[2025年03月22日] 完全版最新のGoogle-Workspace-Administrator問題集で100%カバー率問題と解答があなたをリアル試験で合格させる [Q21-Q46]

Share

[2025年03月22日] 完全版最新のGoogle-Workspace-Administrator問題集で100%カバー率問題と解答があなたをリアル試験で合格させる

最新Google-Workspace-Administrator試験問題集で有効最新の問題集


Google Cloud Certified -Professional Google Workspace Administrator Examは、Googleワークスペースの管理と管理に関する個人の知識とスキルを評価するように設計されています。この試験は、組織内のGoogleワークスペースの管理と展開を担当するIT専門家を対象としています。 Google Workspaceの機能、セキュリティ、および管理機能を深く理解する必要があります。この試験に合格して、Googleワークスペースを効果的に管理および管理する専門知識があることを示しています。これは、キャリアの進歩と雇用機会に役立つ可能性があります。

 

質問 # 21
Your organization is expected to start using Google Workspace Enterprise Standard in several countries. During the planning phase, the change management leadership team mandates that meeting rooms near each participant's office location should be suggested when someone creates a Google Calendar event, to simplify the user experience and avoid booking rooms when people would not be able to move easily. What should you do?

  • A. Organize users for each location in separate organizational units (OUs). Add room resources to the corresponding OUs so that meeting rooms would be suggested accordingly.
  • B. Define users' work locations by setting building ID. floor name, and floor section if applicable as the-buildings and rooms are defined.
  • C. Organize users for each location in separate Google Groups. Add room resources to the corresponding groups so that meeting rooms would be suggested accordingly.
  • D. Share each room only with the Dynamic Group defined per each user location so that they can only book the rooms nearby.

正解:B


質問 # 22
A retail company has high employee turnover due to the cyclical nature in the consumer space. The increase in leaked confidential content has created the need for a specific administrative role to monitor ongoing employee security investigations. What step should you take to increase the visibility of such investigations?

  • A. Create a 'Custom Role' and add the ability to manage Google Vault matters, holds, searches, and exports.
  • B. Assign the 'Services Admin' role to an administrator with 'Super Admin' privileges.
  • C. Validate that the new administrator has access to Google Vault.
  • D. Create a 'Custom Role' and add all the Google Vault privileges for a new administrator.

正解:A

解説:
Access Admin Console: Log in to the Google Admin console.
Navigate to Admin Roles: Go to Admin roles under Account settings.
Create Custom Role: Click on 'Create new role' and name it appropriately.
Assign Vault Privileges: Select the privileges related to Google Vault, including managing matters, holds, searches, and exports.
Assign Role to User: Assign this custom role to the designated administrator who will handle the security investigations.
Verify Access: Ensure that the new administrator has the necessary access to Google Vault to monitor and manage ongoing security investigations.
Reference:
Google Workspace Admin Help - Create Custom Admin Roles
Google Workspace Admin Help - Google Vault Privileges


質問 # 23
Your team uses Google Drive for collaborating with external companies and partners. A sensitive project with an external organization is about to begin. You are creating the new labels for the project. You must ensure that all labeled documents have the label visible to everyone who has access to the project files. What should you do?

  • A. Create Drive labels and add the users from the external organization to your domain.
  • B. Create Drive labels and add the permissions for all users in the project, including the external users, to view these labels.
  • C. Create Drive labels and apply data protection rules to all project file.
  • D. Create Drive labels and a separate Shared Drive for the project.

正解:B

解説:
https://support.google.com/a/answer/13127870?hl=en


質問 # 24
You have enabled Automatic Room Replacement for your calendar resources, but it is not working for any instances of a conflict booking. What could be the issue?

  • A. This feature requires calendar event owners to have the Buildings and resources administrator privilege
  • B. The events have more than 20 attendees.
  • C. The calendar resources do not have the Resource Category configured as CONFERENCE_ROOM
  • D. Automatic Room Replacement does not work on recurring events.

正解:D

解説:
Automatic Room Replacement does not work on recurring events. This limitation means that if there is a conflict in room booking for a recurring event, the system will not automatically find a replacement room. This feature is designed to work only with single-instance events.
Reference:
Google Workspace Admin Help - Set up automatic room replacement


質問 # 25
Users in your organization have seen a high volume of customer invoices ending up in spam. A customer has provided the following message header for an email that was sent to spam (please see image above.) You need to prevent these emails from going to spam. What should you do?

  • A. Enable DKIM signing to add a DKIM signature to all outgoing messages.
  • B. Ask the customer to create an approved sender list.
  • C. Update SPF records to include all IPs.
  • D. Set the DMARC Percent Option to 100%.

正解:C

解説:
A is not correct because a message from an approved sender can still be blocked by the sender's DMARC policy.
B is not correct because the message will still fail an spf check.
C is correct because the message failed spf check, and updating spf records will allow invoices to pass spf check.
D is not correct because a DKIM signature may prevent spoofing, but alone may not stop the message from being marked as spam.


質問 # 26
You work at a large global holding firm with multiple companies that are united under one Google Workspace deployment. You must ensure that employees can only access documents at the company in which they are employed. What should you do?

  • A. Create a User group for each company and change Google Drive sharing settings to block external sharing.
  • B. Set up data loss prevention (DLP) rules to prevent specific documents from being shared.
  • C. Create an organizational unit (OU) for each company and disable file sharing.
  • D. Set up Google Drive trust rules to prevent access to documents from individual companies.

正解:D


質問 # 27
Your organization recently bought 1.000 licenses for Cloud Identity Premium. The company's development team created an application in the enterprise service bus (ESB) that will read user data in the human resources information system (HRIS) and create accounts via the Google Directory REST API.
While doing the original test before production use, the team observes a 503 error coming from Google API response after a few users are created The team believes the ESB is not the cause, because it can perform 100 requests per second without any problems. What advice would you give the development team in order to avoid the issue?

  • A. Switch from REST API to gRPC protocol for performance improvement
  • B. Use the domain-wide delegation API to avoid the limitation per account.
  • C. Use the batch request architecture, because it can pack 1,000 API calls in one HTTP request.
  • D. Use an exponential back-off algorithm to retry failed requests.

正解:D

解説:
Understand the Error:
A 503 error indicates that the service is unavailable, often due to temporary overloading or maintenance of the server.
This can happen when API rate limits are exceeded.
Exponential Back-Off Algorithm:
This algorithm helps manage retries after a request fails, by exponentially increasing the waiting time between retries.
Start with a short delay and increase it exponentially with each subsequent retry.
Implementation:
Modify the ESB application to include the exponential back-off algorithm.
Ensure that the retries are limited to a reasonable number to avoid indefinite looping.
This approach will help mitigate the temporary overloads by spreading out the request attempts.
Reference
Google Workspace Admin Help: Handle API Errors
Google Developers: Exponential Backoff


質問 # 28
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to preventusers from copying data from work to personal apps on iOS devices? (Choose Two)

  • A. Clear the "allow users to copy data to personal apps" checkbox.
  • B. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Open Docs in Unmanaged Apps
  • C. Navigate to Devices > Mobile and Endpoint > iOS Settings > Data Sharing > Data Protection Turn on "Advanced Mobile Management."
  • D. Clear the "allow items created with managed apps to open in unmanaged apps" checkbox.To prevent users from copying content from a Google app in their work account to a personal account or third-party app on iOS devices, follow these steps:

正解:A、C

解説:
Sign in to the Google Admin console: Use an account with super administrator privileges.
Navigate to Mobile and endpoint management: Go to Devices > Mobile and endpoints > Settings > iOS settings.
Data sharing settings:
In the iOS settings, go to "Data Sharing."
Under "Data Protection," clear the checkbox for "Allow users to copy data to personal apps." This ensures that data cannot be copied from managed Google apps to unmanaged personal apps.
Enable Advanced Mobile Management:
Navigate to Devices > Mobile and endpoint management.
Turn on "Advanced Mobile Management" to enforce the data protection policies on iOS devices.
Reference:
Google Workspace Admin Help - Manage iOS settings
Google Workspace Admin Help - Advanced mobile device management


質問 # 29
Your organization is on Google Workspace Enterprise and allows for external sharing of Google Drive files to facilitate collaboration with other Google Workspace customers. Recently you have had several incidents of files and folders being broadly shared with external users and groups. Your chief security officer needs data on the scope of external sharing and ongoing alerting so that external access does not have to be disabled.
What two actions should you take to support the chief security officer's request? (Choose two.)

  • A. Automatically block external sharing using DLP rules.
  • B. Review who has viewed files using the Google Drive Activity Dashboard.
  • C. Review total external sharing in the Aggregate Reports section.
  • D. Create a custom Dashboard for external sharing in the Security Investigation Tool.
  • E. Create an alert from Drive Audit reports to notify of external file sharing.

正解:D、E

解説:
Create an Alert for External Sharing:
Access Google Admin Console: Go to admin.google.com and sign in with your administrator account.
Navigate to Rules: Go to "Security" > "Alert Center" > "Manage Rules".
Create a New Rule: Select "Create Rule" and choose "Drive Audit" as the event source.
Configure Rule Settings: Set the conditions to trigger alerts when files or folders are shared externally.
Set Notification Preferences: Configure who should receive the alerts and how they should be notified.
Save the Rule: Save and activate the rule to start receiving alerts on external sharing activities.
Create a Custom Dashboard for External Sharing:
Access Security Investigation Tool: In the Admin console, go to "Security" > "Investigation Tool".
Create a New Investigation: Click "Create" and select "Drive" as the data source.
Set Up Investigation Parameters: Define the parameters to track external sharing activities (e.g., file shared externally, users involved).
Create Dashboard: Save the investigation as a custom dashboard to continuously monitor external sharing activities.
Review and Monitor: Regularly review the dashboard and set up automated reports if necessary.
Reference
Google Workspace Admin Help - Create and manage alerts
Google Workspace Admin Help - Use the security investigation tool


質問 # 30
Your client is a 5,000-employee company with a high turn-over rate that requires them to add and suspend user accounts. When new employees are onboarded, a user object is created in Active Directory. They have determined that manually creating the users in Google Workspace Admin Panel is time-consuming and prone to error. You need to work with the client to identify a method of creating new users that will reduce time and error.
What should you do?

  • A. Install Google Cloud Directory Sync on a supported server.
  • B. Install Google Cloud Directory Sync on all Domain Controllers.
  • C. Install Google Apps Manager to automate add-user scripts.
  • D. Install Google Workspace Sync for Microsoft Outlook on all employees' computers.

正解:A

解説:
* Prepare Environment: Ensure you have a supported server to install Google Cloud Directory Sync (GCDS).
* Download GCDS:
* Download Google Cloud Directory Sync from the Google Workspace Downloads page.
* Install GCDS:
* Follow the installation instructions provided by Google to install GCDS on the server.
* Configuration:
* Configure GCDS to synchronize user data from Active Directory to Google Workspace.
* Set up synchronization rules and schedules to ensure that user data is kept up to date automatically.
* Testing and Deployment:
* Test the synchronization to ensure that new user accounts are created accurately in Google Workspace.
* Deploy GCDS in the production environment after successful testing.
References
* Google Workspace Admin: About Google Cloud Directory Sync
* Google Workspace Admin: Install and Set Up GCDS


質問 # 31
Your organization has a new security requirement around data exfiltration on iOS devices. You have a requirement to prevent users from copying content from a Google app (Gmail, Drive, Docs, Sheets, and Slides) in their work account to a Google app in their personal account or a third-party app. What steps should you take from the admin panel to prevent users from copying data from work to non-work apps on iOS devices?

  • A. Navigate to Devices > Mobile and endpoints > Universal Settings > General and turn on Basic Mobile Management.
  • B. Disable "Open Docs in Unmanaged Apps" setting in Google Admin Console's Device management section.
  • C. Navigate to "Data Protection" setting in Google Admin Console's Device management section and disable the "Allow users to copy data to personal apps" checkbox.
  • D. Clear the "Allow items created with managed apps to open in unmanaged apps" checkbox.

正解:C

解説:
https://support.google.com/a/answer/6328700?hl=en&ref_topic=6079327#managed_apps&zippy
=%2Cdata-actions
Allow users to copy Google Workspace items to personal apps
Allows users to copy content from a Google app (such as Gmail, Drive, Docs, Sheets, Slides, Chat, and Meet) to a Google app in their personal account or a third-party app. Also allows users to drag content between Google apps, for any account.
To prevent users from copying or dragging information from their work account, or using the All inboxes feature (which combines messages from multiple Gmail accounts into one inbox), uncheck the box.


質問 # 32
You are a Workspace Administrator with a mix of Business Starter and Standard Licenses for your users. A Business Starter User in your domain mentions that they are running out of Drive Storage Quota. Without deleting data from Drive, what two actions can you take to alleviate the quota concerns for this user? (Choose two.)

  • A. Add other users as "Editors" on the Drive object, thus spreading the storage quota debt between all of them.
  • B. Perform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.
  • C. Make another user the "Owner" of the Drive objects, thus transferring the storage quota debt to them.
  • D. Manually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.
  • E. Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.

正解:C、E

解説:
* Move to Shared Drive:
* Shared Drives in Google Workspace are designed to store files owned by the team or the organization rather than an individual user.
* When files are moved to a Shared Drive, the ownership of those files is transferred to the domain, which means the storage quota for individual users is not affected.
* To move files to a Shared Drive:
* Navigate to Google Drive.
* Select the files or folders to move.
* Right-click and choose "Move to" and select the appropriate Shared Drive.
* Transfer Ownership:
* You can transfer ownership of files from one user to another within the same domain.
* This is helpful if a user is running out of storage quota, as the storage used by the file will count against the new owner's quota.
* To transfer ownership:
* Open the file in Google Drive.
* Click on the Share button.
* Add the new owner and change their role to 'Owner'.
* The new owner must accept the ownership transfer.
References
* Google Workspace Admin Help: Shared Drives
* Google Drive Help: Transfer File Ownership


質問 # 33
Your organization has implemented Single Sign-On (SSO) for the multiple cloud-based services it utilizes.
During authentication, one service indicates that access to the SSO provider cannot be accessed due to invalid information.
What should you do?

  • A. Verify the NameID Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
  • B. Verify the Audience Element in the SAML Response matches the Assertion Consumer Service (ACS) URL.
  • C. Verify the Recipient attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.
  • D. Verify the Subject attribute in the SAML Response matches the Assertion Consumer Service (ACS) URL.

正解:B

解説:
* https://support.google.com/a/answer/2463723?hl=en


質問 # 34
A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?

  • A. Immediately suspend the user's account, assign an archived user license, and export data.
  • B. Suspend the user's account, search all associated users data in Google Vault, and export the data.
  • C. Immediately suspend the user's account, search for all the email messages in question, and forward to the legal team.
  • D. Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.

正解:B

解説:
To securely share data using Google Vault for an investigation:
Suspend the user's account to prevent further changes to their data.
Use Google Vault to search for all associated user data relevant to the investigation.
Export the data securely from Google Vault. These steps ensure that the data remains intact and secure throughout the investigation process.
Reference:
Google Workspace Admin Help - Export data from Google Vault
Google Workspace Admin Help - Manage user accounts


質問 # 35
The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.
What two actions should you take? (Choose two.)

  • A. Verify that DMARC, DKIM, and SPF records are configured correctly for your domain.
  • B. Create a rule requiring secure transport for all messages regarding wire transfers.
  • C. Add the sender of the wire transfer email to the blocked senders list.
  • D. Configure objectionable content to reject messages with the words "wire transfer."
  • E. Enable all admin settings in Gmail's safety > spoofing and authentication.

正解:A、E

解説:
* Verify DMARC, DKIM, and SPF records:
* Sign in to your domain host and navigate to the DNS settings.
* Ensure that SPF (Sender Policy Framework) is set up correctly to prevent email spoofing.
* Configure DKIM (DomainKeys Identified Mail) to add a digital signature to emails sent from your domain.
* Set up DMARC (Domain-based Message Authentication, Reporting & Conformance) to provide instructions to receiving mail servers on how to handle emails that fail SPF or DKIM checks.
* Enable Gmail spoofing and authentication settings:
* Sign in to the Google Admin console.
* From the Admin console Home page, go to "Apps" > "Google Workspace" > "Gmail" > "Safety."
* Enable settings related to spoofing and authentication to add additional layers of protection against phishing attempts.
By verifying these email security settings and enabling spoofing protections, you can help prevent unauthorized or fraudulent emails from being sent, thus reducing the risk of wire transfer fraud.
References:
* Google Workspace Admin Help - Set up SPF records
* Google Workspace Admin Help - Set up DKIM
* Google Workspace Admin Help - Set up DMARC


質問 # 36
Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.
What should you do?

  • A. Establish a new Google Workspace tenant with their own admin for each region.
  • B. Create a Team Drive per OU, and allow only country-specific administration of each folder.
  • C. Create an OU for each country. Create an admin role and assign an admin with that role per OU.
  • D. Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.

正解:C

解説:
Create Organizational Units (OUs):
In the Google Workspace Admin console, go to "Directory" > "Organizational units".
Create separate OUs for each country.
Assign Admin Roles:
Go to "Admin roles" in the Admin console.
Create custom admin roles with permissions restricted to managing users, groups, and settings within their specific OU.
Ensure that the role does not grant permissions to manage other OUs.
Assign Country-Specific Admins:
Assign the newly created admin roles to the appropriate administrators, ensuring they have control only over their respective country's OU.
Reference
Google Workspace Admin Help: Create and manage organizational units
Google Workspace Admin Help: Admin roles


質問 # 37
You are a Workspace Administrator with a mix of Business Starter and Standard Licenses for your users. A Business Starter User in your domain mentions that they are running out of Drive Storage Quot a. Without deleting data from Drive, what two actions can you take to alleviate the quota concerns for this user? (Choose two.)

  • A. Add other users as "Editors" on the Drive object, thus spreading the storage quota debt between all of them.
  • B. Perform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.
  • C. Make another user the "Owner" of the Drive objects, thus transferring the storage quota debt to them.
  • D. Manually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.
  • E. Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.

正解:C、E


質問 # 38
Your company has received help desk calls from users about a new interface in Gmail that they had not seen before. They determined that it was a new feature that Google released recently. In the future, you'll need time to review the new features so you can properly train employees before they see changes.
What action should you take?

  • A. Company Profile > Profile > New User Features > Enable "Scheduled Release"
  • B. Apps > Google Workspace > Gmail > Uncheck "Enable Gmail Labs for my users"
  • C. Company Profile > Profile > New User Features > Enable "Rapid Release"
  • D. Device Management > Chrome > Device Settings > Stop auto-updates

正解:A

解説:
* Access Admin Console:
* Sign in to the Google Admin console.
* Navigate to Company Profile:
* Go to "Company Profile."
* Enable Scheduled Release:
* Click on "Profile."
* Find the "New User Features" section.
* Enable the "Scheduled Release" option to ensure new features are released on a scheduled basis rather than immediately.
* Inform Users:
* Communicate with users about the scheduled release and the timing of new features.
* Prepare training materials and sessions based on the upcoming features.
References:
* Manage New Features
* Google Workspace Release Calendar


質問 # 39
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?

  • A. OAuth Token audit log
  • B. Drive usage audit log
  • C. SAML audit log
  • D. Admin audit log

正解:A

解説:
* Admin Console: Log into the Google Admin console at admin.google.com.
* Security Settings: Navigate to Security > Access and Data Control > API controls.
* Audit Log:
* Click on "OAuth Token Audit Log".
* Review the log entries for any suspicious third-party applications that have access to your Google Workspace data.
* Investigate:
* Identify and investigate any suspicious activities or applications listed in the audit log.
* Revoke access to any untrusted third-party applications.
References
* Google Workspace Admin: View OAuth Token audit log


質問 # 40
Your organization has been on Google Workspace Enterprise for one year. Recently, an admin turned on public link sharing for Drive files without permission from security. Your CTO wants to get better insight into changes that are made to the Google Workspace environment. The chief security officer wants that data brought into your existing SIEM system.
What are two ways you should accomplish this? (Choose two.)

  • A. Use Apps Script and the Reports API to export drive audit data to the existing SIEM system
  • B. Use Apps Script and the Reports API to export admin audit data to your existing SIEM system.
  • C. Use the BigQuery export to send admin audit data to the existing SIEM system via custom code
  • D. Use the Data Export Tool to export admin audit data to your existing SIEM system
  • E. Use the BigQuery export to send drive audit data to the existing SIEM system via custom code.

正解:B、C


質問 # 41
You are in charge of automating and configuring Google Cloud Directory Sync for your organization. Within the config manager, how can you proactively prevent applying widespread deletions within your Workspace environment if your company's LDAP undergoes a substantial modification?

  • A. Manually run Google Cloud Directory Sync only after performing a simulated sync.
  • B. Configure the tool to delete users only when run from the config manager.
  • C. Configure limits for the maximum number of deletions on each synchronization.
  • D. Specify the minimum and maximum number of objects to synchronize in each configuration item.

正解:C

解説:
You can use limits with Google Cloud Directory Sync (GCDS) to set the maximum number of deletions permitted on each simulation or synchronization. If it reaches this limit, GCDS stops and does not sync any changes. https://support.google.com/a/answer/9520714?fl=1


質問 # 42
Your organization is in the process of deploying Google Drive for desktop so that your users can access Drive files directly from their desktops. For security reasons, you want to restrict Drive for desktop to only company-owned devices. What two steps should you take from the admin panel to restrict Drive for desktop to only company-owned devices?
Choose 2 answers

  • A. Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop
    > Only Allow Google Drive for desktop on authorized devices
  • B. Create a company-owned device inventory using serial numbers of devices.
  • C. Install the Google Endpoint Verification extension on machines using Drive for Desktop.
  • D. Create a company-owned device inventory using an asset tag.
  • E. Devices > Endpoints > Add a filter-> Management Type > Drive for desktop > Apply

正解:A、C

解説:
To restrict Drive for desktop to only company-owned devices, you should:
* Go to Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop and select Only Allow Google Drive for desktop on authorized devices. This setting ensures that only authorized devices can use Drive for desktop.
* Install the Google Endpoint Verification extension on machines using Drive for Desktop. This extension helps manage and verify devices, ensuring that only company-owned devices are allowed access.
References:
* Google Workspace Admin Help - Set up Drive for desktop
* Google Workspace Admin Help - Google Endpoint Verification


質問 # 43
You received this email from the head of marketing:
Hello Workspace Admin:
Next week, a new consultant will be starting on the "massive marketing mailing" project. We want to ensure that they can view contact details of the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that you can help with?
What are two of the steps you need to perform to fulfill this request?
Choose 2 answers

  • A. Ensure that you are assigned the Administrator Privilege of Services > Services settings, and ensure that Services > Contacts > Contacts Settings Message is set.
  • B. Create a group that includes the contacts that the consultant is allowed to view.
  • C. Create the consultant inside under the marketing OU.
  • D. Create an isolated OU for the consultants who need the restricted contacts access.
  • E. Apply the role of owner to the consultant in the group settings.

正解:B、D

解説:
To fulfill the request from the head of marketing, you need to:
Create an isolated Organizational Unit (OU) for the consultants who need restricted contact access. This helps in managing and applying specific policies to the consultants without affecting other users.
Create a group that includes the contacts the consultant is allowed to view. This group will contain the marketing team members' contact details, ensuring that the consultant has access only to these specific contacts.
Reference:
Google Workspace Admin Help - Manage user access to contacts
Google Workspace Admin Help - Create and manage groups


質問 # 44
Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new "G-Team." A "G-Team' is composed of a Google Group and a Team Drive/ Secondary Calendar that is shared using that Google Group.
What two design decisions are required to implement this workflow securely? (Choose two.)

  • A. The Apps Script will need to run as a Google Workspace admin.
  • B. The Google Form will need to be limited to internal users only.
  • C. The Apps Script will need to run on a timed interval to process new entries.
  • D. You will need a Cloud SQL instance to store "G-Team' data.
  • E. The Google Form will need to enforce Group naming conventions.

正解:B

解説:
Subscribe to the Google Workspace Release Calendar:
Go to the Google Workspace Updates blog at https://workspaceupdates.googleblog.com/.
Subscribe to the release calendar by clicking on the "Subscribe to updates" button.
This will provide you with real-time updates about new features and changes in Google Workspace.
Join the Google Cloud Connect Community:
Visit the Google Cloud Connect Community at https://cloudconnectcommunity.google/.
Join the community to engage with other Google Workspace administrators and users.
Participate in discussions, ask questions, and stay informed about best practices and upcoming features.
Reference
Google Workspace Updates Blog
Google Cloud Connect Community


質問 # 45
After making a recent migration to Google Workspace, you updated your Google Cloud Directory Sync configuration to synchronize the global address list. Users are now seeing duplicate contacts in their global directory in Google Workspace. You need to resolve this issue.
What should you do?

  • A. Train users to use Google Workspace's merge contacts feature.
  • B. Enable directory contact deduplication in the Google Workspace Admin panel.
  • C. Create a new global directory, and delete the original.
  • D. Update shared contact search rules to exclude internal users.

正解:D


質問 # 46
......

無料セールまもなく終了!100%有効なGoogle-Workspace-Administrator試験:https://www.passtest.jp/Google/Google-Workspace-Administrator-shiken.html

検証済みGoogle-Workspace-Administrator試験解答合格確定させる:https://drive.google.com/open?id=10MMFXo05Ojjpv_n-GCawDNEwPxejRQTh