素晴らしいGoogle-Workspace-Administrator試験問題集試そうGoogle-Workspace-Administrator問題集PDF
Google-Workspace-Administrator問題集PDFでGoogle-Workspace-Administratorリアル試験問題解答
Google Workspace Administrator認定試験は、Google Workspaceの管理と管理を専門とする経験豊富なITプロフェッショナルを対象としています。この試験では、ユーザーとグループ管理、電子メールのルーティングと配信、デバイス管理、セキュリティとコンプライアンスなど、さまざまなトピックをカバーしています。これは、Google Workspace Administrationのベストプラクティスを深く理解し、その機能と機能に関する包括的な知識を必要とする挑戦的な試験です。
質問 # 50
Your CISO is concerned about third party applications becoming compromised and exposing Google Workspace data you have made available to them. How could you provide granular insight into what data third party applications are accessing?
What should you do?
- A. Create a report using the Calendar Audit Activity logs.
- B. Create a reporting using the API Permissions logs for Installed Apps.
- C. Create a report using the Drive Audit Activity logs.
- D. Create a report using the OAuth Token Audit Activity logs.
正解：D
解説：
https://support.google.com/a/answer/6124308?hl=en
質問 # 51
Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.
What should you do?
- A. Install Google Cloud Directory Sync on all Domain Controllers.
- B. Install Google Apps Manager to automate add-user scripts.
- C. Install Google Workspace Sync for Microsoft Outlook on all employees' computers.
- D. Install Google Cloud Directory Sync on a supported server.
正解：D
解説：
https://support.google.com/a/answer/6123896
質問 # 52
Your organization implemented Single Sign-On (SSO) for the multiple cloud-based services it uses. During authentication, one service indicates that access to the SSO provider is not possible due to invalid information. What should you do?
- A. Verify that the Audience element in the SAML Response matches the assertion consumer service (ACS) URL
- B. Ensure that Microsoft's Active Directory Federation Services 2.0 sends encrypted SAML Responses in default configurations.
- C. Update the validation certificate.
- D. Run nslookup to confirm that the service exists.
正解：A
質問 # 53
Your organization has decided to enforce 2-Step Verification for a subset of users. Some of these users are now locked out of their accounts because they did not set up 2-Step Verification by the enforcement date. What corrective action should you take to allow the users to sign in again?
- A. Disable 2-Step Verification organization-wide so all users can successfully sign in.
- B. Disable 2-Step Verification per organizational unit so the affected users can sign in.
- C. Move the affected users into the exception group permanently so they do not have to use 2-Step Verification going forward.
- D. Move the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.
正解：D
質問 # 54
Your company works regularly with a partner. Your employees regularly send emails to your partner's employees. You want to ensure that the Partner contact information available to your employees will allow them to easily select Partner names and reduce sending errors.
What should you do?
- A. Create shared contacts in the Directory using the Domain Shared Contacts API.
- B. Educate users on creating personal contacts for the Partner Employees.
- C. Add a secondary domain for the Partner Company and create user entries for each Partner user.
- D. Create shared contacts in the Directory using the Directory API.
正解：A
解説：
https://developers.google.com/admin-sdk/domain-shared-contacts
質問 # 55
You have enabled Automatic Room Replacement for your calendar resources, but it is not working for any instances of a conflict booking. What could be the issue?
- A. Automatic Room Replacement does not work on recurring events.
- B. The events have more than 20 attendees.
- C. The calendar resources do not have the Resource Category configured as CONFERENCE_ROOM
- D. This feature requires calendar event owners to have the Buildings and resources administrator privilege
正解：A
質問 # 56
Your company's Google Workspace primary domain is "mycompany.com," and it has acquired a startup that is using another cloud provider with a domain named "mystartup.com." You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO's email address is [email protected], which also matches your company CEO's email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?
- A. Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
- B. Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
- C. Create the startup employees in the "mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to "mystartup.com," and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
- D. Create a new Google Workspace domain with "mystartup.com," and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
正解：B
質問 # 57
You are the Workspace administrator for an international organization with Enterprise Plus Workspace licensing. A third of your employees are located in the United States, another third in Europe, and the other third geographically dispersed around the world. European employees are required to have their data stored in Europe. The current OU structure for your organization is organized by business unit, with no attention to user location. How do you configure Workspace for the fastest end user experience while also ensuring that European user data is contained in Europe?
- A. Configure three configuration groups within your domain. Assign the appropriate data regions to each corresponding group, but assign no preference to the users outside of the United States and Europe.
- B. Configure a configuration group for European users, and set the data region to "Europe".
- C. Configure a data region at the top level OU of your organization, and set the value to "Europe".
- D. Add three additional OU structures to designate location within the current OU structure. Assign the corresponding data region to each.
正解：B
解説：
https://support.google.com/a/answer/7630496?hl=en#zippy=%2Cstep-set-the-organizational-structure
"put them in a configuration group (to set for users across or within departments)".
質問 # 58
Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices?
Choose 2 answers
- A. Create a company-owned device inventory using serial numbers of devices.
- B. Create a company-owned device inventory using an asset tag.
- C. Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop > Only Allow Google Drive for desktop on authorized devices
- D. Devices > Endpoints > Add a filter-> Management Type > Drive for desktop > Apply
- E. Install the Google Endpoint Verification extension on machines using Drive for Desktop.
正解：C、D
質問 # 59
Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites. What should you do?
- A. Remove all client IDs and scopes from the list of domain-wide delegation API clients.
- B. Modify your Marketplace Settings to block users from installing any app from the Marketplace.
- C. Block each connected app's access.
- D. Set all API services to "restricted access" and ensure that all connected apps have limited access.
正解：A
解説：
https://support.google.com/a/answer/162106?hl=en#zippy=%2Cview-edit-or-delete-clients-and-scopes:~:text=View%2C%20edit%2C%20or,immediately%20stop%20working.
質問 # 60
Your company's Chief Information Security Officer has made a new policy where third-party apps should not have OAuth permissions to Google Drive. You need to reconfigure current settings to adhere to this policy.
What should you do?
- A. Access the Security Menu > API Permissions > choose Drive and Disable High Risk Access.
- B. Access the Security Menu> API Reference > disable all API Access.
- C. Access Apps > Google Workspace > Drive and Docs > Sharing Settings and disable sharing outside of your domain
- D. Access the Security Menu > API Permissions > choose Drive and Disable All Access.
正解：A
質問 # 61
Your organization is expected to start using Google Workspace Enterprise Standard in several countries. During the planning phase, the change management leadership team mandates that meeting rooms near each participant's office location should be suggested when someone creates a Google Calendar event, to simplify the user experience and avoid booking rooms when people would not be able to move easily. What should you do?
- A. Organize users for each location in separate organizational units (OUs). Add room resources to the corresponding OUs so that meeting rooms would be suggested accordingly.
- B. Share each room only with the Dynamic Group defined per each user location so that they can only book the rooms nearby.
- C. Define users' work locations by setting building ID. floor name, and floor section if applicable as the-buildings and rooms are defined.
- D. Organize users for each location in separate Google Groups. Add room resources to the corresponding groups so that meeting rooms would be suggested accordingly.
正解：C
質問 # 62
What steps does an administrator need to take to enforce TLS with a particular domain?
- A. Enable email safety features with the receiving domain.
- B. Set up secure transport compliance with the receiving domain.
- C. Configure an alternate secure route with the receiving domain.
- D. Set up DKIM authentication with the receiving domain.
正解：B
解説：
https://support.google.com/a/answer/2520500?hl=en#:~:text=Add%C2%A0the%20Secure%20transport%20(TLS)%20compliance%C2%A0setting%C2%A0to%20always%20use%20TLS%20for%20email%20sent%20to%20and%20from%20domains%20and%20addresses%20that%20you%20specify.
質問 # 63
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. SAML audit log
- B. Drive usage audit log
- C. OAuth Token audit log
- D. Admin audit log
正解：C
質問 # 64
Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales
& Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company's Information Security policy empowers you, as a Google Workspace admin, to grant provisional access immediately if all of the following conditions are met:
Access to the app is restricted to specific individuals by request only.
The app does not have the ability to read or manage emails.
Immediate notice is given to the Infosec team, followed by the submission of a security risk analysis report within 14 days.
Which actions should you take first to ensure that you are compliant with Infosec policy?
- A. Confirm that the Senior VP's OU has the following Gmail setting disabled before whitelisting the app: "Let users delegate access to their mailbox."
- B. Search the Google Workspace support forum for feedback about the app to include in the risk analysis report.
- C. Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.
- D. Move the Senior VP to a sub-OU before enabling Marketplace Settings > "Allow Users to Install Any App from Google Workspace Marketplace."
正解：C
解説：
https://support.google.com/a/answer/7281227?hl=en
質問 # 65
A user is reporting that after they sign in to Gmail, their labels are not loading and buttons are not responsive. What action should you take to troubleshoot this issue with the user?
- A. Check whether the issue occurs when the user authenticates on a different device or a new incognito window.
- B. Check whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
- C. Check whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.
- D. Collect full message headers for examination.
正解：A
質問 # 66
Your IT team is being asked to fulfill a query by your organization's legal department that requires an MBOX file that will be shared to a third-party partner for eDiscovery. The query must be run on multiple users. Legal has no admin rights to Google Vault. What should you do to fulfil the request?
- A. Use the Investigation Too! to search for the data requested, and export for the legal department.
- B. Create a Google Vault matter for each user account, and share the matters to the legal admin.
- C. Create a Google Vault matter, search for data, and run an export for the legal department.
- D. Search for the data in Gmail, and export for the legal department.
正解：C
解説：
https://support.google.com/vault/answer/2473458?hl=en
質問 # 67
In the years prior to your organization moving to Google Workspace, it was relatively common practice for users to create consumer Google accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners who were on Google Workspace.) You were able to address active employees' use of consumer accounts during the rollout, and you are now concerned about blocking former employees who could potentially still have access to those services even though they don't have access to their corporate email account.
What should you do?
- A. Contact Google Enterprise Support to provide a list of all accounts on your domain(s) that access non-Google Workspace Google services and have them blocked.
- B. Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts, so they can clean up the respective access control lists.
- C. Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google Workspace and Other Google Services disabled.
- D. Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed account.
正解：D
解説：
https://support.google.com/a/answer/6178640?hl=en
質問 # 68
Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.
How should you accomplish this?
- A. In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.
- B. Room participants will need to start the meeting from the remote in the room.
- C. By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.
- D. Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.
正解：A
解説：
https://support.google.com/meethardware/answer/6069329
質問 # 69
Your organization uses a third-party product to filter mail before it arrives at your Workspace Domain. How should you configure Gmail to ensure that inbound messages are not seen as a spam attack due to the volume of mail being received from this product?
- A. Allowlist the IP addresses of the third-party filtering product.
- B. List the IP addresses of the product as an Inbound Gateway.
- C. Add the product's IP addresses to your organization's SPF record.
- D. Add the product's IP addresses as an approved sender.
正解：B
質問 # 70
Your organization has enabled spoofing protection against unauthenticated domains. You are receiving complaints that email from multiple partners is not being received. While investigating this issue, you find that emails are all being sent to quarantine due to the configured safety setting. What should be the next step to allow uses to review these emails and reduce the internal complaints while keeping your environment secure?
- A. Add your partner sending IP addresses to an allowlist.
- B. Change the spoofing protection to deliver the emails to spam instead of quarantining them.
- C. Add your partner domains IPs to the Inbound Gateway setting.
- D. Change the spoofing protection to deliver the emails to inboxes with a custom warning instead of quarantining them.
正解：B
解説：
https://support.google.com/a/answer/9157861?hl=en#:~:text=Move%20email%20to,with%20this%20action.
質問 # 71
Your admin quarantine is becoming a burden to manage due to a consistently high influx of messages that match the content compliance rule Your security team will not allow you to remove or relax this rule, and as a result, you need assistance processing the messages in the quarantine. What is the first step you should take to enable others to help manage the quarantine, while maintaining security?
- A. Give the users super admin rights to view the admin quarantine.
- B. Configure the admin quarantine to allow end users to release messages.
- C. Give the users Services > Security Center admin privileges.
- D. Give the users Services > Gmail > Access Admin Quarantine admin privileges.
正解：D
質問 # 72
......
有効なGoogle-Workspace-Administratorテスト解答とGoogle Google-Workspace-Administrator試験PDF：https://www.passtest.jp/Google/Google-Workspace-Administrator-shiken.html
実際に出るGoogle-Workspace-Administrator試験問題集には正確で更新された問題：https://drive.google.com/open?id=10MMFXo05Ojjpv_n-GCawDNEwPxejRQTh