• ホーム
  • ブログ
  • Google-Workspace-Administrator練習問題集で検証済みで更新された201問題あります [Q24-Q43]

Google-Workspace-Administrator練習問題集で検証済みで更新された201問題あります [Q24-Q43]

Share

Google-Workspace-Administrator練習問題集で検証済みで更新された201問題あります

更新されたGoogle-Workspace-Administrator試験問題集でPDF問題とテストエンジン


Google Cloud Certified - Professional Google Workspace Administrator 試験は、多肢選択問題、複数選択問題、パフォーマンスベースのシナリオ、実際の試験などから構成されており、候補者の知識を実際の状況に適用する能力をテストします。この試験では、Google Workspaceのセットアップや展開、セキュリティとコンプライアンス、ユーザーとグループの管理、アプリケーションとデバイスの管理など、さまざまなトピックがカバーされています。

 

質問 # 24
Your organization uses a third-party product to filter mail before it arrives at your Workspace Domain. How should you configure Gmail to ensure that inbound messages are not seen as a spam attack due to the volume of mail being received from this product?

  • A. Allowlist the IP addresses of the third-party filtering product.
  • B. Add the product's IP addresses as an approved sender.
  • C. List the IP addresses of the product as an Inbound Gateway.
  • D. Add the product's IP addresses to your organization's SPF record.

正解：C


質問 # 25
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?

  • A. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
  • B. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
  • C. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
  • D. Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.

正解：A

解説：
"Inherited permissions can't be removed from a file or folder in a shared drive". ref: https://developers.google.com/drive/api/v3/manage-sharing


質問 # 26
Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user's data.
What two actions should you take? (Choose two.)

  • A. Change the user's primary email in Active Directory.
  • B. Change the user's last name in Active Directory.
  • C. Add the user's old email address to their account in the Google Workspace Admin panel.
  • D. Change the user's last name in the Google Workspace Admin panel.
  • E. Change the user's primary email address in the Google Workspace Admin panel.

正解：A、B

解説：
Update Active Directory: Since your organization syncs directory data from Active Directory to Google Workspace, any changes to user data need to be made in Active Directory first.
Change Primary Email in AD: Change the user's primary email address in Active Directory. This will ensure that the new email address is synchronized with Google Workspace.
Change Last Name in AD: Similarly, change the user's last name in Active Directory. This ensures the updated name is synchronized correctly.
Sync Changes: Wait for the next synchronization cycle of Google Cloud Directory Sync (GCDS) to update the changes in Google Workspace.
Verify Changes in Google Workspace: After the sync is complete, verify that the changes to the user's email address and last name have been successfully updated in Google Workspace.
Reference
Google Support: Google Cloud Directory Sync


質問 # 27
A user has traveled overseas for an extended trip to meet with several vendors. The user has reported that important draft emails have not been saved in Gmail, which is affecting their productivity. They have been constantly moving between hotels, vendor offices, and airport lounges.
You have been tasked with troubleshooting the issue remotely. Your first priority is diagnosing and preventing this from happening again, and your second priority is recovering the drafts if possible. Due to time zone differences, and the user's busy meeting schedule, you have only been able to arrange a brief Hangouts Meet with the user to gather any required troubleshooting inputs.
What two actions should be taken on this call with the user? (Choose two.)

  • A. Use the Email log search in the Admin panel.
  • B. Check the Users > App Users Activity report.
  • C. Take screenshots of the user's screen when composing an email.
  • D. Ask the user to send an email to you so you can check the headers.
  • E. Record a HAR file of the user composing a new email.

正解：C、E

解説：
* Recording a HAR file (B):
* HAR (HTTP Archive) files contain a detailed log of web browser's interaction with a site.
Recording a HAR file while the user is composing a new email will provide detailed information about any network issues, errors, or delays in the communication between the user's browser and Gmail servers. This can help diagnose connectivity issues, session timeouts, or any other underlying problems that may prevent drafts from being saved.
* Taking Screenshots (C):
* Taking screenshots of the user's screen while composing an email can help visually capture any error messages, unusual behavior, or interface issues that the user might be experiencing.
Screenshots provide a clear view of the user's environment, including the browser settings, extensions, and any prompts or notifications that appear during the email composition process.
Detailed Steps:
* Recording a HAR File:
* Instruct the user on how to open the Developer Tools in their browser (usually by pressing F12 or right-clicking on the page and selecting "Inspect").
* Navigate to the Network tab within Developer Tools.
* Ensure the "Preserve log" option is checked to retain the recorded log across different pages.
* Start recording the HAR file before the user starts composing a new email.
* After reproducing the issue, stop the recording and save the HAR file.
* Have the user send the HAR file to you for analysis.
* Taking Screenshots:
* Guide the user on taking screenshots while they are composing a new email.
* Ensure they capture key steps, including opening the compose window, typing the email, and any errors or unusual behavior that occurs.
* The user can take multiple screenshots if necessary to provide a comprehensive view of the issue.
* Ask the user to share these screenshots with you for further investigation.
Why the Other Options Are Less Effective:
* A. Ask the user to send an email to you so you can check the headers:
* This does not directly help diagnose why drafts are not being saved, as email headers mainly provide information about the routing and delivery of sent emails, not drafts.
* D. Use the Email log search in the Admin panel:
* Email log search is useful for tracking sent and received emails but does not provide insights into drafts or unsaved work.
* E. Check the Users > App Users Activity report:
* This report shows user activity but may not give specific details about the draft-saving process or connectivity issues faced during email composition.
References
* Google Workspace Admin Help: Analyze connectivity issues using HAR files
* Google Chrome DevTools: Network Analysis
* Google Workspace Admin Help: User reports in the Admin console


質問 # 28
Your organization's Sales Department uses a generic user account ([email protected]) to manage requests. With only one employee responsible for managing the departmental account, you are tasked with providing the department with the most efficient means to allow multiple employees various levels of access and manage requests from a common email address.
What should you do?

  • A. Configure a Google Group, and set the Access Level to Announcement Only.
  • B. Configure a Google Group as an email list.
  • C. Configure a Google Group as a collaborative inbox.
  • D. Delegate email access to department employees.

正解：C

解説：
Create a Google Group:
Go to the Google Groups interface.
Click on "Create Group."
Enter the group name, email address (e.g., [email protected]), and description.
Configure Group Settings:
After creating the group, go to "Group settings."
Under "Permissions," set who can view topics, post, and join the group as per your requirement.
Set Up Collaborative Inbox:
In the Group settings, navigate to "Settings" > "Email options."
Check the box for "Enable Collaborative Inbox."
This option allows group members to assign topics, mark them as resolved, and categorize posts for better management.
Assign Roles and Permissions:
Define roles for members (e.g., Manager, Member).
Assign permissions to allow various levels of access, such as viewing and managing conversations.
Add Members:
Add the employees who need access to this group.
Go to "Manage members" and click "Add members."
Reference:
Google Groups Collaborative Inbox
Create and Configure Google Groups


質問 # 29
The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.
What two actions should you take? (Choose two.)

  • A. Enable all admin settings in Gmail's safety > spoofing and authentication.
  • B. Create a rule requiring secure transport for all messages regarding wire transfers.
  • C. Verify that DMARC, DKIM, and SPF records are configured correctly for your domain.
  • D. Add the sender of the wire transfer email to the blocked senders list.
  • E. Configure objectionable content to reject messages with the words "wire transfer."

正解：A、C

解説：
* Verify DMARC, DKIM, and SPF records:
* Sign in to your domain host and navigate to the DNS settings.
* Ensure that SPF (Sender Policy Framework) is set up correctly to prevent email spoofing.
* Configure DKIM (DomainKeys Identified Mail) to add a digital signature to emails sent from your domain.
* Set up DMARC (Domain-based Message Authentication, Reporting & Conformance) to provide instructions to receiving mail servers on how to handle emails that fail SPF or DKIM checks.
* Enable Gmail spoofing and authentication settings:
* Sign in to the Google Admin console.
* From the Admin console Home page, go to "Apps" > "Google Workspace" > "Gmail" > "Safety."
* Enable settings related to spoofing and authentication to add additional layers of protection against phishing attempts.
By verifying these email security settings and enabling spoofing protections, you can help prevent unauthorized or fraudulent emails from being sent, thus reducing the risk of wire transfer fraud.
References:
* Google Workspace Admin Help - Set up SPF records
* Google Workspace Admin Help - Set up DKIM
* Google Workspace Admin Help - Set up DMARC


質問 # 30
The Google Analytics service is set to OFF for your entire organization All users in the marketing team OU and a subset of users in the sales OU need access to Analytics The rest of the organization should not have access You must configure access in Additional Google services What should you do?

  • A. Enable Google Analytics at the top of the OU structure
  • B. Enable Google Analytics for the marketing and sales OUs Create a group to deny access to Google Analytics and assign it to the sales users who should not have access
  • C. Enable Google Analytics for the marketing OU Create a group from the Admin console that includes the sales users, and set GoogleAnalytics to On for that group
  • D. Enable Google Analytics for the marketing OU. Create a sub-OU for the sales users under the marketing OU

正解：C

解説：
Access Admin Console: Log in to the Google Admin console using your administrator account.
Navigate to Additional Google Services: Go to Apps > Additional Google services > Google Analytics.
Enable for Marketing OU: Select the marketing OU and turn on Google Analytics.
Create Group for Sales Users: Go to Directory > Groups and create a new group for the sales users who need access to Google Analytics.
Assign Google Analytics Access: In the Google Analytics settings, turn on access for the newly created sales group.
Verify Settings: Ensure that only users in the marketing OU and the specific sales group have access to Google Analytics while the rest of the organization does not.
Reference:
Google Workspace Admin Help: Turn Additional Google services On or Off
Google Workspace Service Access Management


質問 # 31
Your-company.com recently started using Google Workspace. The CIO is happy with the deployment, but received notifications that some employees have issues with consumer Google accounts (conflict accounts). You want to put a plan in place to address this concern.
What should you do?

  • A. Rename the accounts to [email protected], and recreate the accounts.
  • B. Ask users to request a new Google Workspace account from your local admin.
  • C. Use the conflict account remove tool to remove the accounts from Google Workspace.
  • D. Use the Transfer tool for unmanaged users to find the conflict accounts.

正解：D


質問 # 32
You work for an organization that is headquartered in Washington DC You want to reliably send email announcements to all employees in the area and update membership automatically What should you do?

  • A. Create a Security Group and apply the Location label to allow employees to join based on the specified location
  • B. Create a Dynamic Group by using the location condition to keep the distribution list automatically updated based on the employees work locations
  • C. Create a Google Group and add all employees in the Washington DC work location
  • D. Create a Google Group and set permissions to invite employees to join the group

正解：B

解説：
* Access Admin Console: Log in to the Google Admin console using your administrator account.
* Navigate to Groups: Go to Directory > Groups.
* Create Dynamic Group: Click on Create group and select Dynamic group.
* Set Location Condition: Define the membership condition based on the work location attribute. Set the condition to include employees located in Washington DC.
* Configure Group Settings: Set up the necessary group settings such as permissions and access controls.
* Automatic Updates: The group membership will be automatically updated based on the employees' work locations, ensuring that the distribution list always reflects the current employee locations.
References:
* Google Workspace Admin Help: Create dynamic groups
* Google Workspace Dynamic Groups Overview


質問 # 33
You are the administrator for a 30.000-user organization. You have multiple Workspace licensing options available to end users in your domain, according to their work responsibilities. A user may be transitioned to a different license type multiple times in a given year. Your organization has a high turnover rate for employees. What is the most efficient way to manage your organization's licensing?

  • A. Use the Directory API to create a custom batch script that modifies the users license on a daily basis
  • B. Use Google Cloud Directory Sync to modify user licensing with each sync, according to information available in the organization's LDAP
  • C. Create a license assignment rule in the Google Admin console to set user licensing based on directory attributes.
  • D. Update user licensing in the user portion of the Admin console on an as-needed basis.

正解：C

解説：
To efficiently manage licensing in an organization with a high turnover rate and multiple license types, the best approach is to create a license assignment rule in the Google Admin console based on directory attributes. This method automates the process of assigning licenses according to the user's role and other directory attributes, ensuring that each user gets the appropriate license type without manual intervention. This approach is scalable and minimizes the administrative overhead associated with frequent changes in user roles and turnover.
Reference:
Google Workspace Admin Help - Assign, change, or remove a user's license Google Workspace Admin Help - Set up automated user provisioning to third-party applications


質問 # 34
Your default Vault retention policy for Gmail is set to 365 days Your legal department has just informed you that emails sent and received by the customer support department are sensitive and must be retained for only 30 days You must enforce this new retention policy in the simplest way What should you do?

  • A. Create two custom retention policies in Vault one for 30 days that is applied to the customer support organizational unit (OU) and one for 365 days that is applied to all other OUs in your directory
  • B. Create a custom retention policy in Vault for Gmail for 30 days and apply it to the customer support organizational unit (OU)
  • C. Change the current default retention policy for Gmail to 30 days Configure two custom retention policies in Vault one for 30 days that is applied to the customer support organizational unit (OU) and one for 365 days that is applied to all other OUs in your directory
  • D. Change the current default retention policy in Vault for Gmail to 30 days and apply it to the customer support organizational unit (OU) Configure a custom retention policy for Gmail for 365 days for your domain

正解：B

解説：
Step by Step Comprehensive Detailed Explanation:
Access Google Vault: Sign in to Google Vault.
Retention Policies: Navigate to "Retention" from the side menu.
Create New Retention Rule: Click on "Create retention rule."
Set Duration: Set the retention period to 30 days.
Apply to OU: Apply this retention rule specifically to the organizational unit (OU) for the customer support department.
Exclude Default Rule: Ensure that this custom rule overrides the default 365-day retention policy for the customer support OU.
Save and Activate: Save the rule and ensure it is activated.
Reference:
Google Vault Help: Set retention rules


質問 # 35
Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.
What should you do?

  • A. Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.
  • B. Create a Team Drive per OU, and allow only country-specific administration of each folder.
  • C. Create an OU for each country. Create an admin role and assign an admin with that role per OU.
  • D. Establish a new Google Workspace tenant with their own admin for each region.

正解：C


質問 # 36
As the Workspace Administrator, you have been asked to configure Google Cloud Directory Sync (GCDS) in order to manage Google Group memberships from an internal LDAP server. However, multiple Google Groups must have their memberships managed manually. When you run the GCDS sync, you notice that these manually managed groups are being deleted. What should you do to prevent these groups from being deleted?

  • A. In the GCDS configuration manager, update the group deletion policy setting to "don't delete Google groups not found in LDAP."
  • B. In the user attribute settings of the GCDS configuration manager options, set the Google domain users deletion/suspension policy to "delete only active Google domain users not found in LDAP."
  • C. Use the Directory API to check and update the group's membership after the GCDS sync is completed.
  • D. Confirm that the base DN for the group email address attribute matches the base DN for the user email address attribute.

正解：A

解説：
When configuring Google Cloud Directory Sync (GCDS) to manage Google Group memberships from an internal LDAP server, it's crucial to ensure that manually managed groups are not inadvertently deleted during the sync process. The correct setting to prevent this is found within the GCDS configuration manager.
* Access GCDS Configuration Manager:
* Open the GCDS configuration manager on your server.
* Navigate to Group Settings:
* Go to the section where group settings are configured.
* Update Group Deletion Policy:
* Find the group deletion policy setting.
* Change the policy to "don't delete Google groups not found in LDAP."
* Save Configuration:
* Save the updated configuration to ensure that the settings are applied during the next synchronization.
By updating this setting, GCDS will no longer delete Google Groups that are not found in LDAP, thereby preserving manually managed groups.
References:
* Google Cloud Directory Sync Admin Help
* GCDS Configuration Guide


質問 # 37
You work at a large global holding firm with multiple companies that are united under one Google Workspace deployment. You must ensure that employees can only access documents at the company in which they are employed. What should you do?

  • A. Create an organizational unit (OU) for each company and disable file sharing.
  • B. Set up Google Drive trust rules to prevent access to documents from individual companies.
  • C. Create a User group for each company and change Google Drive sharing settings to block external sharing.
  • D. Set up data loss prevention (DLP) rules to prevent specific documents from being shared.

正解：B


質問 # 38
Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.
What should you do?

  • A. Install Google Workspace Sync for Microsoft Outlook on all employees' computers.
  • B. Install Google Cloud Directory Sync on all Domain Controllers.
  • C. Install Google Apps Manager to automate add-user scripts.
  • D. Install Google Cloud Directory Sync on a supported server.

正解：D

解説：
* Prepare Environment: Ensure you have a supported server to install Google Cloud Directory Sync (GCDS).
* Download GCDS:
* Download Google Cloud Directory Sync from the Google Workspace Downloads page.
* Install GCDS:
* Follow the installation instructions provided by Google to install GCDS on the server.
* Configuration:
* Configure GCDS to synchronize user data from Active Directory to Google Workspace.
* Set up synchronization rules and schedules to ensure that user data is kept up to date automatically.
* Testing and Deployment:
* Test the synchronization to ensure that new user accounts are created accurately in Google Workspace.
* Deploy GCDS in the production environment after successful testing.
References
* Google Workspace Admin: About Google Cloud Directory Sync
* Google Workspace Admin: Install and Set Up GCDS


質問 # 39
Your organization has a data loss prevention (DLP) rule to detect and warn users about external sharing of sensitive files in Google Drive. You also want to prevent external users from downloading files with viewer permissions to their local machines. What should you do?

  • A. Do nothing. View-only Drive files automatically prevent the user from downloading the files.
  • B. Create a new DLP rule by using the existing content detector conditions, but change the action for the new rule to Disable download, print, and copy for commenters and viewers.
  • C. Modify the existing DLP rule to Disable download, print, and copy for commenters and viewers.
  • D. Create a new DLP rule and set the scope to the organizational unit or group that you want to restrict.

正解：C

解説：
A single DLP rule can have multiple actions. By modifying the existing rule, you can add the new action to disable downloading, printing, and copying, without creating a separate rule.


質問 # 40
Your corporate LDAP contains the email addresses of several hundred non-employee business partners. You want to sync these contacts to Google Workspace so they appear in Gmail's address autocomplete for all users in the domain.
What are two options to meet this requirement? (Choose two.)

  • A. Develop a custom application to call the Domain Shared Contacts API.
  • B. Configure GCDS to populate a Group with external members.
  • C. Use the Directory API to upload a .csv file containing the contacts.
  • D. Configure GCDS to synchronize shared contacts.
  • E. Use the People API to upload a .csv file containing the contacts.

正解：A、D

解説：
https://support.google.com/a/answer/9281635?hl=en&ref_topic=20016


質問 # 41
Your corporate LDAP contains the email addresses of several hundred non-employee business partners. You want to sync these contacts to Google Workspace so they appear in Gmail's address autocomplete for all users in the domain.
What are two options to meet this requirement? (Choose two.)

  • A. Develop a custom application to call the Domain Shared Contacts API.
  • B. Configure GCDS to populate a Group with external members.
  • C. Use the Directory API to upload a .csv file containing the contacts.
  • D. Configure GCDS to synchronize shared contacts.
  • E. Use the People API to upload a .csv file containing the contacts.

正解：A、D

解説：
* Develop Custom Application:
* Use the Domain Shared Contacts API to create a custom application.
* The application should read the contacts from your corporate LDAP and upload them to Google Workspace.
* This will ensure that these contacts appear in the address autocomplete for all users.
* Configure Google Cloud Directory Sync (GCDS):
* Install and configure GCDS on a supported server.
* Set up synchronization to include shared contacts from your LDAP directory.
* This will automatically keep the contacts updated and available in Gmail's address autocomplete.
References
* Google Workspace Admin: Google Cloud Directory Sync
* Google Workspace Admin: Domain Shared Contacts API


質問 # 42
A company wants to distribute iOS devices to only the employees in the Sales OU. They want to be able to do the following on these devices:
* Control password policies.
* Make corporate apps available to the users.
* Remotely wipe the device if it's lost or compromised
What two steps are required before configuring the device policies? (Choose two.)

  • A. Set up Device Approvals.
  • B. Turn on Advanced Mobile Management for Sales OU
  • C. Turn on Advanced Mobile Management for the domain.
  • D. Deploy Apple Certificate to every device.
  • E. Set up an Apple Push Certificate.

正解：B、E

解説：
* Admin Console: Log into the Google Admin console at admin.google.com.
* Enable Advanced Mobile Management for Sales OU:
* Navigate to Devices > Mobile & endpoints > Settings.
* Select the Sales OU and turn on Advanced Mobile Management.
* Set Up an Apple Push Certificate:
* Go to Devices > Mobile & endpoints > Apple certificates.
* Follow the instructions to obtain and upload an Apple Push Certificate.
* Device Policies:
* After setting up the Apple Push Certificate, configure the desired device policies such as password policies, app distribution, and remote wipe capabilities.
References
* Google Workspace Admin: Set up advanced mobile management
* Google Workspace Admin: Set up an Apple Push Certificate


質問 # 43
......

最新（2025)Google Google-Workspace-Administrator試験問題集：https://www.goshiken.com/Google/Google-Workspace-Administrator-mondaishu.html

最適な練習法にはGoogle Google-Workspace-Administrator試験の素晴らしいGoogle-Workspace-Administrator試験問題PDF：https://drive.google.com/open?id=1uZfrK_CA481CND26EGb80DGWM758oXz7

関するブログ

もっと
Google-Workspace-Administrator無料問題集