Google Associate Google Workspace Administrator Practice Exams
Last updated on Oct 21,2026- Exam Code: Associate Google Workspace Administrator
- Exam Name: Associate Google Workspace Administrator
- Certification Provider: Google
- Latest update: Oct 21,2026
Your organization’s users are reporting that a large volume of legitimate emails are being misidentified as spam in Gmail. You want to troubleshoot this problem while following Google-recommended practices.
What should you do?
- A . Adjust the organization’s mail content compliance settings in the Admin console.
- B . Advise users to individually allowlist senders.
- C . Disable spam filtering for all users.
- D . Contact Google Workspace support and report a suspected system-wide spam filter malfunction.
D
Explanation:
If legitimate emails are being misidentified as spam across the organization, it suggests that there may be a broader issue with the spam filtering system. Contacting Google Workspace support to investigate and resolve the problem is the recommended approach. Disabling spam filtering or adjusting individual settings may not resolve the root cause and could potentially lead to further issues.
You work at a large organization that prohibits employees from using Google Sites. However, a task force comprised of three people from five different departments has recently been formed to work on a project assigned by the Office of the CIO. You need to allow the users in this task force to temporarily use Google Sites. You want to use the least disruptive and most efficient approach.
What should you do?
- A . Turn Google Sites access on for each of the 15 users in the task force.
- B . Create a configuration group for the task force’s 15 users. Grant Google Sites access to the group.
- C . Place the 15 task force users into a new organizational unit (OU). Turn on Google Sites access for the OU.
- D . Create an access group for the task force’s 15 users. Grant Google Sites access to the group.
C
Explanation:
Creating a new organizational unit (OU) for the task force members and turning on Google Sites access for that OU is the least disruptive and most efficient approach. It allows you to target only the users in the task force, granting them temporary access to Google Sites without impacting the rest of the organization. This solution also provides clear control over the access, which can be easily modified when the task force’s work is completed.
You are investigating a potential data breach. You need to see which devices are accessing corporate data and the applications used.
What should you do?
- A . Analyze the audit log in the Admin console for device and application activity.
- B . Analyze the security investigation tool to access device log data.
- C . Analyze the Google Workspace reporting section of the Admin console.
- D . Analyze the User Accounts section in the Google Admin console.
A
Explanation:
The audit log in the Google Admin console provides detailed information about device and application activity, which is crucial for investigating a potential data breach. You can see which devices have accessed corporate data, as well as which applications were used, giving you a comprehensive view of any unauthorized or suspicious activities. This is the most appropriate and efficient tool for this investigation.
Your organization has experienced a recent increase in unauthorized access attempts to your company’s Google Workspace instance. You need to enhance the security of user accounts while following Google-recommended practices.
What should you do?
- A . Disable password recovery options to prevent unauthorized individuals from accessing user accounts.
- B . Implement a strong password policy and enable text messages as the 2-Step Verification (2SV) using text messages.
- C . Enforce the use of physical security keys as the 2-Step Verification (2SV) method for all users.
- D . Enforce a strong password policy that requires users to include special characters, numbers, and uppercase letters.
C
Explanation:
Enforcing the use of physical security keys for 2-Step Verification (2SV) provides a highly secure method of protecting user accounts from unauthorized access. Physical security keys are one of the most robust forms of two-factor authentication because they cannot be easily phished or stolen, even if an attacker knows the user’s password. Google recommends using physical security keys as the 2SV method, as they provide strong protection against unauthorized access attempts.
A new user at your organization is unable to access Google Meet. You have verified that the user’s account is active and the correct licenses are assigned. You need to resolve the access issue.
What should you do?
- A . Check the user’s browser settings to ensure that Meet is not blocked.
- B . Instruct the user to clear their browser’s cache and cookies.
- C . Restart the user’s computer to refresh their network connection.
- D . Verify that Meet is enabled as a service for the user’s account in the Admin console.
D
Explanation:
To resolve access issues with Google Meet, it’s important to verify that Google Meet is enabled as a service for the user’s account in the Admin console. Sometimes, individual services may be disabled for specific users or organizational units, even if the user has the correct license assigned. Ensuring that Google Meet is enabled for the user’s account will grant them the necessary access to the service.
Your company distributes an internal newsletter that contains sensitive information to all employees by email. You’ve noticed unauthorized forwarding of this newsletter to external addresses, potentially leading to data leaks. To prevent this, you need to implement a solution that automatically detects and blocks such forwarding while allowing legitimate internal sharing.
What should you do?
- A . Add a banner to the newsletter that warns users that external sharing is prohibited.
- B . Create a Gmail content compliance rule that targets the internal newsletter, identifying instances of external forwarding. Configure the rule to reject the message when such forwarding is detected
- C . Develop an Apps Script project by using the Gmail API to scan sent emails for the newsletter content and external recipients. Automatically revoke access for violating users.
- D . Create a content compliance rule to modify the newsletter subject line, adding a warning against
external forwarding.
B
Explanation:
A Gmail content compliance rule allows you to specifically target the internal newsletter and automatically detect when it is forwarded to external addresses. By rejecting such messages, you can prevent unauthorized sharing of sensitive information while still permitting internal sharing. This solution is effective for enforcing data security policies without manual intervention.
An employee is leaving your company and has numerous files stored in My Drive. Their manager wants to retain access to these files. You need to offboard the departing employee’s Google Workspace account while ensuring that the manager can still access the files while following Google-recommended practices.
What should you do?
- A . Use Google Vault to establish a retention policy for the organizational unit (OU) of the departing employee. Assign the Google Archived User license.
- B . Instruct the departing employee to share their My Drive folder with the manager before leaving.
Delete the Google Workspace account on the departing employee’s last day. - C . Download the departing employee’s Drive data by using Google Takeout. Upload the data to the manager’s Drive before deleting the departing employee’s Google Workspace account.
- D . Transfer ownership of the departing employee’s files to the manager during the user deletion process.
D
Explanation:
Transferring ownership of the departing employee’s files to the manager ensures that the manager retains access to all the files, including those stored in My Drive, without requiring additional steps like downloading or sharing files. This method follows Google-recommended practices and ensures that the files remain under proper management even after the employee’s account is deleted. This process can be done efficiently during the offboarding process to ensure continuity of access.
You need to create an automated application or process that includes connectors to external data, leverages Google Sheets data, and is easily shared as a mobile application.
What should you do?
- A . Create an application by using App Engine. Connect the application to your Workspace environment
- B . Copy the external data to BigQuery. Use a Connected Sheet to interact with the data.
- C . Create an AppSheet application to connect the different data sources. Set up the mobile application.
- D . Create an automation process by using Apps Script. Run the process through Google Sheets.
C
Explanation:
AppSheet is a no-code platform that allows you to easily create mobile applications that can connect to external data sources, including Google Sheets. It is ideal for quickly building automated apps that integrate data from various sources and can be easily shared with others on mobile devices.
AppSheet provides an efficient way to create, customize, and deploy mobile applications without the need for extensive development skills.
The legal department at your organization is working on a time-critical merger and acquisition (M&A) deal. They urgently require access to specific email communications from an employee who is currently on leave. The organization’s current retention policy is set to indefinite. You need to retrieve the required emails for the legal department in a manner that ensures data privacy.
What should you do?
- A . Instruct the IT department to directly access and forward the relevant emails to the legal
department. - B . Temporarily grant the legal department access to the employee’s email account with a restricted scope that is limited to the M&A-related emails.
- C . Ask a colleague with delegate access to the employee’s mailbox to identify and forward the relevant emails to the legal department.
- D . Use Google Vault to create a matter specific to the M&A deal. Search for relevant emails within the employee’s mailbox. Export and share relevant emails with your legal department.
D
Explanation:
Using Google Vault to create a matter specific to the M&A deal allows for legal, secure, and privacy-compliant retrieval of emails. You can search for the specific emails related to the merger and acquisition, export them, and share them with the legal department without granting direct access to the employee’s mailbox. This approach ensures both data privacy and compliance with organizational policies.
Your compliance team has observed that employees at your organization are frequently resetting their passwords and is concerned about account hijacking. You need to create a solution to notify the compliance team whenever a user updates or resets their password.
What should you do?
- A . Create and enforce a new password policy for all users in your organization.
- B . Move all compliance team members into a separate organizational unit (OU). Create and enforce a new password policy for the members of this OU.
- C . Create an activity rule that is triggered by the User’s password changed event. Add compliance team members as email recipients.
- D . Create a new alert by using user log events. Check that the challenge type is “Password”, and add the compliance team as email recipients.
C
Explanation:
Creating an activity rule that triggers on the "User’s password changed" event allows you to automatically notify the compliance team whenever a user updates or resets their password. This approach is efficient because it directly ties the event to the rule and sends alerts without requiring manual monitoring or additional steps. By adding the compliance team as email recipients, you ensure they are promptly notified of any changes.