Google Associate Google Workspace Administrator Practice Exams
Last updated on Oct 21,2026- Exam Code: Associate Google Workspace Administrator
- Exam Name: Associate Google Workspace Administrator
- Certification Provider: Google
- Latest update: Oct 21,2026
Your company’s legal department has issued a litigation hold that requires you to preserve all data related to a specific project. You need to ensure that all data for this project, including emails, documents, and chats, are preserved indefinitely and cannot be deleted by users.
What should you do?
- A . Create a hold in Google Vault that includes all users and data sources associated with the project.
- B . Assign an Archived User license to all users involved in the project.
- C . Set up a retention rule in Google Vault that retains all data from Gmail and Drive indefinitely.
- D . Export all project related data from Google Workspace and store the data in a separate, secure location.
A
Explanation:
To preserve all data related to the project, including emails, documents, and chats, and to prevent it from being deleted by users, you should create a hold in Google Vault. A hold ensures that data is preserved indefinitely, regardless of user actions, and applies to the users and data sources (such as Gmail, Drive, and Chats) associated with the project. This is the most efficient and compliant way to meet the litigation hold requirements.
Your organization is migrating their current on-premises email solution to Google Workspace. You need to ensure that emails sent to your domain are correctly routed to Gmail.
What should you do?
- A . Change the Mail Exchange (MX) records in your current email domain’s DNS settings to point to Google’s mail servers.
- B . Set up email forwarding from your on-premises email provider to Gmail.
- C . Create a content compliance rule to filter and route incoming emails.
- D . Configure SPF, DKIM, and DMARC records in your current email domain’s DNS settings.
A
Explanation:
To ensure that emails sent to your domain are correctly routed to Gmail, you need to update the Mail Exchange (MX) records in your domain’s DNS settings to point to Google’s mail servers. This is a critical step in the migration process, as it ensures that all incoming email traffic is directed to Google Workspace after the switch.
Today your company signed up for Google Workspace Business Starter with an existing domain name. You want to add team members and manage their access to email and other services. However, you are unable to create new user accounts or change user settings. You need to fix this problem.
What should you do?
- A . Run the Transfer tool to bring unmanaged users to your Workspace account.
- B . Check domain ownership in the DNS settings.
- C . Wait 24 hours after signing up for the features to become active.
- D . Upgrade to a Google Workspace Enterprise edition.
B
Explanation:
To manage users and settings in Google Workspace, you must verify domain ownership. If the domain is not verified, you won’t be able to create new user accounts or modify user settings. Checking the DNS settings and completing the domain verification process will resolve the issue and allow you to manage users and services in Google Workspace.
Your company wants to enable single sign-on (SSO) for its employees to access a newly acquired cloud-based marketing platform. The marketing platform vendor has confirmed SAML 2.0 compatibility and provided the necessary metadata. You need to streamline user access and centralize authentication through Google Workspace.
What should you do?
- A . Request an API key from the marketing platform vendor for SAML integration.
- B . Enable two-factor authentication for all users to enhance security before implementing SSO.
- C . Instruct employees to log in to the marketing platform using the Sign In with Google functionality.
- D . Create a new SAML application in the Google Admin console.
D
Explanation:
To enable single sign-on (SSO) through Google Workspace, you need to create a new SAML application in the Google Admin console. This allows users to authenticate centrally through Google Workspace when accessing the marketing platform, leveraging SAML 2.0 compatibility. You can then upload the metadata provided by the marketing platform vendor to complete the integration. This approach ensures streamlined access and centralized authentication for your employees.
Your organization handles a significant amount of sensitive customer data and must follow strict industry regulations. To meet an upcoming compliance deadline, you need to quickly implement a solution that automatically classifies files stored in Google Drive based on the content of files.
What should you do?
- A . Create data loss prevention (DLP) rules for Drive. Configure the rules to apply Drive labels based on content.
- B . Apply Drive labels based on content. Use Google Vault to create retention rules based on Drive labels, ensuring that data is kept for the required duration.
- C . Implement a third-party data governance tool that integrates with Drive and provides advanced classification capabilities.
- D . Add users into organizational units (OUs). Configure default file classification in Drive for the desired OUs.
A
Explanation:
Data loss prevention (DLP) rules in Google Workspace allow you to automatically classify and label files in Google Drive based on their content, such as identifying sensitive customer data. This ensures compliance by applying the appropriate classification to files as they are stored, allowing you to quickly meet the compliance deadline while automating the classification process based on predefined criteria.
A department at your company wants access to the latest AI-powered features in Google Workspace. You know that Gemini offers advanced capabilities and you need to provide the department with immediate access to Gemini’s features while retaining control over its deployment to ensure that corporate data is not available for human review.
What should you do?
- A . Enable Gemini for the department’s organizational unit and assign Gemini licenses to users in the department.
- B . Monitor Gemini adoption through the administrator console and wait for wider user adoption before assigning licenses.
- C . Enable Gemini for non-licensed users in that department so they have immediate access to the free service.
- D . Enable Alpha features for the organization and assign Gemini licenses to all users.
A
Explanation:
To provide a specific department with immediate access to Gemini’s features in Google Workspace while maintaining control and ensuring corporate data privacy, you need to enable Gemini for that department’s organizational unit and assign the necessary licenses to the users within that OU. This approach allows for targeted deployment and ensures that the features are used within the governed Google Workspace environment.
Here’s why option A is correct and why the others are not the appropriate solutions:
Your organization is about to conduct its biannual risk assessment. You need to help identify security risks by quickly reviewing all security settings for Gmail, Drive, and Calendar.
What should you do?
- A . In the reporting section of the Admin console, review the Gmail, Drive, and Calendar reports.
- B . In the alert center, review all of the alerts.
- C . In each individual organizational unit (OU), review the security settings.
- D . In the Google Admin console, review the security health page.
D
Explanation:
The security health page in the Google Admin console provides an overview of security settings and highlights potential risks across various services, including Gmail, Drive, and Calendar. This page offers a consolidated view of the security posture of your organization, making it the most efficient option for quickly identifying security risks in preparation for a risk assessment.
An executive at your organization asked you to give their executive administrator access to their Workspace account. You need to ensure that this executive administrator can manage emails in the executive’s account. You need to maintain security and privacy of the executive’s account.
What should you do?
- A . Assist the executive in setting up email forwarding to their executive administrator.
- B . Instruct the executive to share their password with their executive administrator.
- C . Create a Google Group, and add all executive administrators. Enable delegated access to the Group.
- D . Grant delegated access to the executive’s Gmail account, and assign access to their executive administrator in Gmail settings.
D
Explanation:
Granting delegated access allows the executive administrator to manage the executive’s emails without requiring access to the executive’s password. This solution ensures security and privacy by limiting the permissions to email management only, while keeping the executive’s account secure. The executive administrator will be able to send, read, and delete emails on behalf of the executive, but they won’t have access to other aspects of the account.
External sharing at your company is only permitted for the sales and marketing department. Engineering is not allowed to share externally. You need to configure the sharing settings to comply with this policy.
What should you do?
- A . Use a data loss prevention (DLP) solution to control external sharing based on user groups.
- B . Create separate shared drives for each department with different external sharing settings.
- C . Create organizational units (OUs) for each department. Configure different external sharing settings for each OU.
- D . Configure Drive trust rules to restrict the engineering department from sharing externally.
C
Explanation:
By creating separate organizational units (OUs) for each department, you can apply different external sharing settings based on the department’s requirements. For example, you can configure the sales
and marketing department’s OU to allow external sharing, while configuring the engineering department’s OU to restrict external sharing. This approach allows you to enforce departmental policies efficiently without impacting other departments.
Your company handles sensitive client data and needs to maintain a high level of security to comply with strict industry regulations. You need to allow your company’s security team to investigate potential security breaches by using the security investigation tool in the Google Admin console.
What should you do?
- A . Create an activity rule that triggers email notifications to the security team whenever a high-risk security event occurs.
- B . Assign the User Management Admin role to the security team.
- C . Assign the super admin role to the security team
- D . Create an administrator role with Security Center access. Assign the role to the security team.
D
Explanation:
To allow the security team to investigate potential security breaches using the security investigation tool, you should create a custom administrator role with Security Center access. This role will provide the security team with the necessary permissions to access and use the security investigation tool without granting them unnecessary permissions, such as those associated with User Management or Super Admin roles. This approach ensures both security and compliance with industry regulations.