Google-Workspace-Administrator練習テスト問題は更新された199問題あります
Google Google-Workspace-Administrator問題集で一発合格できる問題を試そう！
質問 # 110
The CEO of your company heard about new security and collaboration features and wants to know how to stay up to date. You are responsible for testing and staying up to date with new features, and have been asked to prepare a presentation for management.
What should you do?
- A. Change Google Workspace release track to: Rapid Release for faster access to new features.
- B. Create a support ticket for the Google Workspace roadmap, and ask to enable the latest release of Google Workspace.
- C. Subscribe to the Google Workspace release calendar, and Join the Google Cloud Connect Community.
- D. Download the Google Workspace roadmap, and work together with a deployment specialist for new features.
正解：C
解説：
* Subscribe to the Google Workspace Release Calendar:
* Go to the Google Workspace Updates blog at https://workspaceupdates.googleblog.com/.
* Click on "Subscribe to updates" to get real-time notifications about new features, updates, and changes in Google Workspace.
* This will ensure you and your team are informed about the latest security and collaboration features as they are announced.
* Join the Google Cloud Connect Community:
* Visit the Google Cloud Connect Community at https://cloudconnectcommunity.google/.
* Join the community to engage with other Google Workspace administrators and users.
* Participate in discussions, ask questions, and stay informed about best practices, upcoming features, and insights directly from Google Workspace experts and peers.
References
* Google Workspace Updates Blog
* Google Cloud Connect Community
質問 # 111
A user has reported that they did not receive an email from one of their normal correspondents. What information do you need to collect from the user to investigate the cause of the issue?
- A. The email address of the sender and the subject and date/time of the missing message.
- B. The sender's domain so you can review their SPF and DKIM configuration.
- C. The sender's IP address, mail client, and mail platform.
- D. The type of device the individual is using, including the OS version, browser, and browser version.
正解：A
質問 # 112
You have enrolled a new Google Meet hardware device for an existing conference room in your building Your users report that the new hardware in the conference does not show the expected calendar events You need to investigate and fix the problem What should you do?
- A. Make sure the Access permissions for the resource calendar is set to "See all event details
- B. Use the Meet Quality Tool in the control panel to search for the newly installed Meet Hardware
- C. Make sure that the conference room resource calendar has been created and that the Meet Hardware is associated with that resource
- D. Create a brand new resource calendar and associate the Meet Hardware with that new resource
正解：C
解説：
To investigate and fix the issue where the new hardware does not show the expected calendar events, follow these steps:
* Sign in to the Google Admin console: Use an account with super administrator privileges.
* Verify the resource calendar:
* Go to Apps > Google Workspace > Calendar > Resources.
* Ensure that the conference room resource calendar has been created.
* Associate the Meet hardware:
* Go to Devices > Google Meet hardware.
* Find the new hardware device and check its settings.
* Ensure the device is associated with the correct conference room resource calendar.
* Check calendar permissions:
* Go to Calendar > Manage resources.
* Ensure the calendar associated with the Meet hardware has the appropriate access permissions set to "See all event details." References:
* Google Workspace Admin Help - Manage resources
* Google Workspace Admin Help - Google Meet hardware
質問 # 113
You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.
What two actions should you take? (Choose two.)
- A. Reset the user's password, and share the new password with the litigation team.
- B. Create a hold on the user's mailbox in Google Vault
- C. Copy the user's data to a secondary account.
- D. Move the user to their own Organization Unit, and set a custom retention policy
- E. Create a matter using Google Vault, and share the matter with the litigation team members.
正解：B、E
解説：
* Create a Matter in Google Vault:
* Log into Google Vault.
* Click on "Matters" and then "Create".
* Name the matter appropriately (e.g., User Investigation).
* Share the matter with the litigation team members by adding their email addresses under the
"Sharing" settings.
* Create a Hold on the User's Mailbox:
* In the created matter, go to the "Holds" tab.
* Click on "Create Hold".
* Specify the user's email address to place their mailbox under hold.
* Set the parameters for the hold to ensure all relevant data is preserved and cannot be tampered with.
References
* Google Workspace Admin: Create and manage matters in Google Vault
* Google Workspace Admin: Create and manage holds in Google Vault
質問 # 114
You want to create a list of IP addresses that are approved to send email to your domain. To accomplish this, what section of the Google Workspace Admin console should you update?
- A. Email allowlist
- B. Content compliance rule
- C. Bypass spam filter
- D. Approved email denylist
正解：A
解説：
* Access Email Allowlist Settings:
* Navigate to the Google Admin console.
* Go to Apps > Google Workspace > Gmail > Spam, Phishing, and Malware.
* Update Allowlist:
* In the Spam section, find the "Email allowlist" option.
* Add the IP addresses that are approved to send email to your domain.
* Save Changes:
* Save the settings to ensure the allowlist is updated.
* This configuration will allow emails from the specified IP addresses to bypass spam filters and be delivered to your domain.
References
* Google Workspace Admin Help: Configure Email Allowlists
質問 # 115
A user joined your organization and is reporting that every time they start their computer they are asked to sign in. This behavior differs from what other users within the organization experience. Others are prompted to sign in biweekly. What is the first step you should take to troubleshoot this issue for the individual user?
- A. Confirm that this user has their employee ID populated as a sign-in challenge.
- B. Reset the user's sign-in cookies
- C. Verify that 2-Step Verification is enforced for this user.
- D. Check the session length duration for the organizational unit the user is provisioned in.
正解：D
質問 # 116
Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners. How best would you achieve this?
- A. Create a configuration group with the approved users as members, and enable external sharing for this group.
- B. Create a configuration group with the approved users as members, and use it to create a target audience.
- C. Enable external sharing for the marketing and sales organizational units.
- D. Enable external sharing only to allowlisted domains provided by marketing and sales teams.
正解：A
解説：
https://support.google.com/a/answer/9224126?hl=en#zippy=%2Coptions-for-configurations-groups:~:text=Using%20configurations%20groups,of%20your%20organization.
質問 # 117
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. Admin audit log
- B. Drive usage audit log
- C. OAuth Token audit log
- D. SAML audit log
正解：C
質問 # 118
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?
- A. Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.
- B. Disable "Open Docs in Unmanaged Apps" setting in Google Admin Console's Device management section.
- C. Navigate to "Data Protection" setting in Google Admin Console's Device management section and disable the "Allow users to copy data to personal apps" checkbox.
- D. Clear the "Allow items created with managed apps to open in unmanaged apps" checkbox.
正解：C
解説：
https://support.google.com/a/answer/6328700?hl=en&ref_topic=6079327#managed_apps&zippy=%2Cdata-actions Allow users to copy Google Workspace items to personal apps Allows users to copy content from a Google app (such as Gmail, Drive, Docs, Sheets, Slides, Chat, and Meet) to a Google app in their personal account or a third-party app. Also allows users to drag content between Google apps, for any account.
To prevent users from copying or dragging information from their work account, or using the All inboxes feature (which combines messages from multiple Gmail accounts into one inbox), uncheck the box.
質問 # 119
Your company has just received a shipment of ten Chromebooks to be deployed across the company, four of which will be used by remote employees. In order to prepare them for use, you need to register them in Google Workspace.
What should you do?
- A. Turn on the Chromebook and press Ctrl+Alt+E at the login screen to begin enterprise enrollment.
- B. Instruct the employees to log in to the Chromebook. Upon login, the auto enrollment process will begin.
- C. In Chrome Management | Device Settings, enable Forced Re-enrollment for all devices.
- D. Turn on the chromebook and log in as a Chrome Device admin. Press Ctrl+Alt+E to begin enterprise enrollment.
正解：A
質問 # 120
A user does not follow their sign-in pattern and signs In from an unusual location As an admin, what should you do in response to this alert for this user during this investigation?
- A. Add Two Factor Authentication to the Domain
- B. Enhance your security alerts for tracking sign-in patterns
- C. First suspend the account and then investigate
- D. Investigate the account for unauthorized activity in the Login and Security Audit Log
正解：D
解説：
As an admin, you should investigate the user account in question thoroughly. Check the Login and Security Audit Log to review all recent sign-in activity, IP addresses, geolocations, and any other relevant information. Look for any signs of unauthorized access or suspicious activities. If you find any suspicious activity, take appropriate actions, such as resetting passwords, revoking access, or communicating with the user to verify their identity.
質問 # 121
Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices?
Choose 2 answers
- A. Install the Google Endpoint Verification extension on machines using Drive for Desktop.
- B. Devices > Endpoints > Add a filter-> Management Type > Drive for desktop > Apply
- C. Create a company-owned device inventory using serial numbers of devices.
- D. Create a company-owned device inventory using an asset tag.
- E. Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop > Only Allow Google Drive for desktop on authorized devices
正解：B、E
質問 # 122
The application development team has come to you requesting that a new, internal, domain-owned Google Workspace app be allowed to access Google Drive APIs. You are currently restricting access to all APIs using approved whitelists, per security policy. You need to grant access for this app.
What should you do?
- A. Enable all API access for Google Drive.
- B. Enable "trust domain owned apps" setting.
- C. Whitelist the app in the Google Workspace Marketplace.
- D. Add OAuth Client ID to Google Drive Trusted List.
正解：D
質問 # 123
Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites. What should you do?
- A. Set all API services to "restricted access" and ensure that all connected apps have limited access.
- B. Block each connected app's access.
- C. Modify your Marketplace Settings to block users from installing any app from the Marketplace.
- D. Remove all client IDs and scopes from the list of domain-wide delegation API clients.
正解：D
解説：
https://support.google.com/a/answer/162106?hl=en#zippy=%2Cview-edit-or-delete-clients-and-scopes:~:text=View%2C%20edit%2C%20or,immediately%20stop%20working.
質問 # 124
Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.
What two things should you do? (Choose two.)
- A. Enroll a 2-Factor hardware key on the device using the employee email address.
- B. Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.
- C. Enable a User Policy of Multiple Sign In Access and add just the employee email address.
- D. Disable Guest Mode and Public Sessions.
- E. Enable a Device Policy of Sign In Screen and add the employee email address.
正解：B、D
解説：
https://support.google.com/chrome/a/answer/1375678?hl=en
質問 # 125
As a Google Workspace administrator for your organization, you are tasked with identifying how users are reporting their messages-whether spam, not spam, or phishing-for a specific time period. How do you find this information?
- A. Use Reports API to query user Gmail activity.
- B. Open Admin Console > Security > Dashboard > User Reports.
- C. Open Admin Console > Reporting > Email Log Search.
- D. Open Admin Console > Security > Dashboard > Spam Filter- Phishing.
正解：A
解説：
To identify how users are reporting their messages-whether spam, not spam, or phishing-for a specific time period, you should use the Reports API to query user Gmail activity. This API provides detailed reporting capabilities, allowing administrators to retrieve specific data about user actions regarding email classification.
References:
* Google Workspace Admin Help - Reports API overview
質問 # 126
Your organization is moving from a legacy mail system to Google Workspace This move will happen in phases During the first phase, some of the users in the domain are set up to use a different identity provider (IdP) for logging in You need to set up multiple idPs for various users What should you do?
- A. Enable single sign-on (SSO) with Cloud Identity and use Cloud Directory Sync to manage multiple identity providers
- B. Nothing Google uses cookies to establish a user's relationship to a device This will cover multiple identity providers
- C. Enable single sign-on (SSO) with third-party identity providers and exclude the users who are using a different provider
- D. Create Security Assertion Markup Language (SAML) based single sign-on (SSO) profiles and assign them to specific organizational units or groups of users.
正解：D
解説：
* Access Admin Console: Sign in to your Google Admin console.
* Navigate to Security: Click on "Security" and then "Set up single sign-on (SSO) with a third party IdP."
* Add SAML Apps: Click on "Add SAML app" and select the app to configure.
* Create SSO Profiles: Set up SSO profiles for each identity provider by entering the required SAML details such as ACS URL, Entity ID, etc.
* Assign to OUs/Groups: Assign the created SSO profiles to specific organizational units (OUs) or groups of users based on their IdP.
* Verify Configuration: Ensure that each profile is properly configured and tested.
References:
* Google Workspace Admin Help: Set up SSO via SAML for single sign-on
質問 # 127
A company using Google Workspace has reports of cyber criminals trying to steal usernames and passwords to access critical business data. You need to protect the highly sensitive user accounts from unauthorized access.
What should you do?
- A. Enforce 2FA with a physical security key.
- B. Turn on password expiration.
- C. Enforce 2FA with Google Authenticator app.
- D. Use a third-party identity provider.
正解：A
解説：
* Admin Console: Log into the Google Admin console at admin.google.com.
* Security Settings: Navigate to Security > Authentication > 2-step verification.
* Enforce 2FA:
* Enable "Enforce 2-step verification".
* Set the option to require "Security Keys".
* Deployment: Ensure all highly sensitive user accounts are equipped with physical security keys (e.g., YubiKey).
* Enrollment: Assist users in enrolling their security keys through the Google Account settings under
"Security".
References
* Google Workspace Admin: Enforce 2-Step Verification
* Google Workspace Security: Security Keys
質問 # 128
Your organization recently had a sophisticated malware attack that was propagated through embedded macros in email attachments. As a Workspace administrator, you want to provide an additional layer of anti-malware protection over the conventional malware protection that is built into Gmail. What should you do to protect your users from future unknown malware in email attachments?
- A. Turn on advanced phishing and malware protection.
- B. Run queries in Security Investigation Tool.
- C. Enable Security Sandbox.
- D. Enable Gmail confidential mode.
正解：C
解説：
https://support.google.com/a/answer/7676854?hl=en#zippy=%2Cscan-all-attachments-in-security-sandbox:~:text=detect%20harmful%20attachments-,Set%20up%20rules%20to%20detect%20harmful%20attachments,Security%20Sandbox,-Supported%20editions%20for
質問 # 129
......
Google Google-Workspace-Administrator試験問題集で[2025年最新] 練習有効な試験問題集解答：https://www.goshiken.com/Google/Google-Workspace-Administrator-mondaishu.html
Google-Workspace-Administrator問題集を掴み取れ！[最新2025]Google試験が合格できます：https://drive.google.com/open?id=1PRDQmSHdY2AoKU5Fyz8sU1IIhmoN2p4T