Google-Workspace-Administratorリアルな試験問題Google-Workspace-Administrator練習問題集
厳密検証されたGoogle-Workspace-Administrator試験問題集と解答で無料提供のGoogle-Workspace-Administrator問題と正解付き
Google Cloud Certified-Professional Google Workspace Administrator認定を獲得すると、候補者のスキルを検証するだけでなく、クラウドベースの生産性とコラボレーションツールの最新トレンドとベストプラクティスを最新の状態に保つというコミットメントも示しています。この認定は、個人がその中で自分のキャリアを前進させ、収益の可能性を高め、新しい雇用機会を開くのに役立ちます。
質問 # 29
Your business partner requests that a new custom cloud application be set up to log in without having separate credentials.
What is your business partner required to provide in order to proceed?
- A. Service provider logout URL
- B. Service provider ACS URL
- C. Service provider certificate
- D. Identity Provider URL
正解：B
解説：
Reference:
we need ACS URL for adding custom SAML App , using Google as the Idp
質問 # 30
Your organization's legal team is conducting a legal review of an employee. The default retention period for your organization is indefinite. You must assist your legal team with retrieving the employee's emails for a one month period. What should you do?
- A. Specify the time frame and user by using Google Vault's audit reports. Export the report as a CSV file.
- B. Restore the user's deleted Gmail messages from the Admin console and export the user's inbox messages by using an API.
- C. Create a new Matter inside Google Vault. Specify Gmail, the user, and the timeframe to retrieve messages.
- D. Create a new retention rule inside Google Vault. Specify Gmail and the timeframe to retain messages.
正解：C
解説：
Every legal search regarding an employee needs to start with a new Matter creation in Google Vault. Given the retention policy is indefinite, all the employees' data is intact.
質問 # 31
You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?
- A. Train users to click on Not Spam button for emails.
- B. Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.
- C. Add all users of your domain to an approved sender list.
- D. Force TLS for your domain.
正解：B
解説：
https://support.google.com/a/answer/9228551#legacy-as-primary
After migrating from exchange, you configure a forwarding of migrated mailboxes to Workspace, and you need to configure inbound mail gateway to allow the high volume traffic coming from the exchange.
質問 # 32
Your organization has decided to enforce 2-Step Verification for a subset of users. Some of these users are now locked out of their accounts because they did not set up 2-Step Verification by the enforcement date. What corrective action should you take to allow the users to sign in again?
- A. Disable 2-Step Verification organization-wide so all users can successfully sign in.
- B. Move the affected users into the exception group permanently so they do not have to use 2-Step Verification going forward.
- C. Disable 2-Step Verification per organizational unit so the affected users can sign in.
- D. Move the affected users into the exception group temporarily so they can set up 2-Step Verification, and then remove them from the exception group after successful sign-in is confirmed.
正解：D
質問 # 33
A company using Google Workspace has reports of cyber criminals trying to steal usernames and passwords to access critical business data.
You need to protect the highly sensitive user accounts from unauthorized access.
What should you do?
- A. Turn on password expiration.
- B. Enforce 2FA with Google Authenticator app.
- C. Use a third-party identity provider.
- D. Enforce 2FA with a physical security key.
正解：D
解説：
Reference:
https://support.google.com/a/answer/175197?hl=en#keys&prompt&authentic&codes&phone&2sv
&security
https://support.google.com/a/answer/175197?hl=en
質問 # 34
A user does not follow their usual sign-in pattern and signs in from an unusual location.
What type of alert is triggered by this event?
- A. User sign-in alert.
- B. Suspicious login activity alert.
- C. Leaked password alert.
- D. Suspicious mobile activity alert.
正解：B
質問 # 35
Two months ago, your organization's board set an ambitious goal to publish a data driven report on the environmental impact of their IT operations. You must provide the data for the board report. Which report should you share?
- A. Monthly update reports
- B. Costs report
- C. Work insights report
- D. Carbon footprint report
正解：D
解説：
https://support.google.com/a/answer/13761003
質問 # 36
An employee at your company does not need access to their Workspace account while they are on leave for a year. When they return, you need to ensure they have access to their account and that all their data and current emails remain intact. Also, their shared documents must be available to other users. You must accomplish this goal in the most cost-effective way. What should you do?
- A. Suspend their account in the Admin console.
- B. Assign an Archive User license.
- C. Remove the user license in the Admin console.
- D. Delete the user after copying their emails and reassigning their documents to their manager.
正解：B
解説：
Suspended accounts are still charged at the same rate as active accounts on both the Annual billing plan and the Flexible plan.
https://support.google.com/a/answer/33312?hl=en
Removing user license will not help in maintaining user data and providing access to others.
質問 # 37
You are the administrator of a domain that requires iOS mobile device management. What initial steps should be taken to ensure that you can properly manage end-user iOS devices?
- A. Configure an Apple Push Certificate, and select "certificate never expires."
- B. In the Admin console, navigate to iOS management, and enable the Apple Push Certificate connector.
- C. Follow the prompts under "company owned devices," and select "iOS Management." Select the option to "enforce management on iOS devices."
- D. Configure an Apple Push Certificate, and be sure to use a work address that can be accessed in the future.
正解：D
質問 # 38
You have configured Secure Transport (TLS) Compliance for all messages coming to and from an external domain, altostrat.com, that your end users communicate with via Gmail. What will your end users experience when messages are delivered to them from altostrat.com without TLS enabled?
- A. A warning banner will appear on the message informing the user that the message was not sent securely.
- B. The message will be delivered to their spam folder.
- C. The user will receive a failure message informing them that the message could not be delivered to their inbox and that they will need to work with their Workspace administrator to resolve the issue.
- D. The message will not be delivered to the end user in any form.
正解：D
解説：
Incoming messages from non-TLS connections are rejected without any notification to you. The sender gets a non-delivery report.
https://support.google.com/a/answer/2520500?hl=en#zippy=%2Cunderstand-what-happens-to- messages-sent-to-or-from-servers-that-dont-use-tls
質問 # 39
A large enterprise that had a security breach is working with an external legal team to determine best practices for an investigation. Using Google Vault, the security team is tasked with exporting data for review by the legal team. What steps should you take to securely share the data in question?
- A. Immediately suspend the user's account, assign an archived user license, and export data.
- B. Immediately suspend the user's account, search for all the email messages in question, and forward to the legal team.
- C. Determine the scope of the investigation, create a Matter and Holds in Google Vault, and share with the legal team.
- D. Suspend the user's account, search all associated users data in Google Vault, and export the data.
正解：D
解説：
To securely share data using Google Vault for an investigation:
* Suspend the user's account to prevent further changes to their data.
* Use Google Vault to search for all associated user data relevant to the investigation.
* Export the data securely from Google Vault. These steps ensure that the data remains intact and secure throughout the investigation process.
References:
* Google Workspace Admin Help - Export data from Google Vault
* Google Workspace Admin Help - Manage user accounts
質問 # 40
Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales
& Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company's Information Security policy empowers you, as a Google Workspace admin, to grant provisional access immediately if all of the following conditions are met:
Access to the app is restricted to specific individuals by request only.
The app does not have the ability to read or manage emails.
Immediate notice is given to the Infosec team, followed by the submission of a security risk analysis report within 14 days.
Which actions should you take first to ensure that you are compliant with Infosec policy?
- A. Move the Senior VP to a sub-OU before enabling Marketplace Settings > "Allow Users to Install Any App from Google Workspace Marketplace."
- B. Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.
- C. Confirm that the Senior VP's OU has the following Gmail setting disabled before whitelisting the app: "Let users delegate access to their mailbox."
- D. Search the Google Workspace support forum for feedback about the app to include in the risk analysis report.
正解：B
解説：
Step by Step Comprehensive Detailed Explanation:
To comply with the company's Information Security policy while granting provisional access to a new Marketplace app, follow these steps:
Add the Marketplace App: Start by adding the requested app to your Google Workspace Marketplace.
Review Authorized Scopes:
Go to the Admin console.
Navigate to Security > API controls > Manage third-party app access.
Add the app and review the scopes it requests. Ensure it doesn't request permission to read or manage emails.
Compliance Steps:
Restrict Access: Configure the app to be accessible only to the specific individuals as per the request.
Immediate Notification: Inform the Infosec team immediately about the provisional access granted.
Security Risk Analysis Report: Prepare and submit a security risk analysis report within 14 days, detailing the app's functionality and security implications.
Verification: Ensure that the Gmail setting "Let users delegate access to their mailbox" is disabled if the app's authorized scopes are compliant with the policy.
Reference:
Manage third-party app access to Google Workspace data
Google Workspace Security: API Controls
質問 # 41
Your-company.com recently started using Google Workspace. The CIO is happy with the deployment, but received notifications that some employees have issues with consumer Google accounts (conflict accounts).
You want to put a plan in place to address this concern.
What should you do?
- A. Rename the accounts to [email protected], and recreate the accounts.
- B. Use the Transfer tool for unmanaged users to find the conflict accounts.
- C. Ask users to request a new Google Workspace account from your local admin.
- D. Use the conflict account remove tool to remove the accounts from Google Workspace.
正解：B
解説：
* Access the Transfer Tool:
* In the Google Workspace Admin console, navigate to "Users" > "Transfer tool for unmanaged users".
* Identify Conflict Accounts:
* Use the tool to search for unmanaged users (conflict accounts) that have email addresses matching your company domain.
* Send Transfer Requests:
* Send transfer requests to the identified unmanaged users, asking them to transfer their accounts to your Google Workspace domain.
* Complete the Transfer:
* Guide the users through the transfer process to ensure their accounts are moved to the managed Google Workspace environment.
* Verify the transfer completion and resolve any remaining conflicts.
References
* Google Workspace Admin Help: Transfer tool for unmanaged users
質問 # 42
Multiple users across the organization are experiencing video degradation in Meet video calls. As an administrator, what steps should you take to start troubleshooting?
- A. Locate the Meet quality tool, and review the output for issues with quality.
- B. Troubleshoot network bandwidth for the organizer of the meeting.
- C. Push the Meet quality tool to end user devices and run local reports to determine connectivity issues.
- D. Update the Admin Console Meet settings to disable streaming.
正解：A
解説：
To troubleshoot video degradation issues in Google Meet, the first step should be to locate the Meet Quality Tool and review the output for issues with quality. This tool provides detailed insights into the performance and quality of Meet calls, including network metrics, device performance, and user feedback. By analyzing this data, administrators can identify specific causes of degradation and take appropriate actions to resolve them.
Reference:
Google Workspace Admin Help - Use the Google Meet quality tool
質問 # 43
Your organization has upgraded to a Google Workspace edition with Vault and has hired a new audit team You are configuring access for this audit team with these privileges
* Chief legal executive - reporting privileges
* Legal audit manager - full Vault privileges
* Data reviewer - searching privileges
You must enable access for these three roles What should you do?
- A. Set up Google Vault service as On for these specific users.
- B. Set up an Admin role with minimal Vault privileges and assign the rote to all Vault users Approve additional privileges that are requested through a formal approval process
- C. Set up three different Admin roles with specific privileges that match the audit teams responsibilities Assign these Admin roles to the respective users.
- D. Assign Google Vault licenses to these users that allow all privileges required for access
正解：C
解説：
Navigate to Admin Roles: Go to the Google Admin console and navigate to the 'Admin roles' section.
Create Admin Roles: Create three separate admin roles:
Chief Legal Executive: Assign reporting privileges only.
Legal Audit Manager: Assign full Vault privileges.
Data Reviewer: Assign searching privileges.
Assign Roles to Users: Assign the created roles to the respective users (Chief Legal Executive, Legal Audit Manager, Data Reviewer).
Set Up Google Vault Access: Ensure the Google Vault service is turned on for these users by navigating to 'Apps' > 'Google Workspace' > 'Google Vault' and verifying that the service is enabled for their organizational unit.
Reference
Manage admin roles
Google Vault permissions
質問 # 44
Your company wants to enable single sign-on (SSO) for its employees to access a newly acquired cloud-based marketing platform. The marketing platform vendor has confirmed SAML 2.0 compatibility and provided the necessary metadata. You need to streamline user access and centralize authentication through Google Workspace. What should you do?
- A. Enable two-factor authentication for all users to enhance security before implementing SSO.
- B. Instruct employees to log in to the marketing platform using the Sign In with Google functionality.
- C. Create a new SAML application in the Google Admin console.
- D. Request an API key from the marketing platform vendor for SAML integration.
正解：C
解説：
To enable single sign-on (SSO) through Google Workspace, you need to create a new SAML application in the Google Admin console. This allows users to authenticate centrally through Google Workspace when accessing the marketing platform, leveraging SAML 2.0 compatibility. You can then upload the metadata provided by the marketing platform vendor to complete the integration. This approach ensures streamlined access and centralized authentication for your employees.
質問 # 45
Your organization is on Google Workspace Enterprise and allows for external sharing of Google Drive files to facilitate collaboration with other Google Workspace customers. Recently you have had several incidents of files and folders being broadly shared with external users and groups. Your chief security officer needs data on the scope of external sharing and ongoing alerting so that external access does not have to be disabled.
What two actions should you take to support the chief security officer's request? (Choose two.)
- A. Automatically block external sharing using DLP rules.
- B. Review who has viewed files using the Google Drive Activity Dashboard.
- C. Review total external sharing in the Aggregate Reports section.
- D. Create an alert from Drive Audit reports to notify of external file sharing.
- E. Create a custom Dashboard for external sharing in the Security Investigation Tool.
正解：D、E
解説：
Create an Alert for External Sharing:
Access Google Admin Console: Go to admin.google.com and sign in with your administrator account.
Navigate to Rules: Go to "Security" > "Alert Center" > "Manage Rules".
Create a New Rule: Select "Create Rule" and choose "Drive Audit" as the event source.
Configure Rule Settings: Set the conditions to trigger alerts when files or folders are shared externally.
Set Notification Preferences: Configure who should receive the alerts and how they should be notified.
Save the Rule: Save and activate the rule to start receiving alerts on external sharing activities.
Create a Custom Dashboard for External Sharing:
Access Security Investigation Tool: In the Admin console, go to "Security" > "Investigation Tool".
Create a New Investigation: Click "Create" and select "Drive" as the data source.
Set Up Investigation Parameters: Define the parameters to track external sharing activities (e.g., file shared externally, users involved).
Create Dashboard: Save the investigation as a custom dashboard to continuously monitor external sharing activities.
Review and Monitor: Regularly review the dashboard and set up automated reports if necessary.
Reference
Google Workspace Admin Help - Create and manage alerts
Google Workspace Admin Help - Use the security investigation tool
質問 # 46
Your organization has just completed migrating users to Workspace. Many employees are concerned about their legacy Microsoft Office documents, including issues of access, editing, and viewing. Which two practices should you use to alleviate user concerns without limiting Workspace collaboration features?
(Choose two.)
- A. Configure Context-Aware Access policies to block access to Microsoft Office applications.
- B. Demonstrate the ability to convert Office documents to native Google file format from Drive.
- C. Deliver training sessions that show the methods to access and edit native Office files in Drive, the Workspace file editors, and Drive for Desktop.
- D. Continue to use installed Office applications along with Google Drive for Desktop.
- E. Demonstrate and train users to use the Workspace Migrate tool.
正解：B、C
解説：
* Demonstrate Conversion: Show users how to convert Microsoft Office documents to Google file formats directly from Google Drive. This includes right-clicking on the Office file in Drive and selecting "Open with" to choose the appropriate Google file editor.
* Training Sessions: Conduct training sessions for employees to educate them on accessing and editing Office files in their native format using Google Drive, Google Workspace file editors (Docs, Sheets, Slides), and Drive for Desktop.
* Use Drive for Desktop: Train users on how to use Google Drive for Desktop, which allows them to access and edit Microsoft Office files stored in Google Drive using their locally installed Office applications.
* Support Documentation: Provide documentation and resources that detail the steps for both converting files and using Google Drive for Desktop.
References:
* Google Workspace Admin Help - Work with Microsoft Office Files
* Google Drive Help - Use Google Drive for Desktop
質問 # 47
You have configured Secure Transport (TLS) Compliance for all messages coming to and from an external domain. altostrat.com. that your end users communicate with via Gmail. What will your end users experience when messages are delivered to them from altostrat.com without TLS enabled?
- A. The message will not be delivered to the end user in any form.
- B. The message will be delivered to their spam folder.
- C. The user will receive a failure message informing them that the message could not be delivered to their inbox and that they will need to work with their Workspace administrator to resolve the issue.
- D. A warning banner will appear on the message informing the user that the message was not sent securely.
正解：D
質問 # 48
You received this email from the head of marketing:
Hello Workspace Admin:
Next week, a new consultant will be starting on the "massive marketing mailing" project. We want to ensure that they can view contact details of the rest of the marketing team, but they should not have access to view contact details of anyone else here at our company. Is this something that you can help with?
What are two of the steps you need to perform to fulfill this request?
Choose 2 answers
- A. Apply the role of owner to the consultant in the group settings.
- B. Create the consultant inside under the marketing OU.
- C. Create a group that includes the contacts that the consultant is allowed to view.
- D. Ensure that you are assigned the Administrator Privilege of Services > Services settings, and ensure that Services > Contacts > Contacts Settings Message is set.
- E. Create an isolated OU for the consultants who need the restricted contacts access.
正解：C、E
質問 # 49
As the Workspace Administrator, you have been asked to delete a temporary Google Workspace user account in the marketing department. This user has created Drive documents in My Documents that the marketing manager wants to keep after the user is gone and removed from Workspace. The data should be visible only to the marketing manager. As the Workspace Administrator, what should you do to preserve this user's Drive data?
- A. Before deleting the user, add the user to the marketing shared drive as a contributor and move the documents into the new location.
- B. Use Google Vault to set a retention period on the OU where the users reside.
- C. Ask the user to create a folder under MyDrive, move the documents to be shared, and then share that folder with the marketing team manager.
- D. In the user deletion process, select "Transfer" in the data in other apps section and add the manager's email address.
正解：D
解説：
https://support.google.com/a/answer/6223444?hl=en#zippy=%2Ctransfer-user-drive-or-google-data:~:text=You%20can%20transfer,Tap%20Transfer.
質問 # 50
A company has thousands of Chrome devices and bandwidth restrictions. They want to distribute the Chrome device updates over a period of days to avoid traffic spikes that would impact the low bandwidth network.
Where should you enable this in the Chrome management settings?
- A. Randomly scatter auto-updates.
- B. Throttle the bandwidth.
- C. Update over cellular.
- D. Disable Auto update.
正解：A
解説：
Randomly scatter auto-updates over Only available if you choose to scatter updates Specifies the approximate number of days that managed Chrome devices download an update after its release. You can use this setting to avoid causing traffic spikes in old or low-bandwidth networks.
Devices that are offline during this period download the update when they're online again.
Reference:
https://support.google.com/chrome/a/answer/1375678?hl=en#zippy=%2Cauto-update-settings
https://support.google.com/chrome/a/answer/3168106?hl=en
質問 # 51
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?
- A. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
- B. Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.
- C. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
- D. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
正解：D
解説：
To restrict access to the "Employee Compensation" subfolder within a Team Drive (now known as a shared drive), you should move the contents to a new shared drive with restricted membership.
* Current Setup: All HR employees have access to the "HR Department" Team Drive, but only a subset should access the "Employee Compensation" subfolder.
* New Shared Drive:
* Create a New Shared Drive: This shared drive will be specifically for sensitive documents like employee compensation.
* Move Contents: Transfer the files and folders from the "Employee Compensation" subfolder to this new shared drive.
* Manage Membership: Add only the relevant team members to this new shared drive, ensuring that only authorized personnel can access the sensitive information.
* Steps:
* In the Google Admin console, navigate to Drive and Docs > Manage shared drives.
* Create a new shared drive and name it appropriately.
* Move the necessary files and folders into this new shared drive.
* Set the membership and permissions to include only the relevant users.
References:
* Manage shared drives
* Control access to files and folders in shared drives
質問 # 52
......
Google Workspace Administrator認定は、組織のGoogle Workspace展開を管理する責任があるITプロフェッショナルを対象としています。この認定は、Gmail、Google Drive、Google Meet、Google ChatなどのGoogle Workspaceサービスを効果的に展開、構成、および管理するために必要なスキルと知識を検証することを意図しています。
Google Workspace管理者の認定を取得することの主な利点の1つは、Google Workspaceの管理と管理におけるあなたの専門知識と熟練度を示すことです。この認定は、求人市場で他の候補者と差別化することができ、キャリアアップの機会を提供することができます。また、あなたの組織がGoogle Workspaceへの投資を最大限に活用するために必要な知識とスキルを持っていることを保証します。
無料でゲット！高評価Google Google-Workspace-Administrator試験問題集を今すぐダウンロード！：https://www.passtest.jp/Google/Google-Workspace-Administrator-shiken.html
あなたを合格させるGoogle-Workspace-Administrator無料最新問題集でGoogle練習テストしよう：https://drive.google.com/open?id=1CtrCLtm3jrVaVjss1Zir2Su6tuDm1UST