Google-Workspace-Administrator Google Cloud Certified - Professional Google Workspace Administrator Questions and Answers

Open Admin Console > Security > Dashboard > User Reports.

Open Admin Console > Security > Dashboard > Spam Filter- Phishing.

Use Reports API to query user Gmail activity.

Open Admin Console > Reporting > Email Log Search.

Open a Google support ticket, and request a recovery of all recently deleted users.

Sign in to the Admin console as Help Desk Admin, open user management, filter for "recently deleted." and recover.

Sign in to the Admin console as Super Admin, open user management, filter for "recently deleted." and recover.

Create a matter, go to legal hold, and create a legal hold for the user accounts.

Train users to use Google Workspace’s merge contacts feature.

Enable directory contact deduplication in the Google Workspace Admin panel.

Update shared contact search rules to exclude internal users.

Create a new global directory, and delete the original.

Use the Data Export Tool to export admin audit data to your existing SIEM system

Use Apps Script and the Reports API to export admin audit data to your existing SIEM system.

Use Apps Script and the Reports API to export drive audit data to the existing SIEM system

Use the BigQuery export to send admin audit data to the existing SIEM system via custom code

Use the BigQuery export to send drive audit data to the existing SIEM system via custom code.

Create a Google Groups Collaborative Inbox.

Use App Script to design a ticketing system that marks conversation ownership.

Contract with a third-party solution, such as ServiceNow.

Create Google Tasks and assign them to receptionists to address unanswered questions.

Manually run Google Cloud Directory Sync only after performing a simulated sync.

Specify the minimum and maximum number of objects to synchronize in each configuration item.

Configure the tool to delete users only when run from the config manager.

Configure limits for the maximum number of deletions on each synchronization.

Using Vault, perform a search for the email and export the content to a standard format to provide for investigation.

Using the Message ID, contact Google Google Workspace support to recover the email, then import with Google Workspace Migration for Microsoft Outlook.

Using the Vault Audit log, perform a search for the email, export the results. then import with Google Workspace Migration for Microsoft Outlook.

Develop a cadence of regular roadmap and business reviews with your partner.

Regularly scan the admin console and keep track of any new features you identify.

Create a Feature Release alert in the Alert Center to be alerted to new functionality.

Put half of your organization on the Rapid Release Schedule to highlight differences.

Verify the NameID Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Verify the Subject attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Verify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.

Create a Google Vault matter for each user account, and share the matters to the legal admin.

Create a Google Vault matter, search for data, and run an export for the legal department.

Use the Investigation Too! to search for the data requested, and export for the legal department.

Search for the data in Gmail, and export for the legal department.

Export log data to BigQuery with custom scopes.

Use a third-party tool.

Use App Script and filter views within a Google Sheet.

Create an app using AppMaker and App Script.

Disable 2-Step Verification per organizational unit so the affected users can sign in.

Move the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.

Disable 2-Step Verification organization-wide so all users can successfully sign in.

Move the affected users into the exception group permanently so they do not have to use 2-Step Verification going forward.

Add the product's IP addresses as an approved sender.

Allowlist the IP addresses of the third-party filtering product.

Add the product's IP addresses to your organization's SPF record.

List the IP addresses of the product as an Inbound Gateway.

Use the Directory API to upload a .csv file containing the contacts.

Configure GCDS to populate a Group with external members.

Use the People API to upload a .csv file containing the contacts.

Develop a custom application to call the Domain Shared Contacts API.

Configure GCDS to synchronize shared contacts.

Use the security center to remove the messages from users' mailboxes

Use Google Vault to remove these messages from users mailboxes.

Enable a safety rule to send these types of messages to spam.

Enable a safety rule to send these types of messages to a quarantine.

Create a new content compliance rule that matches the user's outgoing messages with the group copied, and have it modify the sender to be the group address.

Add the group as an email address that can be sent from within Gmail, and verify that the user has access. They can then choose to reply from the group.

Add the user's individual account as a delegate to the group's inbox. They can then toggle between the accounts and use the Gmail interface on behalf of the group.

Set the group address to be the default sender within the group's posting policies.

Move the Senior VP to a sub-OU before enabling Marketplace Settings > “Allow Users to Install Any App from Google Workspace Marketplace.”

Confirm that the Senior VP’s OU has the following Gmail setting disabled before whitelisting the app: “Let users delegate access to their mailbox.”

Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.

Search the Google Workspace support forum for feedback about the app to include in the risk analysis report.

Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.

Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers

> choose Reject

Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

Allow external sharing of Drive content for the IT group only.

Create a Drive DLP policy that will allow sharing to only domains on an allowlist.

Use shared drives to store the content, and share only individual files externally.

Let users share files between the two companies by using the ‘Trusted Domains’ feature. Create an allowlist of the trusted domains, and choose sharing settings for the users.

Set up Azure AD and federate on-premises AD with it. Provision user accounts from Azure AD with the Google-recommended process.

Modify the GCDS configuration to use the HRIS application as the data source and complete any necessary adjustments

Export HRIS data to a CSV file every day. and build a solution to define the delta with the previous day;

import the result as a CSV file via the Admin console.

Build an application that will fetch updated data from the HRIS system via Open API. and then update

Google Workspace with the Directory API accordingly.

Service provider logout URL

Service provider ACS URL

Identity Provider URL

Service provider certificate

Remove Google Workspace license to prevent users from accessing their accounts now.

Suspend users that the organization does not wish to have access.

Add the users to the OU with all services disabled.

Use Context-Aware Access to simultaneously block access to all services for all users and allow access to all services for the allowed users.

Allow external sharing with the auditor using the ‘Trusted Domains’ feature.

Enable the ‘Visitor Sharing’ feature, and demonstrate it to the Finance team.

Use the ‘Publish’ feature in the Sheets editor to share the contents externally.

Attach the Sheet file to an email message, and send to the external auditor.

Use Google Guides to deliver ad-hoc training to all of their co-workers and reports.

Use Work Insights to gather adoption metrics and target your training exercises.

Use Reports APIs to gather adoption metrics and Gmail APIs to deliver training content directly.

Use a script to monitor Email attachment types and target users that aren't using Drive sharing.

Send an email to each sales person with the instructions on how to add the footer to their Signature.

Ensure that each sales team is in their own OU, and configure the Append Footer with the signature and footer content translated for each locale.

Ensure that each sales team is in their own OU, and configure the Append Footer with footer content.

Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.

Request the creation of a calendar resource, configure the calendar to “Auto-accept invitations that do not conflict,” and give your team “See all event details” access.

Create a secondary calendar under your account, and give your team “Make changes to events” access.

Request the creation of a calendar resource, configure the calendar to “Automatically add all invitations to this calendar,” and give your team “See only free/busy” access.

Create a secondary calendar under your account, and give your team “See only free/busy” access

In the Application Management menu, configure the whitelist of apps that Android and iOS devices are allowed to install.

In the Application Management menu, configure the whitelist of apps that Android, iOS devices, and Active Sync devices are allowed to install.

In Android Settings, ensure that “Allow non-Play Store apps from unknown sources installation” is unchecked.

In Device Management > Setup > Device Approvals menu, configure the “Requires Admin approval” option.

Implement a third-party solution that will detect presence in the room and release it if nobody appears after a few minutes.

Create a Google App Script that will inspect each room calendar for the next 12 hours, check attendees status, and send the room administrator an alert email for releasing the room if all attendees have declined but the room has not.

Set the option "Allow calendar-based room release" for all targeted rooms.

Upgrade to Google Workspace Enterprise Plus edition to benefit from additional features for automated machine learning (ML) based resources management.

Create a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.

Under Directory Settings > Contact sharing, disable the contact sharing option and wait for 24 hours to allow the settings to propagate before creating the new employee accounts.

Redesign your OU organization to have 2 child OUs for each company directly under the root. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the OU.

Create one dynamic group for each company based on a custom attribute defining the company. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the dynamic group.

Reinstall Password Sync on all domain controllers.

Reauthorize the Password Sync tool in the Google Workspace Admin Console.

Confirm that the Password Sync service is running on all domain controllers.

Reset the user's password in Active Directory.

Assign the pre-built security admin role to the security team members.

Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.

Assign the Super Admin Role to the security team members.

Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.

Mac OS

Windows

Chrome OS

iOS

Linux

Extend the legal hold on the user's email data.

Move project files to a Team Drive or transfer ownership.

Rename the account to the new user starting next week.

Delete the account, freeing up a Google Workspace License.

Assign the terminated user account an Archive User license.

Turn on external sharing with whitelisted domains, and add the external organization to the whitelist.

Provision accounts within your domain for the external users, and turn off external sharing for that Org.

Configure the Drive DLP rules to prevent the sharing of PII and PHI outside of your domain.

Create a Team Drive for this engagement, and limit the memberships and sharing settings.

In the GCDS configuration manager, update the group deletion policy setting to “don't delete Google groups not found in LDAP.”

Use the Directory API to check and update the group’s membership after the GCDS sync is completed.

Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.

In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to “delete only active Google domain users not found in LDAP.”

Bulk-upload the contact information for these users via CSV into the Google Directory.

Use the Domain Shared Contacts API to upload contact information for the acquired company's users.

Provision and license Google Workspace accounts for the acquired company's users because they will need accounts in the future.

Prepare an uploadable file to be distributed to your end users that allows them to add the acquired company’s user contact information to their personal contacts.

Modify your Marketplace Settings to block users from installing any app from the Marketplace.

Set all API services to “restricted access” and ensure that all connected apps have limited access.

Remove all client IDs and scopes from the list of domain-wide delegation API clients.

Block each connected app's access.

Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.

Immediately suspend the user's account, search for all the email messages in question, and forward to the legal team.

Immediately suspend the user's account, assign an archived user license, and export data.

Suspend the user's account, search all associated users data in Google Vault, and export the data.

Disable access to all “Other Services” in the Google Workspace Admin Console.

Use the Transfer Tool for unmanaged accounts to invite users into the domain.

Use the Data Migration Service to transfer the data to a managed account.

Open a support ticket to have Google transfer unmanaged accounts into your domain.

Navigate to “Data Protection” setting in Google Admin Console's Device management section and disable the “Allow users to copy data to personal apps” checkbox.

Disable “Open Docs in Unmanaged Apps” setting in Google Admin Console’s Device management section.

Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.

Clear the “Allow items created with managed apps to open in unmanaged apps” checkbox.

Enable Enforce Strong Password policy.

Enable Employee ID Login Challenge.

Decrease the Maximum User Session Length.

Revoke token authorizations to external applications.

Add other users as “Editors” on the Drive object, thus spreading the storage quota debt between all of them.

Manually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.

Make another user the “Owner” of the Drive objects, thus transferring the storage quota debt to them.

Perform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.

Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.