[2026年02月最新リリース]Google-Workspace-Administrator試験問題はあなたをパスさせる [Q34-Q59]

[2026年02月最新リリース]Google-Workspace-Administrator試験問題はあなたをパスさせる

Google Google-Workspace-Administrator試験基本問題とアンサー

質問 # 34
Your organization is working on a confidential project with details that cannot be shared through email with anyone outside your organization. You want to add controls in Gmail that prevent any mention of the project from being sent by employees. Only the CEO and the CFO can send information about the project over email and without a delay. What should you do?

• A. Configure the Gmail Restrict delivery setting, and add an allowlist with all domains that your employees are allowed to send emails to. Include the CEO and CFO email addresses to the allowlist.
• B. Configure a Gmail Content compliance rule for outbound email that quarantines all email mentioning the project. Bypass the rule by using the address list with the CEO and CFO email addresses.
• C. Configure a Gmail Content compliance rule for outbound email that quarantines all email mentioning the project. Manually review all quarantined emails and choose to deliver the ones sent by the CEO and CFO.
• D. Configure the Gmail Restrict delivery setting for all outgoing messages, except the internal emails.Add the CEO and CFO email addresses to the allowlist.

正解：B

解説：
A content compliance rule allows you to quarantine emails based on specific content (e.g., mentions of the project), ensuring they are not sent outside the organization. Adding the CEO and CFO to an address list that bypasses this rule ensures that they can send project-related information without delay.

質問 # 35
Your company has a broad, granular IT administration team, and you are in charge of ensuring proper administrative control. One of those teams, the security team, requires access to the Security Investigation Tool. What should you do?

• A. Create a Custom Admin Role with the security settings privilege, and then assign the role to each of the security team members.
• B. Assign the pre-built security admin role to the security team members.
• C. Assign the Super Admin Role to the security team members.
• D. Create a Custom Admin Role with the Security Center privileges, and then assign the role to each of the security team members.

正解：D

解説：
To provide the security team with access to the Security Investigation Tool, the appropriate privileges must be granted through a custom admin role.
Create Custom Admin Role:
In the Google Admin console, navigate to Admin roles.
Click on Create new role.
Assign Security Center Privileges:
Name the role appropriately, such as "Security Investigator".
Under Privileges, expand the Security Center section.
Select the necessary privileges, including access to the Security Investigation Tool.
Assign Role to Users:
After creating the role, go to the Admin roles section.
Click on Assign users and add the relevant security team members to this custom role.
Save and Verify:
Save the role and verify that the assigned users have the correct access.
Creating a custom admin role with specific security privileges ensures that the security team has the necessary tools to perform their duties without granting excessive permissions.
Reference:
Manage admin roles
Security Center overview

質問 # 36
As a Google Workspace administrator for your organization, you are tasked with controlling which third-party apps can access Google Workspace dat a. Before implementing controls, as a first step in this process, you want to review all the third-party apps that have been authorized to access Workspace data. What should you do?

• A. Open Admin Console > Security > API Controls > App Access Control > Manage Google Services.
• B. Open Admin Console > Security > API Controls > App Access Control > Manage Third Party App Access.
• C. Open Admin Console > Security > API Controls > App Access Control > Settings.
• D. Open Admin Console > Security > Less Secure Apps.

正解：B

解説：
https://support.google.com/a/answer/7281227?hl=en#zippy=%2Cstep-manage-third-party-app-access-to-google-services-add-apps:~:text=In%20the%20Admin,App%20Access.

質問 # 37
Your organization is on Google Workspace Enterprise and allows for external sharing of Google Drive files to facilitate collaboration with other Google Workspace customers. Recently you have had several incidents of files and folders being broadly shared with external users and groups. Your chief security officer needs data on the scope of external sharing and ongoing alerting so that external access does not have to be disabled.
What two actions should you take to support the chief security officer's request? (Choose two.)

• A. Automatically block external sharing using DLP rules.
• B. Review who has viewed files using the Google Drive Activity Dashboard.
• C. Create an alert from Drive Audit reports to notify of external file sharing.
• D. Create a custom Dashboard for external sharing in the Security Investigation Tool.
• E. Review total external sharing in the Aggregate Reports section.

正解：C、D

解説：
https://support.google.com/a/answer/7584076?hl=en&ref_topic=7563358

質問 # 38
Your organization has decided to enforce 2-Step Verification for a subset of users. Some of these users are now locked out of their accounts because they did not set up 2-Step Verification by the enforcement date. What corrective action should you take to allow the users to sign in again?

• A. Disable 2-Step Verification organization-wide so all users can successfully sign in.
• B. Move the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.
• C. Move the affected users into the exception group permanently so they do not have to use 2-Step Verification going forward.
• D. Disable 2-Step Verification per organizational unit so the affected users can sign in.

正解：B

質問 # 39
Several users in your organization reported an issue with receiving emails from one particular external sender. You want to troubleshoot the issue and determine whether Google received these emails. What should you do?

• A. Open a support ticket with Google Workspace Support.
• B. Update your MX records to make sure they point to Google mail servers.
• C. Check if your Google Workspace domain registration expired.
• D. Search for missing email messages by using email Log Search (ELS), and determine why messages weren't delivered.

正解：D

解説：
https://support.google.com/a/answer/55299?hl=en

質問 # 40
business information to all employees. They want to learn how often the site is being visited and how it is used. What should you do?

• A. Embed a JavaScript page counter showing usage statistics.
• B. Export the Drive Audit Log filtered to show Site Views.
• C. Export the Apps Usage Activity Report showing Sites activity and send the daily report to the Communications and Training Department.
• D. Add a Google Analytics Web Property ID to the Site.

正解：D

解説：
A is not correct because although JavaScript can be embedded in new Sites, it would not be the most efficient solution when compared to using a Google Analytics Web Property ID.
B is not correct because there is no way to filter that report by Sites, and it only shows which Apps were used, not individual Sites.
C is correct because Google Analytics will give visitor statistics and page reference details.
D is not correct because the Event Description does not show page views and is only 6 months of data.
Reference:
https://support.google.com/a/users/answer/9308837?hl=en

質問 # 41
You are supporting an investigation that is being conducted by your litigation team. The current default retention policy for mail is 180 days, and there are no custom mail retention policies in place. The litigation team has identified a user who is central to the investigation, and they want to investigate the mail data related to this user without the user's awareness.
What two actions should you take? (Choose two.)

• A. Move the user to their own Organization Unit, and set a custom retention policy
• B. Copy the user's data to a secondary account.
• C. Reset the user's password, and share the new password with the litigation team.
• D. Create a hold on the user's mailbox in Google Vault
• E. Create a matter using Google Vault, and share the matter with the litigation team members.

正解：D、E

解説：
Create a Matter in Google Vault:
Log into Google Vault.
Click on "Matters" and then "Create".
Name the matter appropriately (e.g., User Investigation).
Share the matter with the litigation team members by adding their email addresses under the "Sharing" settings.
Create a Hold on the User's Mailbox:
In the created matter, go to the "Holds" tab.
Click on "Create Hold".
Specify the user's email address to place their mailbox under hold.
Set the parameters for the hold to ensure all relevant data is preserved and cannot be tampered with.
Reference
Google Workspace Admin: Create and manage matters in Google Vault
Google Workspace Admin: Create and manage holds in Google Vault

質問 # 42
Your company's security team should be able to investigate unauthorized external file sharing. You need to ensure that the security team can use the security investigation tool and you must follow the principle of least privilege. What should you do?

• A. Grant the super admin role to a delegate from the security team.
• B. Create a pre-built reporting role. Assign the role to the security team alias.
• C. Create a custom admin role with security center privileges. Assign the role to the individual security team members.
• D. Share the Drive audit log with the security team.

正解：C

解説：
By creating a custom admin role with security center privileges, you can ensure that the security team has the necessary access to investigate unauthorized external file sharing while adhering to the principle of least privilege. This approach provides the security team with the specific permissions they need without granting unnecessary broader privileges, such as those associated with the super admin role.

質問 # 43
As a team manager, you need to create a vacation calendar that your team members can use to share their time off. You want to use the calendar to visualize online status for team members, especially if multiple individuals are on vacation What should you do to create this calendar?

• A. Create a secondary calendar under your account, and give your team "See only free/busy" access
• B. Request the creation of a calendar resource, configure the calendar to "Automatically add all invitations to this calendar," and give your team "See only free/busy" access.
• C. Create a secondary calendar under your account, and give your team "Make changes to events" access.
• D. Request the creation of a calendar resource, configure the calendar to "Auto-accept invitations that do not conflict," and give your team "See all event details" access.

正解：B

解説：
https://support.google.com/a/answer/1034381?hl=en#:~:text=Automatically%20add%20all%20invitations%20to%20this%20calendar%E2%80%94All%20invitations%20show%20up%20on%20the%20resource%27s%20calendar%20even%20if%20some%20of%20them%20are%20for%20events%20that%20take%20place%20at%20the%20same%20time.

質問 # 44
Your organization has been using Google Workspace for almost a year, and your annual security and risk assessment initiative is approaching in preparation for the risk assessment you want to quickly review all the security-related settings for Gmail, Drive and Calendar and identify the ones that may be posing risk What should you do?

• A. Review all the alerts in the Alert center
• B. Review the Security health page in the Admin console
• C. Review the Gmail Drive, and Calendar reports in the Reporting section in the Admin console.
• D. Review all settings for each organizational unit (OU) separately because it is the only way to see the security settings tor Workspace apps

正解：B

解説：
* Access Admin Console: Log in to the Google Admin console using your administrator account.
* Navigate to Security Health Page: In the Admin console, go to the Security section and select Security health. This page provides a comprehensive overview of your organization's security settings.
* Review Security Settings: The Security health page lists various security settings for Gmail, Drive, and Calendar. It highlights settings that might pose a risk and provides recommendations for improvement.
* Identify and Mitigate Risks: Carefully review the highlighted settings. Follow the recommendations to enhance your organization's security posture. This ensures that any potential risks are identified and
* mitigated promptly.
References:
* Google Workspace Admin Help: Security health
* Google Workspace Security Best Practices

質問 # 45
Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user's last name and primary email address have to be changed. You need to update the user's data.
What two actions should you take? (Choose two.)

• A. Add the user's old email address to their account in the Google Workspace Admin panel.
• B. Change the user's primary email address in the Google Workspace Admin panel.
• C. Change the user's primary email in Active Directory.
• D. Change the user's last name in Active Directory.
• E. Change the user's last name in the Google Workspace Admin panel.

正解：C、D

解説：
* Update Active Directory: Since your organization syncs directory data from Active Directory to Google Workspace, any changes to user data need to be made in Active Directory first.
* Change Primary Email in AD: Change the user's primary email address in Active Directory. This will ensure that the new email address is synchronized with Google Workspace.
* Change Last Name in AD: Similarly, change the user's last name in Active Directory. This ensures the updated name is synchronized correctly.
* Sync Changes: Wait for the next synchronization cycle of Google Cloud Directory Sync (GCDS) to update the changes in Google Workspace.
* Verify Changes in Google Workspace: After the sync is complete, verify that the changes to the user's email address and last name have been successfully updated in Google Workspace.
References
* Google Support: Google Cloud Directory Sync

質問 # 46
Your company's compliance officer has requested that you apply a content compliance rule that will reject all external outbound email that has any occurrence of credit card numbers and your company's account number syntax, which is AccNo. You need to configure a content compliance rule to scan email to meet these requirements.
Which combination of attributes will meet this objective?

• A. Name the rule > select Outbound and Internal Sending > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers > choose Reject.
• B. Name the rule > select Outbound > select If ANY of the following match > add two expressions: one for Simple Content Match to find AccNo, and one for predefined content match to select Credit Card Numbers
  > choose Reject
• C. Name the rule > select Outbound > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.
• D. Name the rule > select Outbound and Internal Sending > select If ALL of the following match > add two expressions: one for Advanced Content Match to find AccNo in the Body, and one for predefined content match to select Credit Card Numbers > choose Reject.

正解：A

解説：
* Admin Console: Log into the Google Admin console at admin.google.com.
* Gmail Settings: Navigate to Apps > Google Workspace > Gmail > Compliance.
* Create Rule:
* Click on "Add another rule" under the "Content compliance" section.
* Name the rule appropriately (e.g., Reject Sensitive Info).
* Conditions:
* Select "Outbound and Internal Sending" to ensure all outgoing and internal emails are scanned.
* In the "If ANY of the following match" section, add two expressions:
* Simple Content Match: Configure to find "AccNo".
* Predefined Content Match: Select "Credit Card Numbers".
* Action:
* Choose "Reject" as the action for emails that match these conditions.
* Save Rule: Save the rule and apply it to ensure it is active.
References
* Google Workspace Admin: Set up Compliance Rules
* Google Workspace Admin: Configure Content Compliance

質問 # 47
Your executive team has asked you to export all available data for 1,200 of your 1,500 Google Workspace Domain users. How should you proceed to export the data with the least amount of effort?

• A. Contact Google Cloud support to perform the export for you.
• B. Create a shared drive for the exports. Instruct end users to manually use Google Takeout to export the data and place the exported files in the shared drive.
• C. Perform a search in Google Vault for the 500 users and export all of the results.
• D. Contact Google Cloud Support to enable the Data Export tool for your organization, because you have more than 1,000 users, then use the tool to export data for the domain, and remove any unnecessary user data.

正解：D

解説：
The best way to export the data with the least amount of effort is to use the Data Export tool in the Google Workspace Admin console. The Data Export tool allows you to export all, or some, of your organization's data to a Google Cloud Storage archive and download it1. You can use filters to export data from specific organizational units, groups, or users2. However, since you have more than 1,000 users in your organization, you need to contact Google Workspace support before you use the Data Export tool.

質問 # 48
Employees at your organization frequently and mistakenly delete important emails that they receive from your payroll department. The employees have to file support tickets for the IT team to find and restore these emails. You must provide an automated solution that minimizes IT overhead and prevents these emails from being permanently deleted from their inboxes. What should you do?

• A. Create a content compliance rule that targets all internal messages that are sent from the payroll department. Modify the message by prepending a custom subject line to all payroll emails so that employees know not to delete them.
• B. Create an activity rule by using Gmail log events with two conditions: one for the event of an email deletion and another that matches the header address to the payroll department's email. Create an action that restores messages. Set the rule to run every hour.
• C. Create a content compliance rule that targets internal messages. Use an advanced content match for the sender header to match the payroll department's email. Quarantine the message so that administrators can review the email before they release it to the user.
• D. Create an Apps Script project that uses the Gmail API to find any recently deleted emails and automatically restore them to the inboxes. Set the script trigger to be time-driven and run every hour.

正解：B

質問 # 49
Madeupcorp.com is in the process of migrating from a third-party email system to Google Workspace. The VP of Marketing is concerned that her team already administers the corporate AdSense, AdWords, and YouTube channels using their @madeupcorp.com email addresses, but has not tracked which users have access to which service. You need to ensure that there is no disruption.
What should you do?

• A. Contact Google Enterprise Support to identify affected users.
• B. Use a Google Form to survey the Marketing department users.
• C. Assure the VP that there is no action required to configure Google Workspace.
• D. Run the Transfer Tool for Unmanaged users.

正解：D

解説：
https://support.google.com/a/answer/7062710

質問 # 50
Your company recently decided to use a cloud-based ticketing system for your customer care needs. You are tasked with rerouting email coming into your customer care address, [email protected] to the cloud platform's email address, [email protected]. As a security measure, you have mail forwarding disabled at the domain level.
What should you do?

• A. Create a mail contact in the Google Workspace directory that has an email address of your- [email protected]
• B. Create a content compliance rule in the Google Workspace Admin console to change route to your- [email protected]
• C. Create a rule to forward mail in the [email protected] mailbox to your- [email protected]
• D. Create a recipient map in the Google Workspace Admin console that maps [email protected] to [email protected]

正解：B

解説：
* Access the Admin Console: Log into your Google Workspace Admin Console.
* Navigate to Apps: Go to Apps > Google Workspace > Gmail > Compliance.
* Create a Content Compliance Rule: Create a new content compliance rule.
* Set Conditions: Set the condition to apply to incoming mail for [email protected].
* Change Route: Configure the rule to change the route to [email protected]. This effectively reroutes emails without using traditional forwarding, which is disabled at the domain level.
* Save and Apply: Save the compliance rule and ensure it is applied to enforce the new routing policy.
References
* Google Support: Set up content compliance

質問 # 51
The CEO of your company has indicated that messages from trusted contacts are being delivered to spam, and it is significantly affecting their work. The messages from these contacts have not always been classified as spam. Additionally, you recently configured SPF, DKIM, and DMARC for your domain. You have been tasked with troubleshooting the issue.
What two actions should you take? (Choose two.)

• A. Obtain the message header and analyze using Google Workspace Toolbox.
• B. Set up a Gmail routing rule to whitelist the sender.
• C. Validate that your domain is not on the Spamhaus blacklist.
• D. Review the contents of the messages in Google Vault.
• E. Conduct an Email log search to trace the message route.

正解：A、B

解説：
* Obtain the Message Header: Ask the CEO to provide the full email header of the affected messages.
* In Gmail, this can be done by opening the email, clicking on the three dots in the top right corner, and selecting "Show original".
* Analyze the Header Using Google Workspace Toolbox:
* Go to the Google Workspace Toolbox.
* Paste the email header into the toolbox and analyze it to identify where the email might be flagged as spam and why.
* Email Log Search:
* Log into the Google Admin console at admin.google.com.
* Navigate to Reports > Email Log Search.
* Conduct a search using the sender's email address, date, and other relevant details to trace the message route.
* Analyze the logs to see where and why the message might have been marked as spam.
References
* Google Workspace Admin: Trace an email with email log search
* Google Workspace Toolbox: Messageheader

質問 # 52
Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.
How should you accomplish this?

• A. Room participants will need to start the meeting from the remote in the room.
• B. In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.
• C. By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.
• D. Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.

正解：B

解説：
https://support.google.com/meethardware/answer/6069329

質問 # 53
An organization is pushing for an effective way to manage how users access corporate data from mobile devices. A recent change to the organization's wireless settings is allowing WiFi access to users who have personal devices but preventing them from accessing corporate applications and data sources. Users with company-owned devices are not experiencing the same issue. You are tasked with troubleshooting this issue. What should you do?

• A. Disable Advanced Mobile Management and activate the device.
• B. Enable Advanced Mobile Management and approve the device.
• C. Enable Advanced Mobile Management and unblock the device.
• D. Disable Advanced Mobile Management and approve the device.

正解：B

解説：
A is correct because device approval is required before a device can access corporate data, and you can only implement device approvals when using Advanced Mobile Management.
B is not correct because Advanced Mobile Management is required to approve a device.
C is not correct because without first enabling Advanced Mobile Management the device has not had the opportunity to be blocked.
D is not correct because Advanced Mobile Management is required to approve a device.
Reference:
https://support.google.com/a/answer/6328699?hl=en

質問 # 54
You are onboarding a new employee who will use a company-provided Android device. Your company requires the ability to enforce strong security policies on mobile devices, including password complexity requirements and remote device wipe capabilities. You need to choose the appropriate Google Workspace mobile device management solution. What should you do?

• A. Implement Google's basic management solution for the mobile device.
• B. Allow the employee to use their personal device without enrolling it in any mobile device management (MDM) solution.
• C. Implement Google's advanced management solution for the mobile device.
• D. Use a third-party mobile device management (MDM) solution to manage the device.

正解：C

解説：
Google's advanced management solution for mobile devices provides the ability to enforce strong security policies, including password complexity requirements and remote wipe capabilities. Thissolution allows administrators to manage and secure company-provided Android devices, ensuring compliance with company security policies. Advanced management offers greater control over device settings and security features compared to basic management, which is more limited in scope.

質問 # 55
Your organization's information security team has asked you to determine and remediate if a user ([email protected]) has shared any sensitive documents outside of your organization. How would you audit access to documents that the user shared inappropriately?

• A. Open Security Investigation Tool-> Drive Log Events. Add two conditions: Visibility Is External, and Actor Is [email protected].
• B. Open Security Dashboard-> File Exposure Report-> Export to Sheet, and filter for [email protected].
• C. As a super administrator, change the access on externally shared Drive files manually under [email protected].
• D. Have the super administrator use the Security API to audit Drive access.

正解：A

解説：
https://support.google.com/a/answer/11480192?hl=en&ref_topic=11479095#:~:text=View%20files%20shared,Click%20Search.

質問 # 56
You need to grant a specific set of users in your company access to YouTube, and you want to restrict their access to Merchant Center. What should you do?

• A. Contact Google Support and request that they enable YouTube access for the specific set of users and restrict their access to Merchant Center.
• B. Enable YouTube for all users in the company. Individually restrict access to Merchant Center for specific Groups or organizational units (OUs).
• C. Enable access to YouTube at the Group or organizational unit (OU) level for the subset of users.Disable access to Merchant Center.
• D. Create YouTube and Merchant Center as custom web apps. Apply access policies at the Group or organizational unit (OU) level.

正解：C

解説：
By enabling YouTube access at the Group or organizational unit (OU) level, you can target a specific set of users, allowing them to access YouTube. Simultaneously, you can disable access to Merchant Center for those same users, ensuring they can access YouTube but not Merchant Center. This approach uses Google Workspace's built-in capabilities to manage access based on user groups or organizational units.

質問 # 57
Your organization has experienced a recent increase in unauthorized access attempts to your company's Google Workspace instance. You need to enhance the security of user accounts while following Google- recommended practices. What should you do?

• A. Enforce a strong password policy that requires users to include special characters, numbers, and uppercase letters.
• B. Implement a strong password policy and enable text messages as the 2-Step Verification (2SV) using text messages.
• C. Enforce the use of physical security keys as the 2-Step Verification (2SV) method for all users.
• D. Disable password recovery options to prevent unauthorized individuals from accessing user accounts.

正解：C

解説：
Enforcing the use of physical security keys for 2-Step Verification (2SV) provides a highly secure method of protecting user accounts from unauthorized access. Physical security keys are one of the most robust forms of two-factor authentication because they cannot be easily phished or stolen, even if an attacker knows the user's password. Google recommends using physical security keys as the 2SV method, as they provide strong protection against unauthorized access attempts.

質問 # 58
Your marketing department needs an easy way for users to share items more appropriately. They want to easily link-share Drive files within the marketing department, without sharing them with your entire company. What should you do to fulfil this request? (Choose two.)

• A. In the admin panel Drive settings, create a target audience that has all of marketing as members.
• B. Create a shared drive for internal marketing use.
• C. Update the link sharing default to the marketing team when creating a document.
• D. Update Drive sharing for the marketing department to restrict to internal.
• E. Create a shared drive that's shared internally organization-wide.

正解：A、B

解説：
https://support.google.com/a/answer/9934697?hl=en

質問 # 59
......

2026年最新のリアルな無料Google Google-Workspace-Administrator試験問題集問題と解答：https://www.passtest.jp/Google/Google-Workspace-Administrator-shiken.html

Google-Workspace-Administrator練習テストエンジン購入前に試そう103試験問題：https://drive.google.com/open?id=1WhbaVLtI0Nfu7tF3tnTFmlhDjiXJJHvO