Professional Google Workspace Administrator

Professional Google Workspace Administrator practice questions, page 5 of 6, with answer review and explanations.

Question 21

You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?

  1. Train users to click on Not Spam button for emails.
  2. Add all users of your domain to an approved sender list.
  3. Force TLS for your domain.
  4. Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.

Question 22

A user is reporting that after they sign in to Gmail, their labels are not loading and buttons are not responsive. What action should you take to troubleshoot this issue with the user?

  1. Collect full message headers for examination.
  2. Check whether the issue occurs when the user authenticates on a different device or a new incognito window.
  3. Check whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
  4. Check whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.

Question 23

A retail company has high employee turnover due to the cyclical nature in the consumer space. The increase in leaked confidential content has created the need for a specific administrative role to monitor ongoing employee security investigations. What step should you take to increase the visibility of such investigations?

  1. Assign the ‘Services Admin’ role to an administrator with ‘Super Admin’ privileges.
  2. Create a ‘Custom Role’ and add all the Google Vault privileges for a new administrator.
  3. Validate that the new administrator has access to Google Vault.
  4. Create a ‘Custom Role’ and add the ability to manage Google Vault matters, holds, searches, and exports.

Question 24

A subset of users from the finance and human resources (HR) teams need to share documents with an external vendor. However, external content sharing is prohibited for the entire finance team. What would be the most secure method to enable external sharing for this set of users?

  1. Download and attach the documents to a Gmail message, and send them to the external vendor.
  2. Move all users from the finance org unit to the HR org unit.
  3. Enable ‘Visitor Sharing’ for the entire finance org unit.
  4. Create a group with the finance and HR users who need to share externally.

Question 25

As the newly hired Admin in charge of Google Workspace, you learn that the organization has been using Google Workspace for months and has configured several security rules for accessing Google Drive. A week after you start your role, users start to complain that they cannot access Google Drive anymore from one satellite office and that they receive an error message that “a company policy is blocking access to this app.” The users have no issue with Gmail or Google Calendar. While investigating, you learn that both this office's Internet Service Provider (ISP) and the global IP address when accessing the internet were changed over the weekend. What is the most logical reason for this issue?

  1. An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.
  2. Under Drive and Docs > Sharing Settings, the “Whitelisted domains” list needs to be updated to add the new ISP domain.
  3. The Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range.
  4. You need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access.