（2023)Google-Workspace-Administrator問題集と練習テスト（155問題)
ガイド（2023年最新)リアルなGoogle Google-Workspace-Administrator試験問題
Google Workspace管理者認定試験は、Google Workspaceの管理に必要な知識とスキルを検証する業界で認められた資格です。この認定はGoogle Cloudによって提供され、組織のGoogle Workspace環境を管理および維持する責任を持つ個人を対象としています。Google Workspace管理者認定試験は、ユーザーおよびグループ管理、セキュリティ、コンプライアンス、データ移行などのさまざまな側面で個人の熟練度をテストするように設計されています。
質問 # 45
How can you monitor increases in user reported Spam as identified by Google?
- A. Review post-delivery activity in the BigQuery Export.
- B. Review post-delivery activity in the Email logs.
- C. Review user-reported spam in the Investigation Tool.
- D. Review spike in user-reported spam in the Alert center.
正解：D
解説：
https://support.google.com/a/answer/9104586?hl=en
質問 # 46
Your CISO is concerned about third party applications becoming compromised and exposing Google Workspace data you have made available to them. How could you provide granular insight into what data third party applications are accessing?
What should you do?
- A. Create a report using the OAuth Token Audit Activity logs.
- B. Create a reporting using the API Permissions logs for Installed Apps.
- C. Create a report using the Calendar Audit Activity logs.
- D. Create a report using the Drive Audit Activity logs.
正解：A
解説：
https://support.google.com/a/answer/6124308?hl=en
質問 # 47
In the years prior to your organization moving to Google Workspace, it was relatively common practice for users to create consumer Google accounts with their corporate email address (for example, to monitor Analytics, manage AdSense, and collaborate in Docs with other partners who were on Google Workspace.) You were able to address active employees' use of consumer accounts during the rollout, and you are now concerned about blocking former employees who could potentially still have access to those services even though they don't have access to their corporate email account.
What should you do?
- A. Provision former user accounts with Cloud Identity licenses, generate a new Google password, and place them in an OU with all Google Workspace and Other Google Services disabled.
- B. Provide a list of all active employees to the managers of your company's Analytics, AdSense, etc. accounts, so they can clean up the respective access control lists.
- C. Use the Transfer Tool for Unmanaged Accounts to send requests to the former users to transfer their account to your domain as a managed account.
- D. Contact Google Enterprise Support to provide a list of all accounts on your domain(s) that access non-Google Workspace Google services and have them blocked.
正解：C
解説：
https://support.google.com/a/answer/6178640?hl=en
質問 # 48
You have enabled Automatic Room Replacement for your calendar resources, but it is not working for any instances of a conflict booking. What could be the issue?
- A. Automatic Room Replacement does not work on recurring events.
- B. The calendar resources do not have the Resource Category configured as CONFERENCE_ROOM
- C. This feature requires calendar event owners to have the Buildings and resources administrator privilege
- D. The events have more than 20 attendees.
正解：A
質問 # 49
Your Security Officer ran the Security Health Check and found the alert that "Installation of mobile applications from unknown sources" was occurring. They have asked you to find a way to prevent that from happening.
Using Mobile Device Management (MDM), you need to configure a policy that will not allow mobile applications to be installed from unknown sources.
What MDM configuration is needed to meet this requirement?
- A. In Device Management > Setup > Device Approvals menu, configure the "Requires Admin approval" option.
- B. In Android Settings, ensure that "Allow non-Play Store apps from unknown sources installation" is unchecked.
- C. In the Application Management menu, configure the whitelist of apps that Android, iOS devices, and Active Sync devices are allowed to install.
- D. In the Application Management menu, configure the whitelist of apps that Android and iOS devices are allowed to install.
正解：B
質問 # 50
The organization has conducted and completed Security Awareness Training (SAT) for all employees. As part of a new security policy, employees who did not complete the SAT have had their accounts suspended. The CTO has requested to be informed of any accounts that have been re-enabled to ensure no one is in violation of the new security policy.
What should you do?
- A. Enable "Suspended user made active" rule and select "Deliver to" Super Administrator(s)
- B. Enable "Suspended user made active" rule - Other Recipients: CTO
- C. Enable "Suspicious login" rule - Other Recipients: CTO
- D. Enable "Email settings changed" rule - -Other Recipients: CTO
正解：B
解説：
CTO must be informed when creating the Suspended user made active-A suspended user is made active by an admin Alert. Ref: https://support.google.com/a/answer/3230421?hl=en#zippy=%2Cuser-activity-alerts
質問 # 51
Your organization wants to grant Google Vault access to an external regulatory authority. In an effort to comply with an investigation, the external group needs the ability to view reports in Google Vault. What should you do?
- A. Temporarily assign the super admin role to the users
- B. Share Vault access with external users.
- C. Assign an Archived User license to the external users.
- D. Create accounts for external users and assign Vault privileges.
正解：D
質問 # 52
Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.
What two things should you do? (Choose two.)
- A. Enroll a 2-Factor hardware key on the device using the employee email address.
- B. Enable a User Policy of Multiple Sign In Access and add just the employee email address.
- C. Disable Guest Mode and Public Sessions.
- D. Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.
- E. Enable a Device Policy of Sign In Screen and add the employee email address.
正解：C、D
解説：
https://support.google.com/chrome/a/answer/1375678?hl=en
質問 # 53
A user reached out to the IT department about a Google Group that they own: [email protected]. The group is receiving mail, and each message is also delivered directly to the user's Gmail inbox. The user wants to be able to reply to messages directly from Gmail and have them sent on behalf of the group, not their individual account. Currently, their replies come from their individual account. What would you instruct the user to do?
- A. Create a new content compliance rule that matches the user's outgoing messages with the group copied, and have it modify the sender to be the group address.
- B. Add the user's individual account as a delegate to the group's inbox. They can then toggle between the accounts and use the Gmail interface on behalf of the group.
- C. Add the group as an email address that can be sent from within Gmail, and verify that the user has access. They can then choose to reply from the group.
- D. Set the group address to be the default sender within the group's posting policies.
正解：C
解説：
https://support.google.com/googlecloud/answer/10635789?hl=en
質問 # 54
Your company has an OU that contains your sales team and an OU that contains your market research team. The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties. The market research team also receives that email content, but they want it because it often contains interesting market analysis or competitive intelligence. Constant Contact is often used as the source of these messages. Your company also uses Constant Contact for your own mass email marketing. You need to set email controls at the Sales OU without affecting your own outgoing email or the market research OU.
What should you do?
- A. Create a blocked senders list at the root level, and then an approved senders list at the Market Research OU, both containing the mass email sender addresses.
- B. Create an approved senders list at the Market Research OU that contains the mass email sender addresses.
- C. Create a blocked senders list as the Sales OU that contains the mass email sender addresses, but bypass this setting for Constant Contact emails.
- D. Create a blocked senders list at the Sales OU that contains the mass email sender addresses.
正解：D
解説：
"The sales team is often a target of mass email from legitimate senders, which is distracting to their job duties" and "Constant Contact is often used as the source of these messages". Nowhere in the question did it specify that emails received via Constant Contact should be allowed for the sales OU. It only mentioned that the company uses Constant Contact for its own outgoing emails- which in this case does not affect the answer at all.
質問 # 55
Your company frequently hires from five to ten interns for short contract engagements and makes use of the same generically named Google Workspace accounts (e.g., [email protected], [email protected], [email protected]). The manager of this program wants all email to these accounts routed to the manager's mailbox account also.
What should you do?
- A. Give the manager delegated access to the mailboxes.
- B. Set up recipient address mapping in GMail Advanced Settings.
- C. Configure an Inbound Gateway route.
- D. Setup address forwarding in each account's GMail setting menu.
正解：B
解説：
https://support.google.com/a/answer/6297084#address
質問 # 56
Your organization has just completed migrating users to Workspace. Many employees are concerned about their legacy Microsoft Office documents, including issues of access, editing, and viewing. Which two practices should you use to alleviate user concerns without limiting Workspace collaboration features? (Choose two.)
- A. Demonstrate and train users to use the Workspace Migrate tool.
- B. Configure Context-Aware Access policies to block access to Microsoft Office applications.
- C. Continue to use installed Office applications along with Google Drive for Desktop.
- D. Demonstrate the ability to convert Office documents to native Google file format from Drive.
- E. Deliver training sessions that show the methods to access and edit native Office files in Drive, the Workspace file editors, and Drive for Desktop.
正解：D、E
質問 # 57
After making a recent migration to Google Workspace, you updated your Google Cloud Directory Sync configuration to synchronize the global address list. Users are now seeing duplicate contacts in their global directory in Google Workspace. You need to resolve this issue.
What should you do?
- A. Train users to use Google Workspace's merge contacts feature.
- B. Enable directory contact deduplication in the Google Workspace Admin panel.
- C. Update shared contact search rules to exclude internal users.
- D. Create a new global directory, and delete the original.
正解：C
解説：
https://support.google.com/a/answer/3075991#duplicatecontacts
"To resolve this issue, correct your shared contact search rules to exclude users in your own domain. On the next sync, GCDS attempts to delete the redundant contacts. You might need to adjust the shared contact deletion limit for that first sync.
質問 # 58
Your company has decided to change SSO providers. Instead of authenticating into Google Workspace and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.
What two features are essential to reconfigure in Google Workspace? (Choose two.)
- A. Enable API Permissions for Google Cloud Platform.
- B. Reconfigure user provisioning via Google Cloud Directory Sync.
- C. Replace the third-party IDP verification certificate.
- D. Disable SSO with third party IDP.
- E. Apps > add SAML apps to your domain.
正解：D、E
質問 # 59
After a recent transition to Google Workspace, helpdesk has received a high volume of password reset requests and cannot respond in a timely manner. Your manager has asked you to determine how to resolve these requests without relying on additional staff.
What should you do?
- A. Use a third-party tool for password recovery.
- B. Enable non-admin password recovery.
- C. Create a custom Apps Script to reset passwords.
- D. Create a Google form to submit reset requests.
正解：B
質問 # 60
You are in the middle of migrating email from on-premises Microsoft Exchange to Google Workspace. Users that you have already migrated are complaining of messages from internal users going into spam folders. What should you do to ensure that internal messages do not go into Gmail spam while blocking spoofing attempts?
- A. Ensure that your inbound gateway is configured with all of your Exchange server IP addresses.
- B. Add all users of your domain to an approved sender list.
- C. Train users to click on Not Spam button for emails.
- D. Force TLS for your domain.
正解：B
解説：
Approved senders list-Approved senders are trusted users that send email to your organization. Create an address list of approved senders so messages from these users bypass Gmail's spam filters, and recipients can decide whether they are spam or not. Create the list with individual email addresses, or by adding an entire domain.
https://support.google.com/a/answer/60752?hl=en#:~:text=Approved%20senders%20list%E2%80%94,settings%20in%20Google%20Workspace.
質問 # 61
Your organization has noticed several incidents of accidental oversharing inside the organization. Specifically, several users have shared sensitive Google Drive items with the entire organization by clicking 'anyone in this group with this link can view'. You have been asked by senior management to help users share more appropriately and also to prevent accidental oversharing to the entire organization. How would you best accomplish this?
- A. Determine sharing boundaries for users that work with sensitive information, and then implement target audiences.
- B. Create groups, add users accordingly, and educate users on how to share to specific groups of people.
- C. Disable sharing to the entire organization so that users must consciously add every person who needs access.
- D. Temporarily disable the Google Drive service for individuals who continually overshare.
正解：A
解説：
https://support.google.com/a/answer/9934697?hl=en#zippy=:~:text=Why%20use%20target,for%20broad%20sharing.
質問 # 62
User A is a Basic License holder. User B is a Business License holder. These two users, along with many additional users, are in the same organizational unit at the same company. When User A attempts to access Drive, they receive the following error: "We are sorry, but you do not have access to Google Docs Editors. Please contact your Organization Administrator for access." User B is not presented with the same error and accesses the service without issues.
How do you provide access to Drive for User A?
- A. In Apps > Google Workspace > Drive and Docs, select the organizational unit the users are in and enable Drive for the organizational unit.
- B. In Apps > Google Workspace, determine the Group that has Drive and Docs enabled as a service. Add User A to this group.
- C. Select User A in the Directory, and under the Apps section, check whether Drive and Docs is disabled. If so, enable it in the User record.
- D. Select User A in the Directory, and under the Licenses section, change their license from Basic to Business to add the Drive and Docs service.
正解：B
解説：
https://support.google.com/a/answer/9050643
質問 # 63
All Human Resources employees at your company are members of the "HR Department" Team Drive. The HR Director wants to enact a new policy to restrict access to the "Employee Compensation" subfolder stored on that Team Drive to a small subset of the team.
What should you do?
- A. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
- B. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
- C. Move the subfolder to the HR Director's MyDrive and share it with the relevant team members.
- D. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
正解：A
解説：
"Inherited permissions can't be removed from a file or folder in a shared drive".
ref: https://developers.google.com/drive/api/v3/manage-sharing
質問 # 64
Multiple users across the organization are experiencing video degradation in Meet video calls. As an administrator, what steps should you take to start troubleshooting?
- A. Locate the Meet quality tool, and review the output for issues with quality.
- B. Troubleshoot network bandwidth for the organizer of the meeting.
- C. Update the Admin Console Meet settings to disable streaming.
- D. Push the Meet quality tool to end user devices and run local reports to determine connectivity issues.
正解：A
質問 # 65
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. Drive usage audit log
- B. SAML audit log
- C. Admin audit log
- D. OAuth Token audit log
正解：D
質問 # 66
When reloading Gmail in Chrome, the web browser returns a 500 Error. As part of the troubleshooting process, Google support asks you to gather logs. How can this be accomplished?
- A. Admin.google.com > Reporting > Reports > Apps Reports > Gmail
- B. Chrome > Window Context Menu > More Tools > Task Manager > Screen Capture List of Running Processes
- C. chrome://net-export > Start Logging to Disk > Confirm validity with https://netlog-viewer.appspot.com
- D. Chrome > Window Context Menu > More Tools > Developer Tools > Network Tab > Reload the page to replicate the error > "Export HAR"
正解：D
解説：
chrome://settings/syncSetup
質問 # 67
Your company is using Google Workspace Business Standard. The company has five meeting rooms that are all registered as resources in Google Workspace and used on a daily basis by the employees when organizing meetings. The office layout was changed last weekend, and one of the meeting rooms is now a dedicated room for management. The CEO is complaining that anyone can book the room and requested this room to be used only by the management team and their executive assistants (EAs). No one else must be allowed to book it via Google Calendar. What should you do?
- A. Delete the room from Google Workspace resources, and suggest using a spreadsheet shared with the management and EAs only for the room schedule.
- B. As a super administrator, modify the room calendar sharing settings, and limit it to the management and EAs group.
- C. As a super administrator, create a group calendar named "Management Room," and share it only with the management and the EAs.
- D. Move the room resource to the management and EAs group so that only they can use it.
正解：B
質問 # 68
Your organization has just appointed a new CISO. They have signed up to receive admin alerts and just received an alert for a suspicious login attempt. They are trying to determine how frequently suspicious login attempts occur within the organization. The CISO has asked you to provide details for each user account that has had a suspicious login attempt in the past year and the number of times it occurred for each account.
What action should you take to meet these requirements?
- A. Use the login audit report to export all suspicious login details for analysis.
- B. Use the account activity report to export all suspicious login details for analysis.
- C. Create a custom query in BigQuery showing all suspicious login details.
- D. Create a custom dashboard with the security investigation tool showing suspicious logins.
正解：A
解説：
Login audit log Track user sign-in activity You can use the Login audit log to track user sign-ins to your domain. You can review all sign-ins from web browsers. If a user signs in from an email client or a non-browser application, you can only review reports of suspicious attempts. Forward log event data to the Google Cloud Platform You can opt in to share the log event data with Google Cloud Platform. If you turn on sharing, data is forwarded to Cloud Logging, where you can query and view your logs, and control how you route and store your logs https://support.google.com/a/answer/4580120?hl=en
質問 # 69
......
Google-Workspace-Administrator試験問題集パスできる2023年最新の認証された試験問題：https://www.passtest.jp/Google/Google-Workspace-Administrator-shiken.html
Google-Workspace-Administrator試験問題リアルな最新問題PDF：https://drive.google.com/open?id=1WhbaVLtI0Nfu7tF3tnTFmlhDjiXJJHvO