GCP-AGWA sample questions

Question 1

You are the Google Workspace Administrator for a university. The university has a strict policy that the 'Faculty' Organizational Unit (OU) must have Google Drive enabled, but the 'Students' OU must not have access to Drive. However, there is a sub-OU under 'Students' called 'Research_Assistants' that requires Drive access. The 'Students' OU is currently set to 'OFF' for Google Drive. How should you configure the 'Research_Assistants' OU to meet this requirement?

Accepted Answer

Select the Research_Assistants OU and change the service status to 'ON'. This will override the inherited 'OFF' setting from the parent.

Answer

Create a configuration group for Research_Assistants and turn Drive ON for the group.

Answer

Move the Research_Assistants OU to be a child of the Faculty OU.

Answer

Drive cannot be enabled for a child OU if the parent OU has it disabled.

Question 2

True or False: When you delete a user account in Google Workspace, you can restore the account and its associated data (including Gmail and Drive content) up to 20 days after deletion.

Accepted Answer

True

Answer

False

Question 3

A large retail company uses dynamic groups to manage email distribution lists based on department attributes. The HR department recently updated the 'Department' attribute for 50 employees from 'Sales' to 'Marketing'. However, these employees are reporting that they are not receiving emails sent to the Marketing dynamic group. You have verified the attribute update in the user profiles. What is the most likely cause for this delay? (Select TWO)

Accepted Answer

Dynamic group membership updates can take up to 24 hours to propagate after an attribute change.

Accepted Answer

The users were manually removed from the dynamic group previously, creating an exclusion exception.

Answer

The dynamic group query syntax is case-sensitive, and the HR update used 'marketing' instead of 'Marketing'.

Answer

The dynamic group query was set to match 'Department=Sales' exclusion rather than 'Department=Marketing' inclusion.

Answer

The dynamic group has reached the maximum member limit for dynamic groups.

Question 4

You are configuring a new domain alias 'example-alias.com' for your primary domain 'example.com'. You need to verify domain ownership by adding a specific DNS record. The most common record type used for instant domain verification in the Google Admin Console is a _____ record.

Accepted Answer

TXT

Answer

MX

Answer

CNAME

Answer

A

Question 5

TechCorp is implementing a hybrid email environment during a migration phase. They want incoming mail to be delivered to Gmail first. If the recipient exists in Gmail, the mail should stay there. If the recipient does not exist in Gmail, the mail should be routed to the legacy on-premises Exchange server.

Which mail routing configuration should you implement?

Accepted Answer

Set up Split Delivery using the 'Email routing' setting, creating a route that catches 'Unrecognized / Catch-all' addresses and forwards them to the legacy server host.

Answer

Configure Dual Delivery in the Admin Console with the Exchange server as the secondary destination.

Answer

Change the MX records to point to the Exchange server first, then configure a connector to forward to Gmail.

Answer

Use the Google Workspace Migration for Microsoft Exchange (GWMME) tool to sync mail continuously.

Question 6

CASE STUDY: GlobalLogistics Inc.

GlobalLogistics Inc. is a shipping company with 5,000 employees distributed across three regions: North America, Europe, and Asia. They have recently adopted Google Workspace Enterprise Standard.

**Current Situation:**
- The company uses a third-party IdP (Okta) for authentication.
- User provisioning is currently manual, which is causing delays.
- The security team requires that only corporate-owned devices can access Google Drive data.
- The legal team needs to retain all email for 7 years for compliance.

**Requirement:**
You need to automate user provisioning from their HR system (Workday) which flows into Okta. You also need to ensure that if a user is suspended in Workday/Okta, they are immediately suspended in Google Workspace.

**Question:**
Which architecture provides the most streamlined solution for the provisioning requirement?

Accepted Answer

Configure SCIM (System for Cross-domain Identity Management) auto-provisioning within the Okta Google Workspace application.

Answer

Configure GCDS to sync directly from Workday to Google Workspace.

Answer

Use the Google Admin SDK to write a custom Python script that polls Workday every 24 hours.

Answer

Configure SAML JIT (Just-in-Time) provisioning in the Google Admin Console.

Free GCP-AGWA sample questions

True or False: When you delete a user account in Google Workspace, you can restore the account and its associated data (including Gmail and Drive content) up to 20 days after deletion.

You are configuring a new domain alias 'example-alias.com' for your primary domain 'example.com'. You need to verify domain ownership by adding a specific DNS record. The most common record type used for instant domain verification in the Google Admin Console is a _____ record.

6 more free samples are waiting