問題集を購入するなら最新の2023年12月10日 Google-Workspace-Administrator試験問題と解答PDFで一年間無料更新 [Q66-Q89]

問題集を購入するなら最新の2023年12月10日 Google-Workspace-Administrator試験問題と解答PDFで一年間無料更新

時間限定無料ダウンロード！最新のGoogle-Workspace-Administrator問題集で2023年最新のGoogle-Workspace-Administrator試験問題

Google Workspace Administrator認定は、毎日Google Workspaceで協力しているITプロフェッショナルに最適です。また、クラウドベースのアプリケーションとサービスの管理と管理を担当する個人にも適しています。認定は雇用主によって認識されており、専門家が自分のキャリアを前進させるのに役立ちます。

 

質問 # 66
As the newly hired Admin in charge of Google Workspace, you learn that the organization has been using Google Workspace for months and has configured several security rules for accessing Google Drive. A week after you start your role, users start to complain that they cannot access Google Drive anymore from one satellite office and that they receive an error message that "a company policy is blocking access to this app." The users have no issue with Gmail or Google Calendar. While investigating, you learn that both this office's Internet Service Provider (ISP) and the global IP address when accessing the internet were changed over the weekend. What is the most logical reason for this issue?

• A. The Network Mask defined in Security > Settings > SSO with 3rd Party IdPs should be updated to reflect the new IP range.
• B. Under Drive and Docs > Sharing Settings, the "Whitelisted domains" list needs to be updated to add the new ISP domain.
• C. You need to raise a ticket to Google Cloud Support to have your new IP ranges registered for Drive API access.
• D. An access level was defined based on the IP range and applied to Google Drive via Context-Aware Access.

正解：D

質問 # 67
Your company is using Google Workspace Business Standard. The company has five meeting rooms that are all registered as resources in Google Workspace and used on a daily basis by the employees when organizing meetings. The office layout was changed last weekend, and one of the meeting rooms is now a dedicated room for management. The CEO is complaining that anyone can book the room and requested this room to be used only by the management team and their executive assistants (EAs). No one else must be allowed to book it via Google Calendar. What should you do?

• A. As a super administrator, modify the room calendar sharing settings, and limit it to the management and EAs group.
• B. Delete the room from Google Workspace resources, and suggest using a spreadsheet shared with the management and EAs only for the room schedule.
• C. As a super administrator, create a group calendar named "Management Room," and share it only with the management and the EAs.
• D. Move the room resource to the management and EAs group so that only they can use it.

正解：A

質問 # 68
You have enabled Automatic Room Replacement for your calendar resources, but it is not working for any instances of a conflict booking. What could be the issue?

• A. The events have more than 20 attendees.
• B. Automatic Room Replacement does not work on recurring events.
• C. The calendar resources do not have the Resource Category configured as CONFERENCE_ROOM
• D. This feature requires calendar event owners to have the Buildings and resources administrator privilege

正解：B

質問 # 69
Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales
& Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company's Information Security policy empowers you, as a Google Workspace admin, to grant provisional access immediately if all of the following conditions are met:
Access to the app is restricted to specific individuals by request only.
The app does not have the ability to read or manage emails.
Immediate notice is given to the Infosec team, followed by the submission of a security risk analysis report within 14 days.
Which actions should you take first to ensure that you are compliant with Infosec policy?

• A. Search the Google Workspace support forum for feedback about the app to include in the risk analysis report.
• B. Confirm that the Senior VP's OU has the following Gmail setting disabled before whitelisting the app: "Let users delegate access to their mailbox."
• C. Move the Senior VP to a sub-OU before enabling Marketplace Settings > "Allow Users to Install Any App from Google Workspace Marketplace."
• D. Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.

正解：D

解説：
https://support.google.com/a/answer/7281227?hl=en

質問 # 70
Your company is using Google Workspace Business Plus edition, and the security team has reported several unsuccessful attempts to sign in to your Google Workspace domain from countries where you have no local employees. The affected accounts are from several executives in the main office.
You are asked to take measures to mitigate this security risk. Although budget is not a concern, your company prefers a minimal financial outlay to fix the issue, which you are tasked with managing. Which two solutions would help you mitigate the risk at minimal cost?
Choose 2 answers

• A. Subscribe to Cloud Identity Premium for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.
• B. Deploy 2-Step Verification for all users who have security keys.
• C. Deploy Google Cloud Armor on a dedicated project, and create a rule to allow access to Google Workspace only from specific locations.
• D. For all executives, create new accounts with random characters to match Google best practices, migrate
• E. Upgrade to Google Workspace Enterprise Plus for all accounts, and define Context-Aware Access levels to only a list of countries where the company has employees.

正解：B、E

解説：
data from the former accounts, and then delete them.

質問 # 71
In the years prior to your organization moving to Google Workspace, it was relatively common practice for users to create consumer Google accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners who were on Google Workspace.) You were able to address active employees' use of consumer accounts during the rollout, and you are now concerned about blocking former employees who could potentially still have access to those services even though they don't have access to their corporate email account.
What should you do?

• A. Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts, so they can clean up the respective access control lists.
• B. Contact Google Enterprise Support to provide a list of all accounts on your domain(s) that access non-Google Workspace Google services and have them blocked.
• C. Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed account.
• D. Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google Workspace and Other Google Services disabled.

正解：C

解説：
https://support.google.com/a/answer/6178640?hl=en

質問 # 72
Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new "G-Team." A "G-Team' is composed of a Google Group and a Team Drive/ Secondary Calendar that is shared using that Google Group.
What two design decisions are required to implement this workflow securely? (Choose two.)

• A. The Google Form will need to enforce Group naming conventions.
• B. The Google Form will need to be limited to internal users only.
• C. The Apps Script will need to run as a Google Workspace admin.
• D. The Apps Script will need to run on a timed interval to process new entries.
• E. You will need a Cloud SQL instance to store "G-Team' data.

正解：B、C

質問 # 73
You are the Workspace administrator for an international organization with Enterprise Plus Workspace licensing. A third of your employees are located in the United States, another third in Europe, and the other third geographically dispersed around the world. European employees are required to have their data stored in Europe. The current OU structure for your organization is organized by business unit, with no attention to user location. How do you configure Workspace for the fastest end user experience while also ensuring that European user data is contained in Europe?

• A. Configure a data region at the top level OU of your organization, and set the value to "Europe".
• B. Add three additional OU structures to designate location within the current OU structure. Assign the corresponding data region to each.
• C. Configure three configuration groups within your domain. Assign the appropriate data regions to each corresponding group, but assign no preference to the users outside of the United States and Europe.
• D. Configure a configuration group for European users, and set the data region to "Europe".

正解：D

解説：
https://support.google.com/a/answer/7630496?hl=en#zippy=%2Cstep-set-the-organizational-structure
"put them in a configuration group (to set for users across or within departments)".

質問 # 74
As a Google Workspace administrator for your organization, you are tasked with controlling which third-party apps can access Google Workspace dat a. Before implementing controls, as a first step in this process, you want to review all the third-party apps that have been authorized to access Workspace data. What should you do?

• A. Open Admin Console > Security > Less Secure Apps.
• B. Open Admin Console > Security > API Controls > App Access Control > Manage Third Party App Access.
• C. Open Admin Console > Security > API Controls > App Access Control > Manage Google Services.
• D. Open Admin Console > Security > API Controls > App Access Control > Settings.

正解：B

解説：
https://support.google.com/a/answer/7281227?hl=en#zippy=%2Cstep-manage-third-party-app-access-to-google-services-add-apps:~:text=In%20the%20Admin,App%20Access.

質問 # 75
An administrator accidentally deleted several Workspace user accounts from the Google Admin Console two weeks ago. How can you recover the deleted user accounts?

• A. Sign in to the Admin console as Super Admin, open user management, filter for "recently deleted." and recover.
• B. Open a Google support ticket, and request a recovery of all recently deleted users.
• C. Create a matter, go to legal hold, and create a legal hold for the user accounts.
• D. Sign in to the Admin console as Help Desk Admin, open user management, filter for "recently deleted." and recover.

正解：A

質問 # 76
Your organization has noticed several incidents of accidental oversharing inside the organization. Specifically, several users have shared sensitive Google Drive items with the entire organization by clicking 'anyone in this group with this link can view'. You have been asked by senior management to help users share more appropriately and also to prevent accidental oversharing to the entire organization. How would you best accomplish this?

• A. Disable sharing to the entire organization so that users must consciously add every person who needs access.
• B. Create groups, add users accordingly, and educate users on how to share to specific groups of people.
• C. Temporarily disable the Google Drive service for individuals who continually overshare.
• D. Determine sharing boundaries for users that work with sensitive information, and then implement target audiences.

正解：D

解説：
https://support.google.com/a/answer/9934697?hl=en#zippy=:~:text=Why%20use%20target,for%20broad%20sharing.

質問 # 77
Your company has a broad, granular IT administration team, and you are in charge of ensuring proper administrative control. One of those teams, the security team, requires access to the Security Investigation Tool. What should you do?

• A. Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.
• B. Assign the Super Admin Role to the security team members.
• C. Assign the pre-built security admin role to the security team members.
• D. Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.

正解：D

解説：
https://support.google.com/a/answer/9043255#:~:text=To%20give%20access%20only%20to%20the%20investigation%20tool%2C%20check%20the%20individual%20boxes%20for%C2%A0Investigation%20Tool%20privileges.%20You%20can%20add%20specific%20privileges%20for%20access%20to%20different%20types%20of%20data%20(for%20example%2C%20Gmail%2C%20Drive%2C%20Device%2C%20and%20User)%3A

質問 # 78
A user has reported that they did not receive an email from one of their normal correspondents. What information do you need to collect from the user to investigate the cause of the issue?

• A. The type of device the individual is using, including the OS version, browser, and browser version.
• B. The email address of the sender and the subject and date/time of the missing message.
• C. The sender's domain so you can review their SPF and DKIM configuration.
• D. The sender's IP address, mail client, and mail platform.

正解：B

質問 # 79
Your organization is using Password Sync to sync passwords from Active Directory to Google Workspace. A user changed their network password and cannot log in to Google Workspace with the new password. What steps should you take to troubleshoot this issue?

• A. Confirm that the Password Sync service is running on all domain controllers.
• B. Reset the user's password in Active Directory.
• C. Reinstall Password Sync on all domain controllers.
• D. Reauthorize the Password Sync tool in the Google Workspace Admin Console.

正解：A

解説：
https://support.google.com/a/answer/11237847?hl=en&ref_topic=4498019
The network password is determined to be with AD. In this case, you must verify that password sync is installed on all domain controllers. This is the initial troubleshooting. After this troubleshooting, the logs of these connectors are taken
https://www.youtube.com/watch?v=P-r8bvivZuM

質問 # 80
Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.
How should you accomplish this?

• A. Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.
• B. In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.
• C. By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.
• D. Room participants will need to start the meeting from the remote in the room.

正解：B

解説：
https://support.google.com/meethardware/answer/6069329

質問 # 81
On which two platforms can you push WiFi connection information with Google Workspace? (Choose two.)

• A. Mac OS
• B. Linux
• C. iOS
• D. Windows
• E. Chrome OS

正解：C、E

質問 # 82
You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.
What two actions should you take? (Choose two.)

• A. Move the user to their own Organization Unit, and set a custom retention policy
• B. Copy the user's data to a secondary account.
• C. Create a matter using Google Vault, and share the matter with the litigation team members.
• D. Reset the user's password, and share the new password with the litigation team.
• E. Create a hold on the user's mailbox in Google Vault

正解：C、E

解説：
https://support.google.com/vault/answer/2473591

質問 # 83
Your company has been engaged in a lawsuit, and the legal department has been asked to discover and hold all email for two specific users. Additionally, they have been asked to discover and hold any email referencing "Secret Project 123." What steps should you take to satisfy this request?

• A. Create a Matter and a Hold. Set the Hold to Gmail, set it to the top level Organization, and set the search terms to "secret project 123." Create a second Hold. Set the second Hold to Gmail, set it to Accounts, and enter: user1 @your-company.com, [email protected]. Save.
• B. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to: (secret project 123). Save.
• C. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and enter: user1@your- company.com AND [email protected]. Set the search terms to: secret AND project AND 123. Save.
• D. Create a Matter and a Hold. Set the Hold to Gmail, set it to Accounts, and set the usernames to: [email protected], user2@your-company. Set the search terms to secret OR project OR 123. Save.

正解：A

解説：
The correct way to search for the esact term is in quotes ("project 123" and not (project 123)). Ref: https://support.google.com/vault/answer/2474474?hl=en. Also, afeter doing this ytou must create the retention rule using comas to separate user from user.

質問 # 84
The organization has conducted and completed Security Awareness Training (SAT) for all employees. As part of a new security policy, employees who did not complete the SAT have had their accounts suspended. The CTO has requested to be informed of any accounts that have been re-enabled to ensure no one is in violation of the new security policy.
What should you do?

• A. Enable "Suspicious login" rule - Other Recipients: CTO
• B. Enable "Email settings changed" rule - -Other Recipients: CTO
• C. Enable "Suspended user made active" rule and select "Deliver to" Super Administrator(s)
• D. Enable "Suspended user made active" rule - Other Recipients: CTO

正解：D

解説：
CTO must be informed when creating the Suspended user made active-A suspended user is made active by an admin Alert. Ref: https://support.google.com/a/answer/3230421?hl=en#zippy=%2Cuser-activity-alerts

質問 # 85
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?

• A. Clear the "Allow items created with managed apps to open in unmanaged apps" checkbox.
• B. Disable "Open Docs in Unmanaged Apps" setting in Google Admin Console's Device management section.
• C. Navigate to "Data Protection" setting in Google Admin Console's Device management section and disable the "Allow users to copy data to personal apps" checkbox.
• D. Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.

正解：C

解説：
https://support.google.com/a/answer/6328700?hl=en&ref_topic=6079327#managed_apps&zippy=%2Cdata-actions Allow users to copy Google Workspace items to personal apps Allows users to copy content from a Google app (such as Gmail, Drive, Docs, Sheets, Slides, Chat, and Meet) to a Google app in their personal account or a third-party app. Also allows users to drag content between Google apps, for any account.
To prevent users from copying or dragging information from their work account, or using the All inboxes feature (which combines messages from multiple Gmail accounts into one inbox), uncheck the box.

質問 # 86
A company has thousands of Chrome devices and bandwidth restrictions. They want to distribute the Chrome device updates over a period of days to avoid traffic spikes that would impact the low bandwidth network.
Where should you enable this in the Chrome management settings?

• A. Disable Auto update.
• B. Throttle the bandwidth.
• C. Randomly scatter auto-updates.
• D. Update over cellular.

正解：C

解説：
Randomly scatter auto-updates over Only available if you choose to scatter updates Specifies the approximate number of days that managed Chrome devices download an update after its release. You can use this setting to avoid causing traffic spikes in old or low-bandwidth networks. Devices that are offline during this period download the update when they're online again. https://support.google.com/chrome/a/answer/1375678?hl=en#zippy=%2Cauto-update-settings

質問 # 87
A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?

• A. Immediately suspend the user's account, assign an archived user license, and export data.
• B. Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.
• C. Suspend the user's account, search all associated users data in Google Vault, and export the data.
• D. Immediately suspend the user's account, search for all the email messages in question, and forward to the legal team.

正解：B

質問 # 88
A company using Google Workspace has reports of cyber criminals trying to steal usernames and passwords to access critical business dat a. You need to protect the highly sensitive user accounts from unauthorized access.
What should you do?

• A. Use a third-party identity provider.
• B. Enforce 2FA with a physical security key.
• C. Enforce 2FA with Google Authenticator app.
• D. Turn on password expiration.

正解：B

解説：
https://support.google.com/a/answer/175197?hl=en#keys&prompt&authentic&codes&phone&2sv&security

質問 # 89
......

検証済みのGoogle-Workspace-Administrator問題集と解答で一年間無料最速更新：https://www.goshiken.com/Google/Google-Workspace-Administrator-mondaishu.html

最新のGoogle Google-Workspace-Administrator認定の練習テスト問題：https://drive.google.com/open?id=1E997ai9eY9qdrrKNM0oJrNNBPzqL9Bsi