Google Google-Workspace-Administrator 問題集

質問 1：
Your company is using macOS devices for all employees and has built a process to allow a Google account to be used as credentials (or the device Your company wants to manage newly acquired Windows 10 devices with Google Workspace endpoint management and have employees use their Google Workspace account as login credentials for Windows 10 Which steps should you take to enable this?
Choose 2 answers
A. Configure Chrome policies on Windows to push advanced device management policies
B. Install and configure Google Credential Provider for Windows (GCPW) on each device
C. Enable Windows device management in Devices > Mobile & endpoints > Settings > Windows settings
D. Install and configure Password Sync on each Active Directory (AD) domain controller
E. Sync the Google Accounts and password to AD via Google Cloud Directory Sync V1 (GCDS)
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Your organization is about to expand by acquiring two companies, both of which are using Google Workspace. The CISO has mandated that strict 'No external content sharing' policies must be in place and followed. How should you securely configure sharing policies to satisfy both the CISO's mandate while allowing external sharing with the newly acquired companies?
A. Allow external sharing of Drive content for the IT group only.
B. Create a Drive DLP policy that will allow sharing to only domains on an allowlist.
C. Use shared drives to store the content, and share only individual files externally.
D. Let users share files between the two companies by using the 'Trusted Domains' feature. Create an allowlist of the trusted domains, and choose sharing settings for the users.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Your organization does not allow users to share externally. The security team has recently approved an exemption for specific members of the marketing team and sales to share documents with external customers, prospects, and partners. How best would you achieve this?
A. Enable external sharing only to allowlisted domains provided by marketing and sales teams.
B. Create a configuration group with the approved users as members, and enable external sharing for this group.
C. Enable external sharing for the marketing and sales organizational units.
D. Create a configuration group with the approved users as members, and use it to create a target audience.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Your organization is part of a highly regulated industry with a very high turnover. In order to recycle licenses for new employees and comply with data retention regulations, it has been determined that certain Google Workspace data should be stored in a separate backup environment.
How should you store data for this situation?
A. Train users to use Google Takeout and store their archives locally.
B. Use routing rules to dual-deliver mail to an on-premises SMTP server and Google Workspace.
C. Use a third-party tool to configure secure backup of Google Workspace data.
D. Write a script and use Google Workspace APIs to access and download user data.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Security and Compliance has identified that data is being leaked through a third-party application connected to Google Workspace. You want to investigate using an audit log.
What log should you use?
A. SAML audit log
B. OAuth Token audit log
C. Admin audit log
D. Drive usage audit log
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Your large organization, 80,000 users, has been on Google for two years. Your CTO wants to create an integrated team experience with Google Groups, Teams Drives, and Calendar. Users will use a Google Form and Apps Script to request a new "G-Team." A "G-Team' is composed of a Google Group and a Team Drive/ Secondary Calendar that is shared using that Google Group.
What two design decisions are required to implement this workflow securely? (Choose two.)
A. The Google Form will need to enforce Group naming conventions.
B. The Google Form will need to be limited to internal users only.
C. The Apps Script will need to run as a Google Workspace admin.
D. You will need a Cloud SQL instance to store "G-Team' data.
E. The Apps Script will need to run on a timed interval to process new entries.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your company recently acquired an organization that was not leveraging Google Workspace. Your company is currently using Google Cloud Directory Sync (GCDS) to sync from an LDAP directory into Google Workspace. You want to deploy a second instance of GCDS and apply the same strategy with the newly acquired organization, which also has its users in an LDAP directory. How should you change your GCDS instance to ensure that the setup is successful? (Choose two.)
A. Provide your current GCDS instance with admin credentials to the recently acquired organization's LDAP directory.
B. Set up an additional instance of GCDS running on another server, and handle the acquired organization's synchronization.
C. Set up exclusion rules to ensure that users synced from the acquired organization's LDAP are not, suspended.
D. Add an LDAP sync rule to your current GCDS instance in order to synchronize new users.
E. Upgrade to the multiple LDAP version of GCDS.
正解：B,E
解説: (Topexam メンバーにのみ表示されます)