2026年01月実際に出るAssociate-Google-Workspace-Administrator試験問題集には正確で更新された問題
Associate-Google-Workspace-Administrator試験問題集でPDF問題とテストエンジン
質問 # 44
You are configuring Chrome browser security policies for your organization. These policies must restrict certain Chrome apps and extensions.
You need to ensure that these policies are applied on the devices regardless of which user logs into the device. What should you do?
- A. Configure the Policy Precedence to override the domain-wide policy applied for apps and extensions.
- B. Configure the allowed list of apps in the Devices page in the apps and extensions settings.
- C. Require 2SV for user logins.
- D. Configure the Chrome user setting to require users to sign in to use Chrome apps and extensions.
正解：B
解説：
To ensure that Chrome apps and extension policies are applied regardless of which user logs into the device, you should configure the allowed list of apps in the Devices section of the apps and extensions settings. This policy applies at the device level, ensuring that the restrictions are enforced for any user who logs into that device, providing consistent security across the organization.
質問 # 45
Your company wants to start using Google Workspace for email. Your domain is verified through a third-party provider. You need to route the email to Google Workspace. What should you do?
- A. Update your domain's MX records to the Google Workspace MX records provided in the setup instructions.
- B. Configure a forwarding rule in your current email system to redirect all messages to Gmail.
- C. Change your domain's A record to point to Google's mail servers.
- D. Create a CNAME record that maps your domain to "gmail.com."
正解：A
解説：
To route your email to Google Workspace, you need to update your domain's MX (Mail Exchange) records to point to Google's mail servers. This step ensures that emails sent to your domain are delivered to your Google Workspace Gmail accounts. The MX records are provided in the setup instructions during the Google Workspace configuration process.
質問 # 46
Your organization has enabled Google Groups for Business to let employees create and manage their own email distribution lists and web forums. You need to ensure that users cannot join external Google Groups with their Google Workspace accounts without interrupting internal group usage. What should you do?
- A. In Additional Google Services, turn Google Groups OFF at the root organizational unit.
- B. Use the Directory API to change the settings of user-created groups to disable features that allow external users to access, view, or post on groups.
- C. Set the setting for Google Groups for Business called Accessing groups from outside this organization to Private.
- D. Set the setting for Google Groups for Business called Default for permission to view conversations to All organization users.
正解：C
解説：
By setting the Accessing groups from outside this organization to Private, you prevent users from joining external Google Groups while still allowing internal users to use Google Groups within the organization. This setting ensures that only members of your organization can join and interact with internal groups, effectively stopping external access without affecting internal group usage.
質問 # 47
A user is experiencing intermittent issues accessing their Gmail inbox. Sometimes their Gmail loads slowly, and other times the user encounters error messages that haven't been documented. You need to effectively troubleshoot this recurring problem. What should you do?
- A. Instruct the user to try to access Gmail from another device or network to see if the issue persists.
- B. Instruct the user to clear their browser cache and cookies.
- C. Check the Google Workspace Status Dashboard for any reported service disruptions.
- D. Instruct the user to generate a HAR file the next time they experience slowness or an error.
正解：D
解説：
A HAR file (HTTP Archive) records detailed information about the user's network activity, including HTTP requests and responses. This file can help diagnose issues with Gmail loading slowly or errors occurring, especially when they are intermittent. By generating a HAR file, you can provide valuable data for troubleshooting the issue and pinpoint any underlying network or browser-related issues.
質問 # 48
You manage Chrome Enterprise browsers for your large organization. You want to ensure that specific extensions are automatically installed on all managed Chrome Enterprise browsers. What should you do?
- A. Force-install the extensions through Chrome browser policies.
- B. Allowlist the specific Chrome browser extensions.
- C. Configure a script to deploy the extensions upon user login.
- D. Publish the extensions in the Chrome Web Store.
正解：A
解説：
Using Chrome browser policies, you can force-install specific extensions on all managed Chrome Enterprise browsers. This ensures that the desired extensions are automatically installed on users' browsers without requiring manual installation. This approach is the most efficient and scalable solution for managing extensions across a large organization.
質問 # 49
Your company's help desk is receiving technical support tickets from employees who report that messages from known external contacts are being sent to the spam label in Gmail. You need to correct the issue and ensure delivery of legitimate emails without introducing additional risk as soon as possible. What should you do?
- A. Contact the external senders, and tell them to authenticate their sent mail by using domain-based message authentication, reporting, and conformance (DMARC).
- B. Create an address list of approved senders so messages from these users bypass Gmail's spam filters and recipients can decide whether they are spam or not.
- C. Ask employees to select the messages in Gmail that are being delivered to spam and mark them as Not spam.
- D. Turn off more aggressive spam filtering in spam policies that are applied to the users' organizational unit and add the senders' mail system IP addresses to the email allowlist.
正解：C
解説：
Asking employees to mark legitimate emails as "Not spam" helps train Gmail's spam filter to correctly identify these senders as trusted. This is a quick and effective way to correct the issue without introducing any additional risk or changes to the email filtering settings. Over time, Gmail will learn to recognize these senders as legitimate, reducing the likelihood of their messages being misclassified as spam in the future.
質問 # 50
Users at your company are reporting that they are not receiving some emails in their corporate Gmail account. You have checked the Google Workspace Status Dashboard and you found no service disruptions. You need to identify the root cause of the problem and resolve the mail delivery issues. What should you do? (Choose two.)
- A. Check the users' spam folders to determine whether emails are being misdirected.
- B. Check the senders' IP addresses in the inbound mail gateway.
- C. Investigate the Gmail log events for error messages or unusual patterns.
- D. Verify whether the organization's Mail Exchange (MX) records are correctly configured.
- E. Use Email Log Search (ELS) to identify specific delivery failures.
正解：D、E
解説：
Use Email Log Search (ELS): ELS allows you to trace email delivery and identify issues, such as undelivered or bounced messages. This is an essential tool for identifying the root cause of mail delivery issues.
Verify whether the organization's Mail Exchange (MX) records are correctly configured: Incorrect MX records could prevent emails from being delivered to the organization's Gmail accounts. It's important to verify that these records are set up properly to ensure smooth email delivery.
質問 # 51
A user in your organization reported that their internal event recipient is not receiving the Calendar event invites. You need to identify the source of this problem. What should you do?
- A. Check if Calendar service is turned off for the event creator.
- B. Check whether the event recipient has turned off their email notifications for new events in their Calendar settings.
- C. Check whether the business hours are set up in the event recipient's Calendar settings.
- D. Check whether the Calendar event has more than 50 guests.
正解：B
解説：
When an internal user reports not receiving Google Calendar event invites, the most likely immediate cause to investigate on the recipient's end is their notification settings within Google Calendar. Users can customize their notification preferences, and it's possible they have turned off email notifications for new events.
Here's why option D is the most relevant first step and why the other options are less likely to be the primary cause of this specific issue:
D . Check whether the event recipient has turned off their email notifications for new events in their Calendar settings.
Google Calendar allows users to configure various notification settings, including whether they receive email notifications for new events, changes to events, reminders, etc. If the recipient has disabled email notifications for new events, they would not receive the invites in their inbox, even though the event might be correctly added to their Calendar.
Associate Google Workspace Administrator topics guides or documents reference: The official Google Calendar Help documentation for users, such as "Change notification settings," explains how users can customize their event notifications. This includes options to turn off email notifications for new events. While administrators don't directly manage individual user's notification settings, understanding these user-level controls is crucial for troubleshooting. An administrator might guide the user to check these settings.
A . Check whether the business hours are set up in the event recipient's Calendar settings.
Business hours in Google Calendar primarily affect meeting scheduling suggestions and how a user's availability is displayed to others. They do not directly prevent a user from receiving event invitations. Whether or not a recipient has configured their business hours will not stop the email notification for a new event from being sent (unless perhaps in very specific and unusual edge cases related to resource scheduling, which isn't indicated here).
Associate Google Workspace Administrator topics guides or documents reference: The Google Calendar Help documentation on "Set your working hours and location" explains the purpose of business hours, which is related to availability and scheduling, not the receipt of invitations.
B . Check if Calendar service is turned off for the event creator.
If the Calendar service is turned off for the event creator, they would not be able to create or send any Calendar events in the first place. Since the user created and sent the invite (as mentioned by the recipient not receiving it), the Calendar service must be active for the creator.
Associate Google Workspace Administrator topics guides or documents reference: The Google Workspace Admin Help documentation on "Turn Google Calendar on or off for users" explains how administrators can control access to the Calendar service. If the service is off for a user, they would not have Calendar functionality.
C . Check whether the Calendar event has more than 50 guests.
While there might be limitations on the number of guests that can be added to a single Calendar event, exceeding this limit typically results in an error message for the event creator during the invitation process, not a failure of the recipient to receive the invite. Even if there were such a limit affecting receipt (which is not a common documented issue for internal users within reasonable limits), it wouldn't be the first thing to check.
Associate Google Workspace Administrator topics guides or documents reference: Google Calendar Help documentation might mention limits on the number of guests, but these limits usually pertain to the ability to add guests, send updates, or view responses, not a complete failure of delivery to some recipients within the organization.
Therefore, the most logical first step in troubleshooting why an internal recipient isn't receiving Calendar event invites is to have the recipient check their own Calendar notification settings to ensure that email notifications for new events are enabled.
質問 # 52
Your organization collects credit card information in customer files. You need to implement a policy for your organization's Google Drive data that prevents the accidental sharing of files that contain credit card numbers with external users. You also need to record any sharing incidents for reporting. What should you do?
- A. Implement a third-party data loss prevention solution to integrate with Drive and provide advanced content detection capabilities.
- B. Create a data loss prevention (DLP) rule that uses the predefined credit card number detector, sets the action to "block external sharing", and enables the "Log event" option.
- C. Enable Gmail content compliance, and create a rule to block email attachments containing credit card numbers from being sent to external recipients.
- D. Configure a data retention policy to automatically delete files containing credit card numbers after a specified period.
正解：B
解説：
A data loss prevention (DLP) rule with the predefined credit card number detector will help you identify and prevent the accidental sharing of files that contain sensitive credit card information. Setting the action to "block external sharing" ensures that such files cannot be shared externally. Enabling the "Log event" option will record any incidents of external sharing for auditing and reporting purposes, fulfilling both the security and reporting requirements.
質問 # 53
Your organization has detected a significant rise in unauthorized access to applications from personal devices. This poses a critical security risk and could lead to data loss. To mitigate this risk, you must immediately restrict user access to these applications. What should you do?
- A. Configure apps data access to Limited to only allow access to unrestricted services.
- B. Enable data loss prevention rules.
- C. Enable multi-factor authentication for application access.
- D. Limit apps access to company-issued devices by using context-aware access.
正解：D
解説：
The problem states a "significant rise in unauthorized access to applications from personal devices," posing a "critical security risk" and potential "data loss." The immediate goal is to "immediately restrict user access to these applications" from personal devices.
Context-Aware Access (CAA) is specifically designed to control access to Google Workspace applications based on the "context" of the user and their device. This includes whether the device is managed (company-issued) or unmanaged (personal), its security posture, IP address, and location. By configuring CAA policies, you can enforce that users can only access specific applications if they are using a company-issued device.
Here's why the other options are less effective or not the primary solution for this immediate restriction:
B . Enable multi-factor authentication for application access. MFA is a crucial security layer, but it authenticates the user, not the device. A disgruntled employee could still use their personal device with MFA enabled to download data if no device-based restriction is in place. It prevents unauthorized users but not authorized users on unauthorized devices.
C . Enable data loss prevention rules. DLP rules are excellent for preventing sensitive data from leaving the organization (e.g., by blocking sharing of files containing credit card numbers). However, they don't restrict access to applications based on the device type. An employee could still access and potentially download non-DLP-sensitive data from a personal device if only DLP is enabled. The immediate risk is access from personal devices, not just content-based data loss.
D . Configure apps data access to Limited to only allow access to unrestricted services. This option typically refers to allowing specific APIs or services to be accessed by third-party apps, or perhaps limiting access within a highly restricted environment. It's not a direct control mechanism for user access from personal vs. company-issued devices to core Google Workspace applications.
Reference from Google Workspace Administrator:
Protect your business with Context-Aware Access: This is the primary documentation for Context-Aware Access, explicitly mentioning its use case for "Allow access to apps only from company-issued devices." Reference:
About Context-Aware Access: Provides an overview of how CAA works and its capabilities, including controlling access based on device security status (e.g., managed vs. unmanaged).
質問 # 54
Multiple users in your organization are reporting that Calendar invitations sent from a specific department are not being received. You verified that the invitations are being sent and there are no error messages in the sender's logs. You want to troubleshoot the issue. What should you do?
- A. Analyze the message headers of the sent invitations by using the Google Admin Toolbox to identify any delivery issues.
- B. Verify that the senders in the specific department have the necessary permissions to share their calendars externally and send invitations outside of the organization.
- C. Disable and re-enable the Calendar service for the affected users to refresh their connection.
- D. Check the affected users' Calendar settings to confirm whether they have accidentally blocked invitations from the specific department.
正解：A
解説：
Using the Google Admin Toolbox to analyze the message headers of the sent invitations helps you identify if there are any issues with the delivery of the invitations, such as misrouted messages or issues with email delivery to the affected users. This approach will give you detailed information on what might be causing the issue, even if no error messages appear in the sender's logs.
質問 # 55
Your company recently installed a free email marketing platform from the Google Workspace Marketplace. The marketing team is unable to access customer contact information or send emails through the platform. You need to identify the cause of the problem. What should you do first?
- A. Verify that the email marketing platform's subscription is active and up-to-date.
- B. Check the OAuth scopes that are granted to the email marketing platform and ensure the platform has access to Contacts and Gmail.
- C. Use the security investigation tool to review Gmail logs.
- D. Confirm that the "Manage Third-Party App Access" setting in the Admin console is enabled.
正解：B
解説：
When a third-party application from the Google Workspace Marketplace is installed, it requests specific permissions (OAuth scopes) to access Google Workspace data and services. If the marketing team is unable to access customer contact information or send emails, the most likely cause is that the installed email marketing platform was not granted the necessary OAuth scopes for Contacts and Gmail during the installation or approval process.
Here's why other options are less likely to be the first step:
A . Verify that the email marketing platform's subscription is active and up-to-date. While important for continued use, a "free" platform from the Marketplace generally doesn't have a subscription that would prevent initial access to basic functions like contacts and sending emails unless it's a trial that expired, which isn't indicated as the primary problem. This would be a later troubleshooting step if scope issues are ruled out.
C . Confirm that the "Manage Third-Party App Access" setting in the Admin console is enabled. This setting controls whether users can install any third-party apps from the Marketplace. If it were disabled, the app likely wouldn't have been installed in the first place. If it was enabled and then disabled, the app would stop working, but the specific problem points to data access, not app disablement.
D . Use the security investigation tool to review Gmail logs. The security investigation tool is excellent for reviewing security events, but it's more for post-incident analysis or suspicious activity. In this scenario, the problem is a lack of functionality for a newly installed app, not a security breach or misconfiguration that would necessarily show up in Gmail logs immediately as an access issue for the app itself. The OAuth scopes are the more direct and initial point of failure.
Reference from Google Workspace Administrator:
Manage third-party app access to data: Google Workspace administrators can control which third-party apps can access their organization's data. This includes reviewing and managing OAuth API access for configured apps.
Reference:
Understanding OAuth scopes: When an application requests access to Google data, it does so by requesting specific "scopes." These scopes define the particular resources and operations that the application is allowed to perform. For an email marketing platform, scopes for https://www.googleapis.com/auth/contacts (or a more specific contact scope) and https://www.googleapis.com/auth/gmail.send (or a broader Gmail scope) would be crucial.
Controlling which third-party & internal apps can access Google Workspace data: This section in the Admin console specifically allows administrators to review "Configured apps" and check their "OAuth API access." This is where you would see the scopes granted to the email marketing platform.
質問 # 56
Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company's human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?
- A. Collect a list of users who received the messages. Search the recipients' email addresses in Google Vault. Export and download the malicious emails in PST file format. Add the sender's email address to a quarantine list setting in Gmail to quarantine any future emails from the sender.
- B. Search for the sender's email address by using the security investigation tool. Delete the messages. Turn on the safety options for spoofing and authentication protection in Gmail settings.
- C. Search the sender's email address by using Email Log Search. Identify the users that received the messages. Instruct them to mark them as spam in Gmail, delete the messages, and empty the trash.
- D. Search for the sender's email address by using the security investigation tool. Mark the messages as phishing. Add the sender's email address to the Blocked senders list in the Spam, Phishing and Malware setting in Gmail to automatically reject future messages.
正解：D
解説：
The security investigation tool in Google Workspace allows you to identify the impacted users and messages. By marking the messages as phishing, you acknowledge their malicious nature, helping to protect the users. Adding the sender's email address to the Blocked senders list ensures that future messages from this sender will be automatically blocked, preventing recurrence of similar incidents.
質問 # 57
Your company's sales team writes many business proposals in Google Docs. They want to streamline the proposal process by using templates. You need to create a document template with pre-populated sections that the sales team can access. What should you do?
- A. Enable organization branding in the Admin console. Create the templates in Google Drive. Add the templates to default themes and templates for the entire organization.
- B. Create the templates in Google Drive. Make a copy for each sales representative. Transfer ownership of each template to the sales representatives.
- C. Create the templates in Google Drive and download the files as PDFs. Upload PDF files to a drive shared with your sales team.
- D. Create the templates in Google Drive. Grant edit access to the sales team.
正解：A
解説：
To create document templates with pre-populated sections that the sales team can easily access and use to streamline their proposal process, the most efficient and centrally managed approach is to utilize the Google Workspace template gallery. This involves enabling organization branding (though not strictly required for basic templates, it's often associated with organizational templates) and then adding the created templates to the default themes and templates for the entire organization or specific groups.
Here's a breakdown of why option C is correct and why the others are not the ideal solutions:
C . Enable organization branding in the Admin console. Create the templates in Google Drive. Add the templates to default themes and templates for the entire organization.
This option leverages the built-in template gallery feature of Google Workspace. By creating the templates in Google Docs (which are stored in Google Drive) and then adding them to the organization's default themes and templates through the Google Admin console, you make these templates easily discoverable by all users (or a specific organizational unit) when they go to create a new document from the template gallery. Enabling organization branding can help customize the look and feel, but the crucial part is adding the templates to the gallery.
Associate Google Workspace Administrator topics guides or documents reference: The official Google Workspace Admin Help documentation provides detailed instructions on "Create and manage document templates for your organization." This documentation explains how to prepare a document as a template in Google Drive and then submit it through the Admin console to the template gallery, making it available to users within the organization. Topics covered include:Submitting templates to your organization's gallery: This process involves going to Apps > Google Workspace > Drive and Docs > Templates in the Admin console.
Setting up a custom template gallery: The documentation guides administrators on how to manage the templates that appear for their users.
Organizational units: Templates can often be made available to specific organizational units, allowing for tailored templates for different teams like the sales team.
A . Create the templates in Google Drive. Grant edit access to the sales team.
Granting edit access to the sales team on the master templates is problematic. It could lead to accidental or intentional modifications of the original templates, causing inconsistencies and requiring ongoing management to ensure the templates remain in their intended state. Users should ideally create copies of the template to work on, leaving the original template untouched.
Associate Google Workspace Administrator topics guides or documents reference: Best practices for file sharing and collaboration in Google Drive emphasize providing appropriate levels of access. For templates, the goal is usually for users to use the template to create new documents, not to edit the original.
B . Create the templates in Google Drive. Make a copy for each sales representative. Transfer ownership of each template to the sales representatives.
This approach is inefficient and difficult to manage. Creating and transferring ownership of individual copies of the template to each sales representative would be time-consuming for the administrator. Furthermore, if the template needs to be updated, each individual copy would need to be modified, leading to version control issues and inconsistencies across the sales team.
Associate Google Workspace Administrator topics guides or documents reference: Google Drive's sharing and ownership features are designed for collaborative work on documents, not for distributing and managing templates in this manner. Centralized management through the template gallery is the recommended method.
D . Create the templates in Google Drive and download the files as PDFs. Upload PDF files to a drive shared with your sales team.
Saving the templates as PDFs defeats the purpose of having editable templates. The sales team would not be able to easily modify the pre-populated sections or add their specific proposal details to a PDF. Templates are meant to be starting points for new, editable documents.
Associate Google Workspace Administrator topics guides or documents reference: Google Docs is designed for creating and editing documents. Templates are a feature within this editable format, allowing users to start with a pre-structured document that they can then customize. PDFs are for final, non-editable versions.
Therefore, the correct approach is to leverage the Google Workspace template gallery to provide a streamlined and centrally managed way for the sales team to access and use the proposal templates. This is achieved by creating the templates in Google Drive and then adding them to the organizational templates through the Admin console. While enabling organization branding is mentioned in option C, the core functionality relies on the template gallery feature.
質問 # 58
You are investigating a potential data breach. You need to see which devices are accessing corporate data and the applications used. What should you do?
- A. Analyze the audit log in the Admin console for device and application activity.
- B. Analyze the security investigation tool to access device log data.
- C. Analyze the Google Workspace reporting section of the Admin console.
- D. Analyze the User Accounts section in the Google Admin console.
正解：A
質問 # 59
......
Google Associate-Google-Workspace-Administrator 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
合格させるGoogle Associate-Google-Workspace-Administrator試験最速合格にはPassTest：https://www.passtest.jp/Google/Associate-Google-Workspace-Administrator-shiken.html
Associate-Google-Workspace-Administrator問題集で必ず試験合格させる：https://drive.google.com/open?id=1LB-snk20mymnsILe1oVgeX8lhwUZJRy8