Google Google Workspace Administrator Practice Exams
Last updated on Oct 21,2026- Exam Code: Google Workspace Administrator
- Exam Name: Professional Google Workspace Administrator
- Certification Provider: Google
- Latest update: Oct 21,2026
You have implemented a data loss prevention (DLP) policy for a specific finance organizational unit. You want to apply the same security policy to a shared drive owned by the finance department in the most efficient manner.
What should you do?
- A . In the Admin console sharing settings, select the finance organizational unit and deselect Allow users outside the domain to access files in shared drives
- B . Assign the Shared Drive to the finance organizational unit
- C . Create a new DLP policy for shared drive users
- D . Change the scope of the policy to apply to all in the domain
Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password.
What steps should you take to troubleshoot this issue?
- A . Reinstall Password Sync on all domain controllers.
- B . Reauthorize the Password Sync tool in the Google Workspace Admin Console.
- C . Confirm that the Password Sync service is running on all domain controllers.
- D . Reset the user’s password in Active Directory.
The nature of your organization’s business makes your users susceptible to malicious email attachments.
How should you implement a scan of all incoming email attachments?
- A . Configure a safety rule to protect against encrypted attachments from untrusted senders
- B . Configure a safety rule to protect against attachments with scripts from untrusted senders.
- C . In the security sandbox section, enable virtual execution of attachments for (he targeted OU
- D . In the security sandbox section, enable virtual execution of attachments for the entire organization.
A user does not follow their sign-in pattern and signs In from an unusual location As an admin, what should you do in response to this alert for this user during this investigation?
- A . Add Two Factor Authentication to the Domain
- B . First suspend the account and then investigate
- C . Enhance your security alerts for tracking sign-in patterns
- D . Investigate the account for unauthorized activity in the Login and Security Audit Log
As a Google Workspace administrator for your organization, you are tasked with identifying how users are reporting their messages―whether spam, not spam, or phishing―for a specific time period.
How do you find this information?
- A . Open Admin Console > Security > Dashboard > User Reports.
- B . Open Admin Console > Security > Dashboard > Spam Filter- Phishing.
- C . Use Reports API to query user Gmail activity.
- D . Open Admin Console > Reporting > Email Log Search.
You work at a large global holding firm with multiple companies that are united under one Google Workspace deployment. You must ensure that employees can only access documents at the company in which they are employed.
What should you do?
- A . Create a User group for each company and change Google Drive sharing settings to block external sharing
- B . Create an organizational unit (OU) for each company and disable file sharing.
- C . Set up data loss prevention (DLP) rules to prevent specific documents from being shared
- D . Set up Google Drive trust rules to prevent access to documents from individual companies
Your company’s compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company’s account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.
Which combination of attributes will meet this objective?
- A . Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.
- B . Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject
- C . Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
- D . Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
An employee at your company does not need access to their Workspace account while they are on leave for a year When they return you need to ensure they have access to their account and that all their data and current emails remain intact Also their shared documents must be available to other users You must accomplish this goal in the most cost-effective way.
What should you do?
- A . Assign an Archive User license
- B . Suspend their account in the Admin console
- C . Delete the user after copying their emails and reassigning their documents to their manager
- D . Remove the user license in the Admin console
Your cyber security team has requested that all email destined for external domains be scanned for credit card numbers, and if found, the email must be encrypted using your cloud-based third-party encryption provider. You are responsible for configuring to meet this request.
What should you do?
- A . Create a content compliance rule on outbound mail and internal-sending mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.
- B . Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check “Encrypt message if not encrypted”.
- C . Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and add a custom header that your third-party encryption provider can scan for and encrypt.
- D . Create a content compliance rule on outbound mail using the predefined rule for credit card numbers, and check “Change route” to send to your third-party encryption provider to encrypt.
Your company recently migrated to Google Workspace and wants to deploy a commonly used third-party app to all of finance. Your OU structure in Google Workspace is broken down by department. You need to ensure that the correct users get this app.
What should you do?
- A . For the Finance OU, enable the third-party app in SAML apps.
- B . For the Finance OU, enable the third-party app in Marketplace Apps.
- C . At the root level, disable the third-party app. For the Finance OU, allow users to install any application from the Google Workspace Marketplace.
- D . At the root level, disable the third-party app. For the Finance OU, allow users to install only whitelisted apps from the Google Workspace Marketplace.