Google Google Workspace Administrator Practice Exams
Last updated on Oct 22,2026- Exam Code: Google Workspace Administrator
- Exam Name: Professional Google Workspace Administrator
- Certification Provider: Google
- Latest update: Oct 22,2026
Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new “G-Team.” A “G-Team’ is composed of a Google Group and a Team Drive/ Secondary Calendar that is shared using that Google Group.
What two design decisions are required to implement this workflow securely? (Choose two.)
- A . The Apps Script will need to run as a Google Workspace admin.
- B . You will need a Cloud SQL instance to store “G-Team’ data.
- C . The Google Form will need to be limited to internal users only.
- D . The Apps Script will need to run on a timed interval to process new entries.
- E . The Google Form will need to enforce Group naming conventions.
Your company is using Google Workspace Enterprise Plus, and the Human Resources (HR) department is asking for access to Work Insights to analyze adoption of Google Workspace for all company employees. You assigned a custom role with the work Insights permission set as “view data for all teams” to the HR group, but it is reporting an error when accessing the application.
What should you do?
- A . Allocate the “view data for all teams” permission to all employees of the company.
- B . Confirm that the Work Insights app is turned ON for all employees.
- C . Confirm in Security > API controls > App Access Controls that Work Insights API is set to “unrestricted.”
- D . Confirm in Reports > BigQuery Export that the job is enabled.
The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in.
What else can you do to increase your organization’s defense-in-depth strategy?
- A . Implement an IP block on the malicious user’s IPs under Security Settings in the Admin Console.
- B . Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.
- C . Enforce higher complexity passwords by rolling it out to the affected users.
- D . Use Mobile device management geo-fencing to prevent malicious actors from using
these stolen credentials.
Your organization is moving from a legacy mail system to Google Workspace This move will happen in phases During the first phase, some of the users in the domain are set up to use a different identity provider (IdP) for logging in You need to set up multiple idPs for various users.
What should you do?
- A . Enable single sign-on (SSO) with third-party identity providers and exclude the users who are using a different provider
- B . Enable single sign-on (SSO) with Cloud Identity and use Cloud Directory Sync to manage multiple identity providers
- C . Create Security Assertion Markup Language (SAML) based single sign-on (SSO) profiles and assign them to specific organizational units or groups of users.
- D . Nothing Google uses cookies to establish a user’s relationship to a device This will cover multiple identity providers
Your company (your-company.com) just acquired a new business (new-company.com) that is running their email on-premises. It is close to their peak season, so any major changes need to be postponed. However, you need to ensure that the users at the new business can receive email addressed to them using your- company.com into their on-premises email server. You need to set up an email routing policy to accomplish this.
What steps should you take?
- A . Set up an Outbound Mail Gateway to route all outbound email to the on-premises server.
- B . Set up accounts for the new employees, and use mail forwarding rules to send to the on-premises server.
- C . Set up an Inbound Mail Gateway to reroute all inbound email to the on-premises server.
- D . Set up a Default route with split delivery to route email to the on-premises server.
You have enrolled a new Google Meet hardware device for an existing conference room in your building Your users report that the new hardware in the conference does not show the expected calendar events You need to investigate and fix the problem.
What should you do?
- A . Make sure that the conference room resource calendar has been created and that the Meet Hardware is associated with that resource
- B . Create a brand new resource calendar and associate the Meet Hardware with that new resource
- C . Use the Meet Quality Tool in the control panel to search for the newly installed Meet Hardware
- D . Make sure the Access permissions for the resource calendar is set to "See all event details
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app.
What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?
- A . Navigate to “Data Protection” setting in Google Admin Console’s Device management section and disable the “Allow users to copy data to personal apps” checkbox.
- B . Disable “Open Docs in Unmanaged Apps” setting in Google Admin Console’s Device management section.
- C . Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.
- D . Clear the “Allow items created with managed apps to open in unmanaged apps” checkbox.
Your company wants to provide secure access for its employees. The Chief Information Security Officer disabled peripheral access to devices, but wants to enable 2-Step verification. You need to provide secure access to the applications using Google Workspace.
What should you do?
- A . Enable additional security verification via email.
- B . Enable authentication via the Google Authenticator.
- C . Deploy browser or device certificates via Google Workspace.
- D . Configure USB Yubikeys for all users.
An administrator accidentally deleted several Workspace user accounts from the Google Admin Console two weeks ago.
How can you recover the deleted user accounts?
- A . Open a Google support ticket, and request a recovery of all recently deleted users.
- B . Sign in to the Admin console as Help Desk Admin, open user management, filter for "recently deleted." and recover.
- C . Sign in to the Admin console as Super Admin, open user management, filter for "recently deleted." and recover.
- D . Create a matter, go to legal hold, and create a legal hold for the user accounts.
Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.
How should you accomplish this?
- A . In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.
- B . Room participants will need to start the meeting from the remote in the room.
- C . By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.
- D . Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.