最新 [2024年10月15日] 100%合格率を保証します素晴らしいGoogle-Workspace-Administrator試験問題PDF
Google-Workspace-Administrator認定有効な試験問題集解答で学習ガイド！（最新の199問題)
質問 # 109
Your IT team is being asked to fulfill a query by your organization's legal department that requires an MBOX file that will be shared to a third-party partner for eDiscovery. The query must be run on multiple users. Legal has no admin rights to Google Vault. What should you do to fulfil the request?
- A. Use the Investigation Too! to search for the data requested, and export for the legal department.
- B. Create a Google Vault matter, search for data, and run an export for the legal department.
- C. Search for the data in Gmail, and export for the legal department.
- D. Create a Google Vault matter for each user account, and share the matters to the legal admin.
正解：B
解説：
https://support.google.com/vault/answer/2473458?hl=en
質問 # 110
Your company's Google Workspace primary domain is "mycompany.com," and it has acquired a startup that is using another cloud provider with a domain named "mystartup.com." You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO's email address is [email protected], which also matches your company CEO's email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?
- A. Create a new Google Workspace domain with "mystartup.com," and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
- B. Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
- C. Create the startup employees in the "mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to "mystartup.com," and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
- D. Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
正解：D
質問 # 111
As the Workspace Administrator, you have been asked to configure Google Cloud Directory Sync (GCDS) in order to manage Google Group memberships from an internal LDAP server. However, multiple Google Groups must have their memberships managed manually. When you run the GCDS sync, you notice that these manually managed groups are being deleted. What should you do to prevent these groups from being deleted?
- A. In the GCDS configuration manager, update the group deletion policy setting to "don't delete Google groups not found in LDAP."
- B. In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to "delete only active Google domain users not found in LDAP."
- C. Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.
- D. Use the Directory API to check and update the group's membership after the GCDS sync is completed.
正解：A
解説：
https://support.google.com/a/answer/6258071?hl=en#zippy=%2Cgoogle-group-deletion-policy Don't delete Google Groups not found in LDAP If checked, Google Group deletions in your Google domain are disabled, even when the Groups aren't in your LDAP server.
質問 # 112
Madeupcorp.com is in the process of migrating from a third-party email system to Google Workspace. The VP of Marketing is concerned that her team already administers the corporate AdSense, AdWords, and YouTube channels using their @madeupcorp.com email addresses, but has not tracked which users have access to which service. You need to ensure that there is no disruption.
What should you do?
- A. Contact Google Enterprise Support to identify affected users.
- B. Use a Google Form to survey the Marketing department users.
- C. Assure the VP that there is no action required to configure Google Workspace.
- D. Run the Transfer Tool for Unmanaged users.
正解：D
解説：
https://support.google.com/a/answer/7062710
質問 # 113
Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.
What action should you take to meet these requirements?
- A. Create a custom dashboard with the security investigation tool showing suspicious logins.
- B. Create a custom query in BigQuery showing all suspicious login details.
- C. Use the account activity report to export all suspicious login details for analysis.
- D. Use the login audit report to export all suspicious login details for analysis.
正解：D
解説：
* Access the Admin Console:
* In the Google Workspace Admin console, navigate to "Reports" > "Audit" > "Login".
* Generate a Login Audit Report:
* Customize the report to include details about suspicious login attempts.
* Set the time frame to the past year and filter the results to show only suspicious logins.
* Export the Report:
* Export the login audit report in a suitable format (e.g., CSV) for further analysis.
* Ensure the report includes user account details and the number of suspicious login attempts for
* each account.
* Analyze the Data:
* Review the exported data to identify patterns and determine how frequently suspicious login attempts occur within the organization.
* Provide the analysis to the CISO with the required details for each user account.
References
* Google Workspace Admin Help: View and analyze login audit logs
質問 # 114
Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites. What should you do?
- A. Remove all client IDs and scopes from the list of domain-wide delegation API clients.
- B. Set all API services to "restricted access" and ensure that all connected apps have limited access.
- C. Modify your Marketplace Settings to block users from installing any app from the Marketplace.
- D. Block each connected app's access.
正解：A
解説：
https://support.google.com/a/answer/162106?hl=en#zippy=%2Cview-edit-or-delete-clients-and-scopes:~:text=View%2C%20edit%2C%20or,immediately%20stop%20working.
質問 # 115
Your Accounts Payable department is auditing software license contracts companywide and has asked you to provide a report that shows the number of active and suspended users by organization unit, which has been set up to match the Regions and Departments within your company. You need to produce a Google Sheet that shows a count of all active user accounts and suspended user accounts by Org unit.
What should you do?
- A. From the Admin Console Billing Menu, turn off auto-assign, and then click into Assigned Users and export the data to Sheets.
- B. From the Admin Console Users Menu, download a list of all Users to Google Sheets, and join that with a list of ORGIDs pulled from the Reports API.
- C. From the Google Workspace Reports Menu, run and download the Accounts Aggregate report, and export the data to Google Sheets.
- D. From the Admin Console Users Menu, download a list of all user info columns and currently selected columns.
正解：C
解説：
* Admin Console: Log into the Google Admin console at admin.google.com.
* Reports Menu: Navigate to Reports > Reports.
* Accounts Aggregate Report:
* Under the "Reports" section, select "Accounts".
* Click on "Aggregate" to view the report.
* Download Data:
* Click on the download icon and choose "Google Sheets" as the format to export the data.
* This report includes a count of active and suspended users by organizational unit.
* Google Sheets:
* Open the downloaded report in Google Sheets.
* Review and organize the data as needed to present it by Org unit, ensuring it matches the Regions and Departments within your company.
References
* Google Workspace Admin: Reports overview
* Google Workspace Admin: Aggregate reports
質問 # 116
Your organization is about to expand by acquiring two companies, both of which are using Google Workspace. The CISO has mandated that strict 'No external content sharing' policies must be in place and followed. How should you securely configure sharing policies to satisfy both the CISO's mandate while allowing external sharing with the newly acquired companies?
- A. Create a Drive DLP policy that will allow sharing to only domains on an allowlist.
- B. Let users share files between the two companies by using the 'Trusted Domains' feature. Create an allowlist of the trusted domains, and choose sharing settings for the users.
- C. Use shared drives to store the content, and share only individual files externally.
- D. Allow external sharing of Drive content for the IT group only.
正解：B
解説：
* Access Admin Console: Log in to the Google Admin console.
* Navigate to Sharing Settings: Go to Apps > Google Workspace > Drive and Docs > Sharing settings.
* Set Up Trusted Domains: Enable the Trusted Domains feature and add the domains of the newly acquired companies to the allowlist.
* Adjust Sharing Settings: Configure the sharing settings to restrict external sharing but allow sharing with the trusted domains. This ensures compliance with the CISO's mandate while enabling collaboration with the newly acquired companies.
* Communicate Changes: Inform all users about the new sharing policies and the specific domains they are allowed to share content with.
* Monitor Compliance: Regularly monitor sharing activities to ensure compliance with the new policies and make adjustments as necessary.
References:
* Google Workspace Admin Help - Sharing Settings
* Google Workspace Admin Help - Allowlist Trusted Domains
質問 # 117
You have configured Secure Transport (TLS) Compliance for all messages coming to and from an external domain. altostrat.com. that your end users communicate with via Gmail. What will your end users experience when messages are delivered to them from altostrat.com without TLS enabled?
- A. The user will receive a failure message informing them that the message could not be delivered to their inbox and that they will need to work with their Workspace administrator to resolve the issue.
- B. The message will not be delivered to the end user in any form.
- C. A warning banner will appear on the message informing the user that the message was not sent securely.
- D. The message will be delivered to their spam folder.
正解：C
質問 # 118
Your company policy requires that managers be provided access to Drive data once an employee leaves the company.
How should you grant this access?
- A. Transfer ownership of all Drive data using the file transfer ownership tool in the Google Workspace Admin console.
- B. Copy the data from the former employee's My Drive to the manager's My Drive.
- C. Make the manager a delegate to the former employee's account.
- D. Login as the user and add the manager to the file permissions using the "Is owner' privilege for all Drive files.
正解：A
解説：
https://support.google.com/a/answer/1247799?hl=en
質問 # 119
A recent legal investigation requires all emails and Google Drive documents from a specific user to be retrieved. As the administrator, how can you fulfill the legal team's request?
- A. Search Google Drive for all of the user's documents, and ask them to forward all of their emails.
- B. Utilize Google Vault to hold, search, and export data of interest.
- C. Use the Gmail API and Google Drive API to automatically collect and export data.
- D. Use Security Investigation Tool to Search Google Drive events for all of the user's documents, and use Google Admin > Reports > Email Log Search to find their emails.
正解：B
解説：
* Access Google Vault: Go to the Google Vault interface.
* Create a Matter: Create a new matter for the legal investigation.
* Set Holds: Place holds on the specific user's email and Google Drive data to preserve the relevant information.
* Conduct Searches: Use the search functionality in Google Vault to find all emails and documents related to the user.
* Export Data: Once the relevant data is identified, export it for the legal team's review.
* Review and Deliver: Ensure the exported data is complete and deliver it to the legal team as required.
References:
* Google Vault Help - Create, Search, and Export Matters
* Google Vault Help - Export Data from Google Vault
質問 # 120
Your marketing department needs an easy way for users to share items more appropriately. They want to easily link-share Drive files within the marketing department, without sharing them with your entire company. What should you do to fulfil this request? (Choose two.)
- A. In the admin panel Drive settings, create a target audience that has all of marketing as members.
- B. Update Drive sharing for the marketing department to restrict to internal.
- C. Create a shared drive that's shared internally organization-wide.
- D. Update the link sharing default to the marketing team when creating a document.
- E. Create a shared drive for internal marketing use.
正解：A、E
解説：
https://support.google.com/a/users/answer/9310249#1.2
https://support.google.com/a/answer/9935192?hl=en#:~:text=a%20target%20audience-,Create%20a%20target%20audience,as%20Google%20Drive%2C%20to%20make%20it%20available%20in%20users%27%20sharing%20settings.,-Before%20you%20begin
https://support.google.com/a/answer/9934697?hl=en
質問 # 121
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to preventusers from copying data from work to personal apps on iOS devices? (Choose Two)
- A. Clear the "allow users to copy data to personal apps" checkbox.
- B. Turn on "Advanced Mobile Management."
- C. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Open Docs in Unmanaged Apps
- D. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection
- E. Clear the "allow items created with managed apps to open in unmanaged apps" checkbox.
正解：B、E
解説：
According to the Google Workspace Updates blog1, the steps to prevent users from copying data from work to personal apps on iOS devices are:
Turn on "Advanced Mobile Management." This is a prerequisite for using the data protection settings1.
Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection1.
Clear the "allow items created with managed apps to open in unmanaged apps" checkbox. This will prevent users from opening files created with Google apps in their work account in any other app1.
Clear the "allow users to copy data to personal apps" checkbox. This will prevent users from copying content from a Google app in their work account to a Google app in their personal account or a third-party app1.
質問 # 122
Your company has an OU that contains your sales team and an OU that contains your market research team.
The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties.
The market research team also receives that email content, but they want it because it often contains interesting market analysis or competitive intelligence. Constant Contact is often used as the source of these messages. Your company also uses Constant Contact for your own mass email marketing. You need to set email controls at the Sales OU without affecting your own outgoing email or the market research OU.
What should you do?
- A. Create a blocked senders list at the Sales OU that contains the mass email sender addresses.
- B. Create a blocked senders list as the Sales OU that contains the mass email sender addresses, but bypass this setting for Constant Contact emails.
- C. Create an approved senders list at the Market Research OU that contains the mass email sender addresses.
- D. Create a blocked senders list at the root level, and then an approved senders list at the Market Research OU, both containing the mass email sender addresses.
正解：B
解説：
* Access Google Admin Console: Go to admin.google.com and sign in with your administrator account.
* Navigate to Email Settings: In the Admin console, go to "Apps" > "Google Workspace" > "Gmail" >
"Spam, Phishing, and Malware".
* Select the Sales OU: Ensure you are configuring settings for the Sales OU specifically.
* Create a Blocked Senders List:
* Add Mass Email Sender Addresses: Enter the email addresses or domains of the mass email senders that the sales team finds distracting.
* Bypass for Constant Contact: Create a rule to bypass this blocked senders list for emails coming from Constant Contact. This can usually be done by setting up an exception rule within the same settings area.
* Apply and Save Settings: Ensure the settings are saved and propagated to the Sales OU.
* Verify Configuration: Send test emails to confirm that the Sales OU is filtering unwanted mass emails while still receiving those from Constant Contact.
References
* Google Workspace Admin Help - Set up email controls for your organization
* Google Workspace Admin Help - Block or allow specific email addresses
質問 # 123
Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?
- A. Add your partner sending IP addresses to an allowlist.
- B. Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.
- C. Change the spoofing protection to deliver the emails to spam instead of quarantining them.
- D. Add your partner domains IPs to the Inbound Gateway setting.
正解：B
解説：
* Access Admin Console: Log into your Google Workspace Admin Console.
* Navigate to Security Settings: Go to Security > Gmail > Safety.
* Modify Spoofing Protection: Locate the spoofing protection settings.
* Change Delivery Method: Change the setting from quarantining emails to delivering them to inboxes with a custom warning. This way, users can review the emails and determine if they are legitimate while
* still being alerted to potential issues.
* Save Settings: Save the changes to apply the new delivery method.
References
* Google Support: Protect against spoofing & identity deception
質問 # 124
Multiple users across the organization are experiencing video degradation in Meet video calls. As an administrator, what steps should you take to start troubleshooting?
- A. Update the Admin Console Meet settings to disable streaming.
- B. Push the Meet quality tool to end user devices and run local reports to determine connectivity issues.
- C. Troubleshoot network bandwidth for the organizer of the meeting.
- D. Locate the Meet quality tool, and review the output for issues with quality.
正解：D
質問 # 125
A company has thousands of Chrome devices and bandwidth restrictions. They want to distribute the Chrome device updates over a period of days to avoid traffic spikes that would impact the low bandwidth network.
Where should you enable this in the Chrome management settings?
- A. Throttle the bandwidth.
- B. Disable Auto update.
- C. Randomly scatter auto-updates.
- D. Update over cellular.
正解：C
解説：
* Admin Console: Log into the Google Admin console at admin.google.com.
* Devices Management: Navigate to Devices > Chrome > Settings.
* Configuration:
* Under the "Chrome management" section, select "User & browser settings".
* Choose the organizational unit where you want to apply this setting.
* Auto-Updates Settings:
* Scroll down to the "Auto-update settings" section.
* Enable the "Randomly scatter auto-updates" option. This setting will spread out the updates over a period of time, reducing the load on your network.
* Save Changes: Click "Save" to apply the changes.
References
* Google Workspace Admin: Manage automatic updates
質問 # 126
Your company (your-company.com) just acquired a new business (new-company.com) that is running their email on-premises. It is close to their peak season, so any major changes need to be postponed. However, you need to ensure that the users at the new business can receive email addressed to them using your- company.com into their on-premises email server. You need to set up an email routing policy to accomplish this.
What steps should you take?
- A. Set up a Default route with split delivery to route email to the on-premises server.
- B. Set up an Outbound Mail Gateway to route all outbound email to the on-premises server.
- C. Set up an Inbound Mail Gateway to reroute all inbound email to the on-premises server.
- D. Set up accounts for the new employees, and use mail forwarding rules to send to the on-premises server.
正解：A
解説：
* Access the Admin Console:
* Log in to the Google Workspace Admin console at https://admin.google.com/.
* Configure Email Routing:
* Navigate to "Apps" > "Google Workspace" > "Gmail" > "Default routing".
* Set Up Split Delivery:
* Create a new default routing rule.
* Under "Add setting," click on "Routing."
* In the "Add setting" box, under "Inbound," select "Configure" next to "Routing."
* Under "Add setting," name your routing policy.
* In the "Email messages to affect" section, specify the conditions for the rule (e.g., recipients in the new-company.com domain).
* Route to On-Premises Server:
* In the "Route" section, select "Modify message" > "Add more recipients."
* Enter the on-premises email server information (e.g., SMTP relay server) to forward emails to the on-premises server.
* Save the rule and ensure it is active.
* Test the Configuration:
* Send test emails to ensure that emails are correctly routed to the on-premises server as per the split delivery setup.
* Monitor the email flow and make adjustments if necessary to ensure smooth operation during the peak season.
References
* Google Workspace Admin Help: Set up routing for your domain or organization
* Google Workspace Admin Help: Configure routing for mail in Google Workspace
質問 # 127
Your organization is planning to remove any dependencies on Active Directory (AD) from all Cloud applications they are using You are currently using Google Cloud Directory Sync (GCDS) with on-premises AD as a source to provision user accounts in Google Workspace. Your organization is also using a software-as-a-service (SaaS) human resources information system (HRIS) that offers integration via CSV export and Open API standard.
Additional requirements for the solution include:
* It should not require a subscription to any additional third-party service.
* The process must be automated from beginning to end.
You are tasked with the design and implementation of a solution to address user provisioning with these requirements.
What solution should you implement?
- A. Modify the GCDS configuration to use the HRIS application as the data source and complete any necessary adjustments
- B. Build an application that will fetch updated data from the HRIS system via Open API. and then update Google Workspace with the Directory API accordingly.
- C. Export HRIS data to a CSV file every day. and build a solution to define the delta with the previous day; import the result as a CSV file via the Admin console.
- D. Set up Azure AD and federate on-premises AD with it. Provision user accounts from Azure AD with the Google-recommended process.
正解：B
質問 # 128
HR informs you that a user has been terminated and their account has been suspended. The user is part of a current legal investigation, and HR requires the user's email data to remain on hold. The terminated user's team is actively working on a critical project with files owned by the user. You need to ensure that the terminated user's content is appropriately kept before provisioning their license to a new user.
What two actions should you take? (Choose two.)
- A. Move project files to a Team Drive or transfer ownership.
- B. Rename the account to the new user starting next week.
- C. Extend the legal hold on the user's email data.
- D. Delete the account, freeing up a Google Workspace License.
- E. Assign the terminated user account an Archive User license.
正解：A、E
解説：
https://support.google.com/a/answer/9048836
質問 # 129
Your company has sales offices in Madrid, Tokyo, London, and New York. The outbound email for those offices needs to include the sales person's signature and a compliance footer. The compliance footer needs to say "Should you no longer wish to receive emails about this offer, please reply with UNSUBSCRIBE." You are responsible for making sure that users cannot remove the footer.
What should you do?
- A. Send an email to each sales person with the instructions on how to add the footer to their Signature.
- B. Ensure that each sales team is in their own OU, and configure the Append Footer with footer content.
- C. Ensure that each sales team is in their own OU, and configure the Append Footer with the footer content translated for each locale.
- D. Ensure that each sales team is in their own OU, and configure the Append Footer with the signature and footer content translated for each locale.
正解：B
解説：
Google Workspace has no way to translate for each region for the footer. https://support.google.com/a/answer/2364576?hl=en
質問 # 130
......
Google-Workspace-Administrator時間限定！無料アクセス：https://www.goshiken.com/Google/Google-Workspace-Administrator-mondaishu.html
Google-Workspace-Administrator問題集で2024年最新のGoogle Google-Workspace-Administrator試験問題はここ：https://drive.google.com/open?id=1HkKNtvNWLwFKOlRLtaFTwvDEE-yJ0xd-