[2025年更新]合格できるGoogle-Workspace-Administrator試験にはリアルな問題解答
Google-Workspace-Administrator試験問題ゲット最新[2025]と正解回答
質問 # 53
Your company has decided to change SSO providers. Instead of authenticating into Google Workspace and other cloud services with an external SSO system, you will now be using Google as the Identity Provider (IDP) and SSO provider to your other third-party cloud services.
What two features are essential to reconfigure in Google Workspace? (Choose two.)
- A. Enable API Permissions for Google Cloud Platform.
- B. Disable SSO with third party IDP.
- C. Apps > add SAML apps to your domain.
- D. Replace the third-party IDP verification certificate.
- E. Reconfigure user provisioning via Google Cloud Directory Sync.
正解：B、C
解説：
* Apps > add SAML apps to your domain:
* When switching to Google as the Identity Provider (IDP) for Single Sign-On (SSO), you need to configure Google Workspace to act as the SSO provider for third-party applications. This involves adding the necessary SAML (Security Assertion Markup Language) applications to your domain within Google Workspace.
* Navigate to the Admin console, go to Apps > Web and mobile apps, and add SAML apps to your domain. This allows Google to authenticate users for those apps.
* Disable SSO with third party IDP:
* Since you are switching from an external SSO provider to Google Workspace as your IDP, you must disable the current SSO configuration with the third-party provider.
* Go to the Admin console, navigate to Security > Set up single sign-on (SSO) with a third party IdP, and disable the existing SSO setup. This ensures that users will now authenticate directly through Google Workspace instead of the previous SSO provider.
References:
* Google Workspace Admin Help: Set up your own custom SAML app
* Google Workspace Admin Help: Disable SSO with third party IdP
質問 # 54
You work for a midsize organization Your compliance and audit learn sees that users are frequently resetting their passwords You must provide accurate information and ensure that the compliance team is informed every time a user changes their password What should you do?
- A. Disable user account recovery so users must contact you before a reset
- B. Check the User's password changed alert in the alert center and include the compliance team in the email notifications
- C. Create a new alert by using user log events and check that event Login type is Google password and include the compliance team in the email notifications
- D. Enable user account recovery and forward any alert to the compliance team through the alert center
正解：B
解説：
Step by Step Comprehensive Detailed Explanation:
* Access the Admin Console: Sign in to your Google Admin console.
* Navigate to the Alert Center: Click on "Security" and then "Alert Center."
* Create New Alert: In the Alert Center, click on "Manage alerts" and then "Add alert rule."
* Configure Alert Rule: Select "User's password changed" as the event type.
* Include Compliance Team: In the alert configuration, add the compliance team's email addresses to the notification recipients.
* Save the Alert: Save the configuration to ensure the compliance team is informed every time a user changes their password.
References:
* Google Workspace Admin Help: Alert Center
質問 # 55
Your organization is expected to start using Google Workspace Enterprise Standard in several countries.
During the planning phase, the change management leadership team mandates that meeting rooms near each participant's office location should be suggested when someone creates a Google Calendar event, to simplify the user experience and avoid booking rooms when people would not be able to move easily. What should you do?
- A. Define users' work locations by setting building ID. floor name, and floor section if applicable as the-buildings and rooms are defined.
- B. Organize users for each location in separate Google Groups. Add room resources to the corresponding groups so that meeting rooms would be suggested accordingly.
- C. Share each room only with the Dynamic Group defined per each user location so that they can only book the rooms nearby.
- D. Organize users for each location in separate organizational units (OUs). Add room resources to the corresponding OUs so that meeting rooms would be suggested accordingly.
正解：A
解説：
* Navigate to Google Admin Console: Go to admin.google.com and sign in with your admin account.
* Access Buildings and Resources: In the Admin console, go to Menu > Directory > Buildings and resources.
* Create Buildings and Rooms: Create buildings and define floors and sections within these buildings.
Each building should represent an office location.
* Set Users' Work Locations: Assign building ID, floor name, and floor section to users. This can be done manually for each user or in bulk using a CSV file upload.
* Configure Calendar Settings: Ensure that the Google Calendar settings are configured to suggest nearby meeting rooms based on users' work locations.
This setup allows Google Calendar to suggest meeting rooms near the users' defined work locations, improving the user experience and avoiding the booking of inconvenient rooms.
References
* Manage buildings, features & resources
* Set up work locations
質問 # 56
An employee at your organization is experiencing video call issues in Google Meet and they were unable to resolve the issues by themselves You need to troubleshoot the issue What should you do first?
- A. View the Meet quality report of the employee
- B. Check the Meet settings of the employee
- C. Restart the device of the employee
- D. Ask your network administrator to add the dedicated Meet IP address range for your users
正解：A
解説：
* Access Admin Console: Log in to the Google Admin console using your administrator account.
* Navigate to Meet Quality Tool: Go to Apps > Google Workspace > Google Meet > Meet quality tool.
* Search for the Employee: Use the search function to locate the employee's recent meeting reports.
* Analyze the Report: Review the quality report, which includes metrics such as network connectivity, audio and video quality, and any issues encountered during the call.
* Identify and Troubleshoot Issues: Based on the report findings, identify the specific issues affecting the video calls and take appropriate actions to resolve them, such as checking network connections or adjusting Meet settings.
References:
* Google Workspace Admin Help: Meet quality tool
* Google Meet Quality Troubleshooting
質問 # 57
Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)
- A. Provide your current GCDS instance with admin credentials to the recently acquired organization's LDAP directory.
- B. Upgrade to the multiple LDAP version of GCDS.
- C. Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended.
- D. Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.
- E. Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.
正解：B、D
解説：
* Additional GCDS Instance:
* Running a separate instance of GCDS on another server allows you to manage synchronization for the acquired organization independently.
* This avoids conflicts and simplifies management for different LDAP directories.
* Multiple LDAP Version:
* Upgrading to the multiple LDAP version of GCDS supports synchronizing data from multiple LDAP directories.
* This is useful for handling different organizations with distinct LDAP setups.
* Steps for Setting Up:
* Install a second instance of GCDS on a separate server.
* Configure the new instance with the acquired organization's LDAP details.
* If using the multiple LDAP version, upgrade your existing GCDS setup and configure rules for both LDAP directories.
* Test the synchronization to ensure proper setup and no conflicts.
References
* Google Workspace Admin Help: Set Up GCDS
質問 # 58
Your organization is planning to remove any dependencies on Active Directory (AD) from all Cloud applications they are using You are currently using Google Cloud Directory Sync (GCDS) with on-premises AD as a source to provision user accounts in Google Workspace. Your organization is also using a software-as-a-service (SaaS) human resources information system (HRIS) that offers integration via CSV export and Open API standard.
Additional requirements for the solution include:
* It should not require a subscription to any additional third-party service.
* The process must be automated from beginning to end.
You are tasked with the design and implementation of a solution to address user provisioning with these requirements.
What solution should you implement?
- A. Set up Azure AD and federate on-premises AD with it. Provision user accounts from Azure AD with the Google-recommended process.
- B. Modify the GCDS configuration to use the HRIS application as the data source and complete any necessary adjustments
- C. Build an application that will fetch updated data from the HRIS system via Open API. and then update Google Workspace with the Directory API accordingly.
- D. Export HRIS data to a CSV file every day. and build a solution to define the delta with the previous day; import the result as a CSV file via the Admin console.
正解：C
解説：
Given the requirements to eliminate dependencies on Active Directory, automate the process, and avoid third-party subscriptions, the best solution is to build an application that will fetch updated data from the HRIS system via its Open API. This application will then use the Directory API to update Google Workspace user accounts accordingly. This approach leverages existing tools (HRIS Open API and Google Directory API), ensures full automation from start to end, and does not require additional subscriptions.
References:
* Google Workspace Admin Help - Directory API
* Google Workspace Admin Help - Google Cloud Directory Sync overview
質問 # 59
How can you monitor increases in user reported Spam as identified by Google?
- A. Review spike in user-reported spam in the Alert center.
- B. Review post-delivery activity in the BigQuery Export.
- C. Review post-delivery activity in the Email logs.
- D. Review user-reported spam in the Investigation Tool.
正解：A
解説：
https://support.google.com/a/answer/9104586?hl=en
質問 # 60
An employee has been leaking confidential salary information to an external party. You must use Vault to preserve the messages for an investigation. What should you do?
- A. Use the search and export features to find all the messages sent externally
- B. Create a custom retention policy Use the audit feature to view captured email logs
- C. Use the security investigation tool to find the messages Create a hold to preserve the messages
- D. Create a matter and add a hold on the employee's email
正解：D
解説：
* Access Google Vault: Go to Google Vault from the Google Admin console.
* Create a Matter: Click on "Matters" and create a new matter to hold the case details and any relevant information.
* Add a Hold: Within the matter, create a hold specifically on the employee's email account. This ensures that all emails sent and received by the employee are preserved.
* Configure the Hold: Specify the criteria for the hold, such as the employee's email address, and set the scope to include all messages.
* Save the Hold: Once configured, save the hold. This will preserve all relevant messages for the investigation.
References:
* Google Vault Help: Create and manage matters
* Google Vault Help: Place data on hold
質問 # 61
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
- A. OAuth Token audit log
- B. Admin audit log
- C. SAML audit log
- D. Drive usage audit log
正解：A
質問 # 62
Your company moved to Google Workspace last month and wants to install Hangouts Meet Hardware in all of their conference rooms. This will allow employees to walk into a room and use the in-room hardware to easily join their scheduled meeting. A distributed training session is coming up, and the facilitator wants to make remote room joining even easier. Participants in remote rooms should walk into their room and begin receiving the training without having to take any actions to join the session.
How should you accomplish this?
- A. In the Admin Console, select the devices in Meeting Room Hardware, select Call, and Enter the meeting code.
- B. By adding the rooms to the Calendar invite, they will all auto-join at the scheduled time.
- C. Room participants will need to start the meeting from the remote in the room.
- D. Select Add Live Stream to the Calendar invite; all rooms added to the event will auto-join at the scheduled time.
正解：D
解説：
* Google Calendar Live Stream:
* When you create a Calendar event, you have the option to add a live stream. This feature allows participants to watch the event without having to actively join the meeting.
* By adding the live stream to the Calendar invite and including the conference rooms, the rooms will automatically start the live stream at the scheduled time.
* Adding Live Stream:
* In the Google Calendar event, select the option to "Add live stream".
* Add the conference rooms to the event as participants. These rooms will automatically connect to the live stream when the event starts.
* Advantages:
* This method ensures that participants in remote rooms can receive the training session without any manual intervention.
* It simplifies the process for users, providing a seamless experience.
References:
* Google Workspace Admin Help: Add live streaming to an event
* Google Meet hardware overview
質問 # 63
Your company's Google Workspace primary domain is "mycompany.com," and it has acquired a startup that is using another cloud provider with a domain named "mystartup.com." You plan to add all employees from the startup to your Google Workspace domain while preserving their current mail addresses. The startup CEO's email address is [email protected], which also matches your company CEO's email address as [email protected], even though they are different people. Each must keep the usage of their email. In addition, your manager asked to have all existing security policies applied for the new employees without any duplication. What should you do to implement the migration?
- A. Create a secondary domain, mystartup.com, within your current Google Workspace domain, set up necessary DNS records, and create all startup employees with the secondary domain as their primary email addresses.
- B. Create a new Google Workspace domain with "mystartup.com," and create a trust between both domains for reusing the same security policies and sharing employee information within the companies.
- C. Create an alias domain, mystartup.com, in your existing Google Workspace domain, set up necessary DNS records, and create all startup employees with the alias domain as their primary email addresses.
- D. Create the startup employees in the "mycompany.com' domain, and add a number at the end of the user name whenever there is a conflict. In Gmail > Routing, define a specific route for the OU that targets the startup employees, which will modify the email address domain to "mystartup.com," and remove any numbers previously added. In addition, confirm that the SPF and DKIM records are properly set.
正解：A
解説：
* Secondary Domain:
* A secondary domain allows you to add another domain to your existing Google Workspace account without creating a separate account.
* This is useful for managing users from different domains under a single Google Workspace instance.
* Steps to Add a Secondary Domain:
* Navigate to the Google Admin console.
* Go to Account > Domains > Manage domains.
* Click "Add a domain" and select "Add another domain".
* Enter the domain name (mystartup.com) and follow the prompts to verify domain ownership by updating DNS records.
* Once verified, create users under the secondary domain:
* Navigate to Directory > Users.
* Click "Add new user" and enter user information, selecting the secondary domain for their email address.
* Ensure all existing security policies are applied by assigning the users to the appropriate organizational units.
References
* Google Workspace Admin Help: Add a Domain
質問 # 64
After making a recent migration to Google Workspace, you updated your Google Cloud Directory Sync configuration to synchronize the global address list. Users are now seeing duplicate contacts in their global directory in Google Workspace. You need to resolve this issue.
What should you do?
- A. Train users to use Google Workspace's merge contacts feature.
- B. Create a new global directory, and delete the original.
- C. Enable directory contact deduplication in the Google Workspace Admin panel.
- D. Update shared contact search rules to exclude internal users.
正解：D
解説：
* Access Admin Console: Log into your Google Workspace Admin Console.
* Update GCDS Configuration: Open the Google Cloud Directory Sync (GCDS) configuration.
* Modify Search Rules: Update the shared contact search rules within GCDS.
* Exclude Internal Users: Modify the rules to exclude internal users from being synchronized as shared contacts.
* Save and Sync: Save the updated configuration and perform a sync to apply the changes, which should resolve the issue of duplicate contacts in the global directory.
References
* Google Support: Google Cloud Directory Sync
質問 # 65
Your-company.com finance departments want to create an internal application that needs to read data from spreadsheets. As the collaboration engineer, you suggest using App Maker. The Finance team is concerned about data security when creating applications with App Maker.
What security measures should you implement to secure data?
- A. Change owner access permissions to allow internal usage only.
- B. Use Roles, Script, and Owner access permissions for operations on records and data relations.
- C. Use a service account with limited permissions to access each data source.
- D. Enable App Maker access only for the Finance department Organization Unit.
正解：B
解説：
* When developing the application in App Maker, define roles that correspond to the different levels of access needed by users.
* Use scripts to control access to data based on user roles. This ensures that only authorized users can perform certain operations.
* Set the owner access permissions appropriately to ensure that data can only be accessed or modified by those with the necessary permissions.
* Regularly review and update roles and permissions to adapt to any changes in the organization or the application's usage.
Implementing these security measures ensures that data in your internal application is accessed and managed securely, mitigating risks associated with unauthorized access.
References:
* Google Workspace Admin Help - App Maker Security
質問 # 66
Your organization has noticed several incidents of accidental oversharing inside the organization. Specifically, several users have shared sensitive Google Drive items with the entire organization by clicking 'anyone in this group with this link can view'. You have been asked by senior management to help users share more appropriately and also to prevent accidental oversharing to the entire organization. How would you best accomplish this?
- A. Create groups, add users accordingly, and educate users on how to share to specific groups of people.
- B. Disable sharing to the entire organization so that users must consciously add every person who needs access.
- C. Determine sharing boundaries for users that work with sensitive information, and then implement target audiences.
- D. Temporarily disable the Google Drive service for individuals who continually overshare.
正解：C
解説：
* Identify Sensitive Information: Determine which users handle sensitive information and assess the current sharing practices.
* Define Sharing Boundaries: Establish clear boundaries and guidelines for sharing sensitive information within the organization.
* Implement Target Audiences: In the Google Admin console, go to Apps > Google Workspace > Drive and Docs > Sharing settings. Set up target audiences for different groups of users based on their roles and the sensitivity of the information they handle.
* Educate Users: Conduct training sessions to educate users on how to share information securely and the importance of adhering to the defined sharing boundaries.
* Monitor Sharing Activity: Regularly monitor sharing activity to ensure compliance with the new policies and to identify any instances of oversharing.
* Adjust Policies as Needed: Based on the monitoring results, make any necessary adjustments to the sharing policies and target audiences to enhance security and prevent accidental oversharing.
References:
* Google Workspace Admin Help - Target Audiences
* Google Workspace Admin Help - Sharing Settings
質問 # 67
As the Workspace Administrator, you have been asked to delete a temporary Google Workspace user account in the marketing department. This user has created Drive documents in My Documents that the marketing manager wants to keep after the user is gone and removed from Workspace. The data should be visible only to the marketing manager. As the Workspace Administrator, what should you do to preserve this user's Drive data?
- A. Use Google Vault to set a retention period on the OU where the users reside.
- B. Before deleting the user, add the user to the marketing shared drive as a contributor and move the documents into the new location.
- C. Ask the user to create a folder under MyDrive, move the documents to be shared, and then share that folder with the marketing team manager.
- D. In the user deletion process, select "Transfer" in the data in other apps section and add the manager's email address.
正解：D
解説：
* Access Admin Console: Log into your Google Workspace Admin Console.
* Navigate to User Management: Go to Directory > Users.
* Select the User: Find and select the temporary user account you need to delete.
* Initiate Deletion Process: Click on the user to open the account details and select the option to delete the user.
* Transfer Data: During the deletion process, you will see an option to transfer data. Select "Transfer" in the data in other apps section and enter the marketing manager's email address.
* Complete Deletion: Complete the user deletion process. The user's Drive documents will be transferred to the marketing manager's account.
References
* Google Support: Delete a user from your organization
質問 # 68
......
Google Workspace Administratorの認定を取得するには、Google-Workspace-Administrator試験に合格する必要があります。この試験は、択一問題とシナリオベースの問題から構成されています。試験はオンラインで受けることができ、インターネット接続があればどこからでも受験できます。試験は時間制限があり、指定された期間内に完了する必要があります。試験に合格すると、2年間有効な証明書が発行されます。認定を維持するためには、証明書の有効期限が切れる前に再び試験に合格する必要があります。
練習できるGoogle-Workspace-Administrator問題で認証試験問題集ガイド解答は練習専門Fast2test：https://jp.fast2test.com/Google-Workspace-Administrator-premium-file.html
無料Google Google-Workspace-Administratorテスト練習テスト問題試験問題集：https://drive.google.com/open?id=1XcLLFEnGhs8rIMqX4mR9cNpAxOnF6lfK