Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Google
  5. GOOGLE-WORKSPACE-ADMINISTRATOR

Google GOOGLE-WORKSPACE-ADMINISTRATOR Exam
Professional Google Workspace Administrator (Page 13 )

Updated On: 9-Feb-2026
Page 8 of 41
PDF with 199 Questions

You have configured your Google Workspace account on the scheduled release track to provide additional time to prepare for new product releases and determine how they will impact your users.
There are some new features on the latest roadmap that your director needs you to test as soon as they become generally available without changing the release track for the entire organization.

What should you do?

  1. Create a new OU and tum on the rapid release track just for this OU.
  2. Create a new Google Group with test users and enable the rapid release track.
  3. Establish a separate Dev environment, and set it to rapid release.
  4. Ask Google for a demo account with beta access to the new features.

Answer(s): C

Explanation:

https://support.google.com/a/answer/172177



You are using Google Cloud Directory Sync to manage users. You performed an initial sync of nearly 1,000 mailing lists to Google Groups with Google Cloud Directory Sync and now are planning to manage groups directly from Google. Over half the groups have been configured with incorrect settings, including who can post, who can join, and which groups can have external members. You need to update groups to be configured correctly.

What should you do?

  1. Use the bulk upload with CSV feature in the Google Workspace Admin panel to update all Groups.
  2. Update your configuration file and resync mailing lists with Google Cloud Directory Sync.
  3. Create and assign a custom admin role for all group owners so they can update settings.
  4. Use the Groups Settings API to update Google Groups with desired settings.

Answer(s): D

Explanation:

Enable the Groups Settings API:
In the Google Workspace Admin console, enable the Groups Settings API under "Security" > "API controls" > "Manage Domain Wide Delegation".
Authorize API Access:
Set up OAuth 2.0 authorization for your application to access the Groups Settings API.
Update Group Settings Programmatically:
Use the Groups Settings API to programmatically update settings for the Google Groups. You can set parameters such as who can post, who can join, and external member settings.
Automate and Validate Updates:
Develop scripts or use tools to automate the update process for all groups. Validate the changes to ensure that all groups have the correct settings as per your requirements.
Reference
Google Workspace Admin Help: Google Groups Settings API Google Workspace Admin Help: Manage Groups for Business .



Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.

What should you do?

  1. Establish a new Google Workspace tenant with their own admin for each region.
  2. Create an OU for each country. Create an admin role and assign an admin with that role per OU.
  3. Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.
  4. Create a Team Drive per OU, and allow only country-specific administration of each folder.

Answer(s): B

Explanation:

Create Organizational Units (OUs):
In the Google Workspace Admin console, go to "Directory" > "Organizational units".
Create separate OUs for each country.
Assign Admin Roles:
Go to "Admin roles" in the Admin console.
Create custom admin roles with permissions restricted to managing users, groups, and settings within their specific OU.
Ensure that the role does not grant permissions to manage other OUs.
Assign Country-Specific Admins:
Assign the newly created admin roles to the appropriate administrators, ensuring they have control only over their respective country's OU.
Reference
Google Workspace Admin Help: Create and manage organizational units Google Workspace Admin Help: Admin roles



In your organization, users have been provisioned with either Google Workspace Enterprise, Google Workspace Business, or no license, depending on their job duties, and the cost of user licenses is paid out of each division's budget. In order to effectively manage the license disposition, team leaders require the ability to look up the type of license that is currently assigned, along with the last logon date, for their direct reports.

You have been tasked with recommending a solution to the Director of IT, and have gathered the following requirements:

Team leaders must be able to retrieve this data on their own (i.e., self-service). Team leaders are not permitted to have any level of administrative access to the Google Workspace Admin panel.
Team leaders must only be able to look up data for their direct reports.
The data must always be current to within 1 week.
Costs must be mitigated.
What approach should you recommend?

  1. Export log data to BigQuery with custom scopes.
  2. Use a third-party tool.
  3. Use App Script and filter views within a Google Sheet.
  4. Create an app using AppMaker and App Script.

Answer(s): C

Explanation:

Develop an App Script:
Write an App Script to retrieve user data from the Google Workspace directory, including license type and last login date.
Ensure the script filters data based on the team leader's direct reports.
Create a Google Sheet:
Set up a Google Sheet to display the retrieved data.
Use filter views to restrict the data visible to each team leader, showing only their direct reports.
Automate Data Refresh:
Schedule the App Script to run periodically (e.g., once a week) to ensure the data is up-to-date.
Share with Team Leaders:
Share the Google Sheet with team leaders, ensuring they have view-only access to the relevant filter views.
Reference
Google Workspace Admin Help: App Script
Google Workspace Admin Help: Filter views in Google Sheets



Your organization has been on Google Workspace Enterprise for one year. Recently, an admin turned on public link sharing for Drive files without permission from security. Your CTO wants to get better insight into changes that are made to the Google Workspace environment. The chief security officer wants that data brought into your existing SIEM system.

What are two ways you should accomplish this? (Choose two.)

  1. Use the Data Export Tool to export admin audit data to your existing SIEM system
  2. Use Apps Script and the Reports API to export admin audit data to your existing SIEM system.
  3. Use Apps Script and the Reports API to export drive audit data to the existing SIEM system
  4. Use the BigQuery export to send admin audit data to the existing SIEM system via custom code
  5. Use the BigQuery export to send drive audit data to the existing SIEM system via custom code.

Answer(s): B,D






Post your Comments and Discuss Google GOOGLE-WORKSPACE-ADMINISTRATOR exam prep with other Community members:

Join the GOOGLE-WORKSPACE-ADMINISTRATOR Discussion