alias.
C.Share the Drive audit log with the security team.
D.Create a custom admin role with security center privileges. Assign the role to the individual security team members.

정답:
Explanation:
By creating a custom admin role with security center privileges, you can ensure that the security team has the necessary access to investigate unauthorized external file sharing while adhering to the principle of least privilege. This approach provides the security team with the specific permissions they need without granting unnecessary broader privileges, such as those associated with the super admin role.

Question No : 6

The current data storage limit for the sales organizational unit (OU) at your company is set at 10GB per user. A subset of sales representatives in that OU need 100GB of storage across shared services. You need to increase the storage for only the subset of sales representatives by using the least disruptive approach and the fewest configuration steps.
What should you do?

A.Move the subset of users to a sub-OU, and assign a 100GB storage limit to that sub-O
B.Instruct the subset of users to store their documents in a Shared Drive with a 100GB limit.
C.Change the storage limit of the sales OU to 100G
D.Create a configuration group, and add the subset of users to that group. Set the group storage limit to 100G

정답:
Explanation:
By moving the subset of sales representatives to a sub-organizational unit (OU) and assigning a 100GB storage limit to that sub-OU, you can efficiently increase the storage for those users without affecting the rest of the sales team. This approach allows you to target the specific users that require more storage, maintaining minimal disruption and configuration steps.

Question No : 7

Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization’s email address and their email address with the sub-agency domain name.
What should you do?
Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization’s email address and their email address with the sub-agency domain name.
What should you do?

A.Redirect the acquired domain to Google’s MX records and add the account as a “send as” address.
B.Set up the acquired agency as a secondary domain from the Manage domains page.
C.Set up the acquired agency as a user alias domain from the Manage domains page.
D.Set up the acquired agency as a secondary domain and swap it to the primary domain.

정답:
Explanation:
Setting up the acquired agency as a user alias domain allows users to have their new organization’s
email address while still being able to send and receive emails using their previous email address with the sub-agency domain. This approach efficiently ensures they can use both email addresses without requiring additional configuration for separate accounts.

Question No : 8

Your company wants to minimize distractions and inappropriate content in their Google Chat spaces. You need to give trusted employees the ability to remove messages and ban users from specific Chat spaces.
What should you do?

A.Assign the trusted employees as moderators for the relevant Chat spaces.
B.Create a data loss prevention (DLP) rule that blocks inappropriate content from being shared
C.Use the security investigation tool to audit and monitor Chat messages.
D.Disable all Chat spaces except those specifically approved by management.

정답:
Explanation:
Assigning trusted employees as moderators for the relevant Chat spaces will give them the necessary privileges to remove messages and ban users when needed. This is the most efficient way to control inappropriate content and maintain a positive and productive environment within the spaces.
Moderators can take action to address issues directly without requiring more complex or restrictive solutions.

Question No : 9

Your organization has a Shared Drive with 150 users organized as a group. All users of the group need to be able to add and edit files, but the ability to move, delete, and share content must be limited to a single user. You need to configure the shared drive to meet these requirements efficiently.
What should you do?
Your organization has a Shared Drive with 150 users organized as a group. All users of the group need to be able to add and edit files, but the ability to move, delete, and share content must be limited to a single user. You need to configure the shared drive to meet these requirements efficiently.
What should you do?

A.Create a folder inside the shared drive. Share the files with the group by using the share function.
B.Create a folder inside the shared drive. Share the folder link with the group.
C.In the Admin console, assign Contributor access for the shared drive to each user. Assign Content Manager access for the shared drive to the single user.
D.In the Admin console, assign Contributor access for the shared drive to the group. Assign Content Manager access for the shared drive to the single user.

정답:
Explanation:
By assigning Contributor access to the group, all 150 users will be able to add and edit files in the shared drive. Assigning Content Manager access to the single user ensures that only that person has the ability to move, delete, and share content within the shared drive. This approach efficiently meets the requirement of limiting certain administrative privileges while allowing the group to collaborate on content.

Question No : 10

You are configuring email for your company’s Google Workspace account. The company wants to prevent certain types of files from being sent or received as email attachments in the simplest and most cost-effective way.
What should you do?

A.Adjust the maximum message size limit to prevent large files from being sent or received.
B.Enable the Security Sandbox in Gmail to automatically quarantine emails with suspicious attachments.
C.Scan all incoming and outgoing emails for malicious attachments by using an industry standard third-party email security solution.
D.Configure an attachment compliance rule in Gmail settings to block specific file types.

정답:
Explanation:
Configuring an attachment compliance rule in Gmail allows you to specifically block certain types of files from being sent or received as email attachments. This approach is simple and cost-effective because it leverages Google Workspace's built-in functionality without requiring third-party solutions or advanced configurations. You can easily specify which file types to block, ensuring that your organization is protected from undesirable attachments.

Question No : 11

Your organization uses live-streaming to host large Google Meet meetings. You need to limit the participation to affiliated Google Workspace domains by using the Admin console.
What should you do?

A.Add the Trusted Workspace domain names in the Stream dialog box.
B.Turn off live streaming to Youtube.
C.Add participants to an organizational unit (OU). Turn on live streaming.
D.Turn on in-house live streaming. Invite users from affiliated domains.

정답:
Explanation:
By organizing participants into an organizational unit (OU) in the Admin console, you can control access to live streaming and ensure that only users from affiliated Google Workspace domains are allowed to participate in the live-streamed meetings. Turning on live streaming within this context will ensure that the meeting is restricted to the appropriate participants from the specified domains.

Question No : 12

Your organization's employees frequently collaborate with external clients and vendors by using Google Meet. There are active instances of unsupervised meetings within your organization that do not have a host, and unsupervised meetings that continue after an event has completed. You want to end all meetings that are being used inappropriately as quickly as possible.
What should you do?

A.End all unsupervised meetings by using the Google Meet APIs.
B.Enable Host Management for Google Meet, and train internal host employees how to end meetings for everyone.
C.Turn off Google Meet in the Admin console for your organization. Turn Google Meet back on after two minutes.
D.Identify and end all unsupervised meetings by using the security investigation tool.

정답:
Explanation:
Using the Google Meet APIs allows you to programmatically end all unsupervised meetings quickly. This approach is the most effective for managing unsupervised meetings in real-time, especially if there are multiple such meetings happening across the organization. It provides a centralized method to monitor and take action on these meetings, ensuring security and preventing misuse.

Question No : 13

An employee using a Workspace Enterprise Standard license was terminated from your organization. You need to ensure that the former employee no longer has access to their Workspace account and preserve access to the former employee’s documents for the manager and the team.
You want to minimize license cost.
What should you do?

A.Delete the former employee's Workspace account.
B.Suspend former employee's Workspace account.
C.Reset the password of the former employee and keep their Workspace license active.
D.Switch the license type of the former employee's Workspace account to an Archived User license.

정답:
Explanation:
Switching the former employee’s account to an Archived User license ensures that their data and documents are preserved, and access is retained for the manager and team without incurring the full cost of an active Workspace license. Archived User licenses are a cost-effective way to maintain access to documents while preventing unauthorized access to the account.

Question No : 14

Your organization is concerned about unauthorized access attempts. You want to implement a security measure that makes users change their password if there are twenty or more failed login attempts within one hour. You want to use the most effective and efficient approach.
What should you do?

A.Set up a Chrome action rule to restrict users from defined ChromeOS actions after twenty failed password attempts.
B.Create an activity rule for user log events, define a time period and threshold, and select an Action for the rule to force a password change.
C.Create an activity rule for live-state data sources that meets the required time period and threshold to identify users who need to change their password.
D.Enable email alerts to notify users that they need to change their password.

정답:
Explanation:
Creating an activity rule for user log events allows you to monitor failed login attempts within a specific time period (such as one hour) and set a threshold (like twenty attempts). This rule can automatically trigger an action, such as forcing a password change, when the defined threshold is met. This is the most effective and efficient approach to addressing unauthorized access attempts while ensuring that security measures are enforced without manual intervention.

Question No : 15

Your organization needs an approval application for purchases where a user can enter information on the purchase required and then submit it for management approval. You need to suggest a solution to create the application that must be available on both the web and mobile devices. Your organization does not have software developers or the budget to hire a third party.
What should you do?

A.Suggest that the organization develop an application internally with a database, a backend service for data retrieval, and a frontend service for the application's user interface.
B.Suggest that the organization continue to approve requests manually until budget is available to use a third-party application provider.
C.Suggest the organization use AppSheet to create the application.
D.Suggest that the organization use AppScript to create forms linked to a Google Sheet to store the purchase data.

정답:
Explanation:
AppSheet is a no-code platform that allows users to create custom applications without the need for software development skills. It is capable of building applications that can be used both on the web and mobile devices. AppSheet would allow the organization to create the approval application efficiently, meeting the requirements of the purchase process, and would be a cost-effective solution
that does not require hiring developers or using a third-party application provider.

Google Associate Google Workspace Administrator 시험