Google Associate Google Workspace Administrator Practice Exams
Last updated on Oct 21,2026- Exam Code: Associate Google Workspace Administrator
- Exam Name: Associate Google Workspace Administrator
- Certification Provider: Google
- Latest update: Oct 21,2026
An employee using a Workspace Enterprise Standard license was terminated from your organization. You need to ensure that the former employee no longer has access to their Workspace account and preserve access to the former employee’s documents for the manager and the team.
You want to minimize license cost.
What should you do?
- A . Delete the former employee’s Workspace account.
- B . Suspend former employee’s Workspace account.
- C . Reset the password of the former employee and keep their Workspace license active.
- D . Switch the license type of the former employee’s Workspace account to an Archived User license.
D
Explanation:
Switching the former employee’s account to an Archived User license ensures that their data and documents are preserved, and access is retained for the manager and team without incurring the full cost of an active Workspace license. Archived User licenses are a cost-effective way to maintain access to documents while preventing unauthorized access to the account.
Your company has recently purchased a new domain name to use for the corporate email addresses. However, you are unable to access certain features in Google Workspace because the domain is not verified. You need to verify the domain.
What should you do?
- A . Contact Google support and request manual verification.
- B . Add an MX record to your DNS zone that points to Google Workspace.
- C . Request a TXT record be added to the DNS zone by your domain registrar.
- D . Purchase a SSL certificate for your domain.
C
Explanation:
To verify a domain name with Google Workspace and gain access to all its features, you typically need to prove that you own the domain. One of the most common methods for doing this is by adding a specific TXT record to your domain’s DNS (Domain Name System) zone. Google provides this unique TXT record, and once it’s published in your DNS, Google can verify your ownership.
Here’s why option C is the correct approach and why the others are not the standard methods for domain verification in Google Workspace:
C. Request a TXT record be added to the DNS zone by your domain registrar.
Google Workspace provides a unique TXT record that you need to add to your domain’s DNS settings. This record contains a specific code that Google’s systems check for. By finding this record in your domain’s public DNS, Google can confirm that you have control over the domain and are authorized to use it with Google Workspace. You usually manage DNS records through the interface provided by your domain registrar or your DNS hosting provider.
Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation on "Verify your domain for Google Workspace" (or similar titles) explicitly outlines the different methods for domain verification. Adding a TXT record is consistently presented as a primary and recommended method. The documentation provides the exact steps:Sign in to your domain host (domain registrar).
Go to your domain’s DNS records.
Add a TXT record with the value provided by Google.
Save the TXT record.
In the Google Admin console, start the verification process. Google will then check for the TXT record.
You’ve noticed an increase in phishing emails that contain links to malicious files hosted on external Google Drives. These files often mimic legitimate documents and trick users into granting access to their accounts. You need to prevent users from accessing these malicious external Drive files, but allow them to access legitimate external files.
What should you do? (Choose two.)
- A . Enforce stricter password policies.
- B . Conduct regular security awareness training to educate users.
- C . Create a Drive trust rule that blocks all external domains except for a pre-approved list of trusted partners.
- D . Deploy advanced malware detection software on all user devices to scan and block malicious files.
E Implement two-factor authentication for all users
B, C
Explanation:
Conduct regular security awareness training to educate users: Educating users about phishing threats and safe online practices can help them recognize and avoid phishing attempts, reducing the chances of them falling for such scams.
Create a Drive trust rule that blocks all external domains except for a pre-approved list of trusted partners: By setting up a Drive trust rule to limit access to files from external domains, you can block links to malicious files hosted on untrusted external Google Drives while still allowing access to legitimate external files from trusted sources.
Your company’s sales team writes many business proposals in Google Docs. They want to streamline the proposal process by using templates. You need to create a document template with pre-populated sections that the sales team can access.
What should you do?
- A . Create the templates in Google Drive. Grant edit access to the sales team.
- B . Create the templates in Google Drive. Make a copy for each sales representative. Transfer ownership of each template to the sales representatives.
- C . Enable organization branding in the Admin console. Create the templates in Google Drive. Add the templates to default themes and templates for the entire organization.
- D . Create the templates in Google Drive and download the files as PDFs. Upload PDF files to a drive shared with your sales team.
C
Explanation:
To create document templates with pre-populated sections that the sales team can easily access and use to streamline their proposal process, the most efficient and centrally managed approach is to utilize the Google Workspace template gallery. This involves enabling organization branding (though not strictly required for basic templates, it’s often associated with organizational templates) and then adding the created templates to the default themes and templates for the entire organization or specific groups.
Here’s a breakdown of why option C is correct and why the others are not the ideal solutions:
C. Enable organization branding in the Admin console. Create the templates in Google Drive. Add the templates to default themes and templates for the entire organization.
This option leverages the built-in template gallery feature of Google Workspace. By creating the templates in Google Docs (which are stored in Google Drive) and then adding them to the organization’s default themes and templates through the Google Admin console, you make these templates easily discoverable by all users (or a specific organizational unit) when they go to create a new document from the template gallery. Enabling organization branding can help customize the look and feel, but the crucial part is adding the templates to the gallery.
Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation provides detailed instructions on "Create and manage document templates for your organization." This documentation explains how to prepare a document as a template in Google Drive and then submit it through the Admin console to the template gallery, making it available to users within the organization. Topics covered include: Submitting templates to your organization’s gallery: This process involves going to Apps > Google Workspace > Drive and Docs > Templates in the Admin console.
Setting up a custom template gallery: The documentation guides administrators on how to manage the templates that appear for their users.
Organizational units: Templates can often be made available to specific organizational units, allowing for tailored templates for different teams like the sales team.
Your company wants to minimize distractions and inappropriate content in their Google Chat spaces. You need to give trusted employees the ability to remove messages and ban users from specific Chat spaces.
What should you do?
- A . Assign the trusted employees as moderators for the relevant Chat spaces.
- B . Create a data loss prevention (DLP) rule that blocks inappropriate content from being shared
- C . Use the security investigation tool to audit and monitor Chat messages.
- D . Disable all Chat spaces except those specifically approved by management.
A
Explanation:
Assigning trusted employees as moderators for the relevant Chat spaces will give them the necessary privileges to remove messages and ban users when needed. This is the most efficient way to control inappropriate content and maintain a positive and productive environment within the spaces.
Moderators can take action to address issues directly without requiring more complex or restrictive solutions.
Per regulatory requirements, your company is required to keep the data of employees located in Germany within Europe and the data of employees located in the US within the US. The employees in Germany are in a separate organizational unit (OU) than employees in the US. You need to ensure that where employee data is stored is in compliance with the location regulations.
What should you do?
- A . Instruct employees to use Drive for desktop to keep documents on their corporate computers.
- B . Create two Groups. Assign employees into the Germany or US Group based on their location. Use Google Drive trust rules to prevent sharing between the Groups.
- C . Navigate to the Data Regions function in the Admin console. Select the Europe region for employees in Germany, and select the US region for US employees.
- D . Navigate to the Data Regions function in the Admin console. Select ‘No preference.’
C
Explanation:
Using the Data Regions function in the Google Admin console, you can specify where data is stored for different organizational units (OUs) based on their geographical location. This ensures that employee data for those in Germany is stored within Europe, while data for US employees is stored within the US, meeting the regulatory requirements for data locality. This approach automates compliance and eliminates the need for manual tracking or additional configurations.
Okay, I will carefully review the question and provide a 100% verified answer based on the official Associate Google Workspace Administrator documentation, correct any typing errors, and present it in the requested format.
Your company is undergoing a regulatory compliance audit. As part of the audit, you are required to demonstrate that you can preserve all electronic communications related to a specific project for a potential legal discovery process. You need to configure Google Vault to accomplish this goal.
What should you do?
- A . Use the security investigation report to show Vault log events.
- B . Use the search and export functionality to identify all relevant communications within the project timeframe.
- C . Create a matter and a hold on all project-related data sources such as Email. Chat, and Drive within Google Workspace.
- D . Create a custom retention policy for the project data. Ensure that the policy covers the required retention period.
C
Explanation:
Creating a matter and placing a hold on the relevant data sources ensures that all communications related to the specific project are preserved, even if users try to delete them. This will help in maintaining compliance with legal or regulatory requirements for e-discovery, and it ensures that data cannot be modified or deleted during the audit process.
Your company’s security team should be able to investigate unauthorized external file sharing. You need to ensure that the security team can use the security investigation tool and you must follow the
principle of least privilege.
What should you do?
- A . Grant the super admin role to a delegate from the security team.
- B . Create a pre-built reporting role. Assign the role to the security team alias.
- C . Share the Drive audit log with the security team.
- D . Create a custom admin role with security center privileges. Assign the role to the individual security team members.
D
Explanation:
By creating a custom admin role with security center privileges, you can ensure that the security team has the necessary access to investigate unauthorized external file sharing while adhering to the principle of least privilege. This approach provides the security team with the specific permissions they need without granting unnecessary broader privileges, such as those associated with the super admin role.
Several employees from your finance department are collaborating on a long-term, multi-phase project. You need to create a confidential group for this project as quickly as possible. You also want to minimize management overhead.
What should you do?
- A . Create a Google Group by using Google Cloud Directory Sync (GCDS) to automatically sync the members.
- B . Create a dynamic group and define the Department user attribute as a condition for membership with the value as the finance department.
- C . Create a Google Group and update the settings to allow anyone in the organization to join the group.
- D . Create a Google Group and appoint a group admin to manage the membership of this group.
B
Explanation:
A dynamic group automatically updates membership based on user attributes, such as department, ensuring that only relevant employees (e.g., those in the finance department) are added to the group. This minimizes management overhead because the membership is updated automatically, without the need for manual intervention. It also ensures that the group remains up to date as employees join or leave the department.
Your company operates several primary care clinics where employees routinely work with protected health information (PHI). You are in the process of transitioning the organization to Google Workspace from a legacy communication and collaboration system. After you sign the Business Associate Agreement (BAA), you need to ensure that data is handled in compliance with regulations when using Google Workspace.
What should you do?
- A . Implement a third-party backup service that is also compliant with Google Workspace core services.
- B . Create a label for Google Drive content to help employees identify sensitive data.
- C . Instruct the staff to not store any PHI in Google Workspace core services, including Google Drive. Docs. Sheets, and Keep.
- D . Disable integrations with third-party apps and turn off non-core Google services.
B
Explanation:
To ensure compliance with regulations when handling protected health information (PHI) in Google Workspace, creating labels for sensitive data, such as PHI, helps employees identify and manage this information properly. Labels can be used to mark files that contain sensitive data, providing an additional layer of organization and protection. This approach aligns with regulatory requirements by ensuring that employees can easily distinguish PHI from other data and apply the necessary policies and security measures.