Google Google-Workspace-Administrator Free Certification Exam Questions Answer Jul 2025 update

Question # 1

An employee with a Workspace Business Plus license at your company is going on a long leave soon. The employee will not need access to their Google Workspace data, but their teammates will need access to the employee’s data. When the employee returns from leave, you will need to restore access to theiraccount, data, emails, and shared documents. You need to preserve the employee’s Workspace data while also minimizing cost while they are on leave. What should you do?

Suspend their account in the Admin console.

Purchase an Archived User license and assign the license to the employee.

Export the account data by using Takeout, and remove the user license in the Admin console.

Copy the employee’s emails, and transfer their file ownership to a teammate. Delete the user account.

Explanation:

To preserve an employee's Google Workspace data while they are on long leave, allow teammates access to that data, and minimize costs with the intention of fully restoring the account upon their return, the best course of action is to purchase an Archived User license and assign it to the employee.

Here's why option B is the most suitable and cost-effective solution that meets all the requirements:

B. Purchase an Archived User license and assign the license to the employee.

Google Workspace offers Archived User licenses at a significantly lower cost than a full user license. When you assign an Archived User license to an account, the data (including Gmail, Drive, and other Workspace services) is retained and can be accessed by other authorized users (e.g., administrators or delegated teammates). The user themselves cannot log in or use the services, thus minimizing cost. Upon the employee's return, you can easily reassign a full Business Plus license to their account, restoring their full access without any data loss or complex restoration processes.

Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation on "About Archived User licenses" (or similar titles) explicitly describes this scenario as the intended use case for Archived User licenses. It outlines the reduced cost, the preservation of data, the ability for administrators to access the data (and delegate access), and the seamless transition back to a full license when the user returns.

A. Suspend their account in the Admin console.

Suspending an account prevents the user from accessing it, but it typically retains the full license cost. While an administrator might be able to access some data in a suspended account, it doesn't offer the cost savings of an Archived User license. Additionally, depending on the suspension duration and Google's policies, there might be implications for long-term data retention without an active or archived license.

Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin Help documentation on "Suspend or restore users" explains the functionality ofaccount suspension. It primarily focuses on temporarily revoking access, not on long-term, cost-effective data preservation with potential for delegated access.

C. Export the account data by using Takeout, and remove the user license in the Admin console.

While Google Takeout allows you to export user data, this creates a separate archive that is not directly integrated with Google Workspace. Providing teammates access to this exported data would be cumbersome and not as seamless as accessing it within the original Workspace environment. Removing the user license would stop data retention in Google Workspace, and restoring the account fully upon the employee's return would involve re-importing the data, which can be complex, time-consuming, and potentially lead to data loss or inconsistencies. This option does minimize cost by removing the license but at the expense of easy access and seamless restoration.

Associate Google Workspace Administrator topics guides or documents reference: Documentation on Google Takeout describes its purpose for exporting data out of Google services, primarily for personal use or data migration, not for temporary data preservation and collaborative access within the Workspace environment. Removing a license typically leads to data deletion after a certain period unless an alternative (like an Archived User license) is in place.

D. Copy the employee’s emails, and transfer their file ownership to a teammate. Delete the user account.

This approach involves significant data manipulation and potential loss of context. Copying emails might not preserve the entire mailbox structure and could miss important information. Transferring file ownership can be complex and might not cover all types of data or shared items. Deleting the user account would permanently remove the data, making full restoration upon the employee's return impossible. This option is not suitable for preserving the employee's Workspace data and restoring their account later.

Associate Google Workspace Administrator topics guides or documents reference: Google Workspace's account management best practices emphasize preserving user accounts and data for returning employees. Deleting accounts with the intention of temporary leave is strongly discouraged due to the difficulty and risks associated with data recovery and account recreation.

Therefore, the most appropriate action that meets all the requirements of preserving data, providing access to teammates, minimizing cost during the leave, and allowing for full restoration upon return is to purchase an Archived User license and assign it to the employee.

Question # 2

Your organization needs an approval application for purchases where a user can enter information on the purchase required and then submit it for management approval. You need to suggest a solution to create the application that must be available on both the web and mobile devices. Your organization does not have software developers or the budget to hire a third party. What should you do?

Suggest that the organization develop an application internally with a database, a backend service for data retrieval, and a frontend service for the application's user interface.

Suggest that the organization continue to approve requests manually until budget is available to use a third-party application provider.

Suggest the organization use AppSheet to create the application.

Suggest that the organization use AppScript to create forms linked to a Google Sheet to store the purchase data.

Question # 3

An employee at your organization may be sharing confidential documents with unauthorized external parties. You must quickly determine if any sensitive information has been leaked. What should you do?

Review the employee's Drive log events in the security investigation tool.

Audit Drive access by using the Admin SDK Reports API.

Review the employee's user log events within the security investigation tool.

Create a custom report of the user's external sharing by using the security dashboard.

Explanation:

To quickly determine if an employee has shared confidential documents externally, you should utilize the security investigation tool in the Google Admin console and specifically review the Drive log events associated with that employee's account. This tool provides a centralized place to audit user activity related to Google Drive, including sharing actions.

Here's why option A is the most direct and efficient first step:

A. Review the employee's Drive log events in the security investigation tool.

The security investigation tool allows administrators to examine various logs related to user activity and potential security incidents. By focusing on the Drive log events for the specific employee in question, you can quickly filter and review actions such as file sharing, permission changes, and external access. This will provide a direct view of whether the employee has indeed shared documents externally and to whom.

Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation on the "Security investigation tool" (or similar titles) explains its capabilities. Specifically, the section on "Investigating Drive log events" details how administrators can use filters to view file sharing activities, including external sharing, by specific users and timeframes. This tool is designed for precisely such scenarios where you need to quickly audit user actions related to data access and sharing.

B. Audit Drive access by using the Admin SDK Reports API.

While the Admin SDK Reports API can provide detailed information about Drive activity, using it requires programming skills and setting up custom scripts or applications. This is not the quickest way to investigate a potential immediate security concern. The security investigation tool offers a user-friendly interface for administrators to perform such investigations without needing to code.

Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin SDK documentation describes the Reports API and its capabilities. While powerful for custom reporting and automation, it's not the fastest method for a quick, ad-hoc security investigation compared to the built-in security investigation tool.

C. Review the employee's user log events within the security investigation tool.

The user log events in the security investigation tool cover a broader range of activities beyond just Google Drive, such as login attempts, password changes, and device management actions. While this might provide some context, it is less focused on file sharing activities compared to the Drive log events. To quickly determine if confidential documents were shared, filtering directly for Drive-related actions is more efficient.

Associate Google Workspace Administrator topics guides or documents reference: The documentation on the security investigation tool outlines the different log sources available, including user logs and Drive logs. For investigating file sharing, the Drive logs provide more specific and relevant information.

D. Create a custom report of the user's external sharing by using the security dashboard.

The security dashboard provides an overview of your organization's security posture and includes pre-built reports and insights. While you can create custom reports, this process might take longer than directly investigating the Drive log events for the specific employee in the security investigation tool. The investigation tool is designed for targeted and immediate analysis of potential security incidents related to user actions.

Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin Help documentation on the "Security dashboard" explains its features, which focus on overall security trends and insights. While it can be useful for identifying patterns, the securityinvestigation tool is more suited for investigating specific user actions and potential data leaks on demand.

Therefore, the most efficient and direct way to quickly determine if the employee has shared confidential documents externally is to review the employee's Drive log events in the security investigation tool.

Question # 4

The legal department at your organization is working on a time-critical merger and acquisition (M&A) deal. They urgently require access to specific email communications from an employee who is currently on leave. The organization’s current retention policy is set to indefinite. You need to retrieve the required emails for the legal department in a manner that ensures data privacy. What should you do?

Instruct the IT department to directly access and forward the relevant emails to the legal department.

Temporarily grant the legal department access to the employee’s email account with a restricted scope that is limited to the M&A-related emails.

Ask a colleague with delegate access to the employee's mailbox to identify and forward the relevant emails to the legal department.

Use Google Vault to create a matter specific to the M&A deal. Search for relevant emails within the employee's mailbox. Export and share relevant emails with your legal department.

Question # 5

Your company’s legal department has issued a litigation hold that requires you to preserve all data related to a specific project. You need to ensure that all data for this project, including emails, documents, and chats, are preserved indefinitely and cannot be deleted by users. What should you do?

Create a hold in Google Vault that includes all users and data sources associated with the project.

Assign an Archived User license to all users involved in the project.

Set up a retention rule in Google Vault that retains all data from Gmail and Drive indefinitely.

Export all project related data from Google Workspace and store the data in a separate, secure location.

Question # 6

Your company’s security team has requested two requirements to secure employees’ mobile devices-enforcement of a passcode and remote account wipe functionality. The security team does not want an agent to be installed on the mobile devices or to purchase additional licenses. Employees have a mix of iOS and Android devices. You need to ensure that these requirements are met. What should you do?

Implement a third-party enterprise mobility management (EMM) provider.

Set up advanced mobile management for iOS devices and basic mobile management for Android devices.

Set up basic management for both iOS and Android devices.

Set up advanced management for both iOS and Android devices.

Question # 7

You’ve noticed an increase in phishing emails that contain links to malicious files hosted on external Google Drives. These files often mimic legitimate documents and trick users into granting access to their accounts. You need to prevent users from accessing these malicious external Drive files, but allow them to access legitimate external files. What should you do? (Choose two.)

Enforce stricter password policies.

Conduct regular security awareness training to educate users.

Create a Drive trust rule that blocks all external domains except for a pre-approved list of trusted partners.

Deploy advanced malware detection software on all user devices to scan and block malicious files.

E Implement two-factor authentication for all users

Question # 8

A team of temporary employees left your organization after completing a shared project. Per company policy, you need to disable their Google Workspace accounts while preserving all project data and related communications in Google Vault for a minimum of two years. You want to comply with this policy while minimizing cost. What should you do?

Purchase and assign Archived User licenses to the former employees.

Transfer the former employees' files and data to active user accounts. Delete the former employees' Workspace accounts.

Purchase additional user licenses and suspend the former employees' accounts.

Move the former employees to their own organizational unit (OU) and disable access to Google services for that OU.

Question # 9

Your company’s help desk is receiving technical support tickets from employees who report that messages from known external contacts are being sent to the spam label in Gmail. You need to correct the issue and ensure delivery of legitimate emails without introducing additional risk as soon as possible. What should you do?

Ask employees to select the messages in Gmail that are being delivered to spam and mark them as Not spam.

Contact the external senders, and tell them to authenticate their sent mail by using domain-based message authentication, reporting, and conformance (DMARC).

Turn off more aggressive spam filtering in spam policies that are applied to the users’ organizational unit and add the senders’ mail system IP addresses to the email allowlist.

Create an address list of approved senders so messages from these users bypass Gmail’s spam filters and recipients can decide whether they are spam or not.

Question # 10

Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization’s email address and their email address with the sub-agency domain name. What should you do?

Redirect the acquired domain to Google’s MX records and add the account as a “send as” address.

Set up the acquired agency as a secondary domain from the Manage domains page.

Set up the acquired agency as a user alias domain from the Manage domains page.

Set up the acquired agency as a secondary domain and swap it to the primary domain.

Summer Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exc65

Free Practice Questions for Google Google-Workspace-Administrator Exam

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation:

The Answer Is:

Explanation: