Question 1

Your organization uses a third-party identity provider (IdP) to manage user authentication and authorization. You need to enable single sign-on (SSO) for Google Workspace and ensure users are authenticated via the IdP. Which two steps must you complete to successfully configure SSO in Google Workspace? (Choose 2)

Options :

A : Disable API access for Google Workspace to ensure all authentication is routed through the IdP.

B : Configure the Google Workspace SAML settings to match the attributes sent by the IdP, such as NameID and email.

C : Enable "Allow users to change their passwords" in the Security settings of the Google Admin console.

D : Upload the IdP-s metadata file or provide the IdP-s SSO URL to the Google Workspace Admin console.

Answer: B,D

Question 2

Your company operates several primary care clinics where employees routinely work with protected health information (PHI). You are in the process of transitioning the organization to Google Workspace from a legacy communication and collaboration system. After you sign the Business Associate Agreement (BAA), you need to ensure that data is handled in compliance with regulations when using Google Workspace. What should you do?

Options :

A :

Implement a third-party backup service that is also compliant with Google Workspace core services.

B : Create a label for Google Drive content to help employees identify sensitive data.

C :

Instruct the staff to not store any PHI in Google Workspace core services, including Google Drive. Docs. Sheets, and Keep.

D : Disable integrations with third-party apps and turn off non-core Google services.

Answer: B

Question 3

A user reports that they accidentally deleted a shared folder from their Google Drive containing important project files. They need the folder and its contents restored immediately, including all sharing permissions and comments. The deletion occurred 20 days ago. How should you proceed?

Options :

A : Guide the user to their Drive Trash and ask them to restore the folder manually.

B : Search for the user in the Google Workspace Admin console. Use the Restore Data option, specify the date range, select Drive, and restore the files.

C : Open a ticket with Google Support to request a full recovery of the deleted folder.

D : Enable Drive File Stream for the user, allowing them to sync their data and recover the folder from their local device.

Answer: B

Question 4

Your organization requires a complete export of all user data (Gmail, Drive, Calendar, etc.) for archiving purposes before transitioning to another platform. You have been tasked with initiating the data export process using the Data Export tool. Which prerequisite must you ensure before initiating the export?

Options :

A : Ensure the Google Workspace account has been active for at least 30 days.

B : Enable "Data Export" in the Admin Console and assign a Data Export role to the appropriate admin.

C : Migrate all users to a single Organizational Unit (OU) to simplify data export.

D : Enable API access for all users in the Admin Console.

Answer: A

Question 5

You need to allow only approved third-party applications from the Google Workspace Marketplace for a specific organizational unit (OU). Which steps should you take to achieve this?

Options :

A : Grant the OU administrator full API access to manage third-party applications.

B : Manually install all third-party apps on user accounts to ensure compliance.

C : Configure the Marketplace allowlist in the Admin Console, specifying the approved apps for the OU.

D : Create a custom allowlist for the OU and disable application access for other OUs.

Answer: C

Higher Test Marks with Free Online Associate-Google-Workspace-Administrator Exam Practice

Buying Options: