Google Associate Google Workspace Administrator Practice Exams
Last updated on Oct 22,2026- Exam Code: Associate Google Workspace Administrator
- Exam Name: Associate Google Workspace Administrator
- Certification Provider: Google
- Latest update: Oct 22,2026
A user is experiencing intermittent issues accessing their Gmail inbox. Sometimes their Gmail loads slowly, and other times the user encounters error messages that haven’t been documented. You need to effectively troubleshoot this recurring problem.
What should you do?
- A . Check the Google Workspace Status Dashboard for any reported service disruptions.
- B . Instruct the user to generate a HAR file the next time they experience slowness or an error.
- C . Instruct the user to try to access Gmail from another device or network to see if the issue persists.
- D . Instruct the user to clear their browser cache and cookies.
B
Explanation:
A HAR file (HTTP Archive) records detailed information about the user’s network activity, including HTTP requests and responses. This file can help diagnose issues with Gmail loading slowly or errors occurring, especially when they are intermittent. By generating a HAR file, you can provide valuable data for troubleshooting the issue and pinpoint any underlying network or browser-related issues.
You are configuring email for your company’s Google Workspace account. The company wants to prevent certain types of files from being sent or received as email attachments in the simplest and most cost-effective way.
What should you do?
- A . Adjust the maximum message size limit to prevent large files from being sent or received.
- B . Enable the Security Sandbox in Gmail to automatically quarantine emails with suspicious attachments.
- C . Scan all incoming and outgoing emails for malicious attachments by using an industry standard third-party email security solution.
- D . Configure an attachment compliance rule in Gmail settings to block specific file types.
B
Explanation:
Configuring an attachment compliance rule in Gmail allows you to specifically block certain types of files from being sent or received as email attachments. This approach is simple and cost-effective because it leverages Google Workspace’s built-in functionality without requiring third-party solutions or advanced configurations. You can easily specify which file types to block, ensuring that your organization is protected from undesirable attachments.
Your organization is increasingly concerned about its environmental impact. You want to assess the environmental impact of using Google Workspace services.
Which report should you use?
- A . Carbon footprint report
- B . Google Environmental Report
- C . Apps Monthly Uptime report
- D . Accounts report
B
Explanation:
To assess the environmental impact of using Google Workspace services, you should refer to the Google Environmental Report. Google publishes comprehensive reports detailing its environmental efforts, including the energy efficiency of its data centers, its use of renewable energy, and its overall carbon footprint, which includes the impact of services like Google Workspace.
Here’s why option B is the correct choice and why the others are not relevant to assessing the overall
environmental impact of using Google Workspace:
B. Google Environmental Report
Google regularly publishes detailed environmental reports that cover various aspects of its sustainability initiatives, including its progress towards using renewable energy, its efforts to improve energy efficiency in its operations (which power Google Workspace), and its overall carbon footprint. These reports provide insights into the environmental impact associated with using Google services.
Associate Google Workspace Administrator topics guides or documents reference: While there might not be a specific "Google Workspace Environmental Impact Report" as a standalone document within the Admin console, Google’s overarching "Environmental Report" (often found on Google’s sustainability or environmental responsibility websites) encompasses the infrastructure and practices that support all Google services, including Google Workspace. Administrators looking for this information would be directed to these publicly available Google reports.
Your company has purchased Gemini licenses for a subset of employees. You need to ensure that only users in the marketing and sales departments have access to Gemini features by using the most efficient approach.
What should you do?
- A . Create a script to assign a Gemini license to new users if they are in marketing or sales. Run the script daily.
- B . Create an organizational unit (OU) for marketing and sales. Assign the Gemini licenses to that OU, and enable Gemini for that OU only.
- C . Assign Gemini licenses to each user in the marketing and sales departments.
- D . Enable Gemini for the entire organization. Instruct users in other departments not to use Gemini.
B
Explanation:
Creating separate organizational units (OUs) for marketing and sales allows you to apply the Gemini licenses to only those departments. By enabling Gemini for just that OU, you ensure that only the employees in marketing and sales have access to Gemini features, ensuring an efficient and scalable solution. This avoids the need for manual assignment or unnecessary instructions to users in other departments.
Users at your company are reporting that they are not receiving some emails in their corporate Gmail account. You have checked the Google Workspace Status Dashboard and you found no service disruptions. You need to identify the root cause of the problem and resolve the mail delivery issues.
What should you do? (Choose two.)
- A . Use Email Log Search (ELS) to identify specific delivery failures.
- B . Verify whether the organization’s Mail Exchange (MX) records are correctly configured.
- C . Check the users’ spam folders to determine whether emails are being misdirected.
- D . Investigate the Gmail log events for error messages or unusual patterns.
- E . Check the senders’ IP addresses in the inbound mail gateway.
A, B
Explanation:
Use Email Log Search (ELS): ELS allows you to trace email delivery and identify issues, such as undelivered or bounced messages. This is an essential tool for identifying the root cause of mail delivery issues.
Verify whether the organization’s Mail Exchange (MX) records are correctly configured: Incorrect MX records could prevent emails from being delivered to the organization’s Gmail accounts. It’s important to verify that these records are set up properly to ensure smooth email delivery.
Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company’s human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future.
What should you do?
- A . Search the sender’s email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.
- B . Search for the sender’s email address by using the security investigation tool. Mark the messages as phishing. Add the sender’s email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
- C . Collect a list of users who received the messages. Search the recipients’ email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender’s email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.
- D . Search for the sender’s email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.
B
Explanation:
The security investigation tool in Google Workspace allows you to identify the impacted users and messages. By marking the messages as phishing, you acknowledge their malicious nature, helping to protect the users. Adding the sender’s email address to the Blocked senders list ensures that future messages from this sender will be automatically blocked, preventing recurrence of similar incidents.
Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization’s email address and their email address with the sub-agency domain name.
What should you do?
Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization’s email address and their email address with the sub-agency domain name.
What should you do?
- A . Redirect the acquired domain to Google’s MX records and add the account as a “send as” address.
- B . Set up the acquired agency as a secondary domain from the Manage domains page.
- C . Set up the acquired agency as a user alias domain from the Manage domains page.
- D . Set up the acquired agency as a secondary domain and swap it to the primary domain.
C
Explanation:
Setting up the acquired agency as a user alias domain allows users to have their new organization’s
email address while still being able to send and receive emails using their previous email address with the sub-agency domain. This approach efficiently ensures they can use both email addresses without requiring additional configuration for separate accounts.
Your company has a globally distributed remote work team. You want to ensure all team members adhere to the company’s data security policies and only access authorized systems based on their location and role.
What should you do?
- A . Create and enforce data loss prevention (DLP) rules to control data sharing.
- B . Set up and mandate the use of a company-wide VPN for all remote access.
- C . Implement two-factor authentication for all remote team members.
- D . Configure access control policies with conditional access.
D
Explanation:
To ensure that a globally distributed remote work team adheres to data security policies and only accesses authorized systems based on their location and role, you should configure access control policies with conditional access. Conditional access allows you to define rules that grant or block access to resources based on various factors, including the user’s location, the device they are using, their role, and the application they are trying to access.
Here’s why option D is the most comprehensive solution for the stated requirements and why the
others address only parts of the problem:
D. Configure access control policies with conditional access.
Conditional access is a security framework that evaluates multiple signals before granting access to resources. By implementing conditional access policies, you can: Control access based on location: Restrict access to certain systems or data based on the geographic location of the user.
Control access based on role: Ensure that only users with specific roles have access to certain applications or data.
Enforce device compliance: Require users to access resources only from company-managed or compliant devices.
Implement multi-factor authentication (MFA): Require additional verification steps based on the context of the access attempt.
Conditional access provides a granular and dynamic way to enforce security policies based on the specific context of each access request, aligning with the goal of allowing access only to authorized systems based on location and role while maintaining data security.
Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin Help documentation on "Context-Aware Access" (which is Google’s implementation of conditional access) explains how to set up policies based on user attributes (like group membership/role), device security status, and network location. This documentation details how to create access levels and assign them to applications based on specific conditions, ensuring that access is granted only when the requirements are met.
A user accessing sensitive data is experiencing repeated issues with accessing certain files in Google Drive from their laptop by using the Chrome browser. When you contact Google support, the support representative asks to review an HTTP archive file recording (HAR). You need to share logs with Google support without compromising data privacy.
What should you do?
- A . Open the HAR file in a text editor and delete sensitive information. Upload the HAR file to Google Drive and share the file only with the Google support representative
- B . Ask the Google support representative for access to a Google Drive folder used by the Google support team. Upload the HAR file.
- C . Share your screen with the Google support representative so they can view the file without having a copy of the file.
- D . Upload the HAR file to Google Drive and share the file with the Google support representative.
A
Explanation:
The HAR (HTTP Archive) file can contain sensitive information, such as URLs, request headers, cookies, or other data that could expose personal or confidential information. To ensure privacy and security, you should review the HAR file, remove any sensitive information manually using a text editor, and then upload the file to Google Drive for sharing with the Google support representative. This approach allows you to provide the necessary logs for troubleshooting without compromising data privacy.
You need to ensure that data owned by former employees remains available in Google Vault. You want to use the most cost-effective solution.
What should you do?
- A . Migrate the former employees’ Gmail to their manager(s) by using the data migration service during the deletion process. Transfer the former employees’ Google Drive files to a new owner.
- B . Change the Google account passwords of the former employees.
- C . Suspend the former employees’ Google accounts. Create an organizational unit (OU). Move the former employees into that OU.
- D . Assign an Archived User license to the former employees’ Google accounts.
C
Explanation:
Suspending the accounts of former employees while moving them to a dedicated organizational unit (OU) ensures that their data remains in Google Vault and accessible without the need for additional licenses. This is a cost-effective solution because suspending the account keeps the data intact but prevents the employees from accessing their accounts.