Google Workspace: Deployment Services Specialist Exam

Obtain the message ID from the sender and use the Gmail API to locate the message.

As the administrator for your Google Workspace domain you need to investigate why one of your users didn't receive an important message. The message was sent to them 45 days ago. What should you do?

Install and set up the Apple Push Certificate.

An organization wants to enforce policies on iOS devices. Which step must you perform before enabling iOS Sync in the Admin console?

Configure a dedicated (aggregated) LDAP system for GCDS provisioning. Consolidate all forests into a single Active Directory.

An organization with 10,000 employees has multiple Active Directory forests within their environment. When provisioning users for Google Workspace, which two actions does Google recommend when possible?

Point the MX record for apps.altostrat.com to aspmx.l.google.com.

An organization's primary mail domain is altostrat.com. They would like to set up dual delivery of mail and have chosen the subdomain apps.altostrat.com to facilitate mail routing to Google Workspace. Which action must they take?

Create a Service account and authorize its Client ID in the Google Workspace Admin console domain.

A 300-person company is running Microsoft Exchange 2010. Google Workspace Migration for Microsoft Exchange (GWMME) will be used to migrate data from Exchange to Google Workspace. Which action must be taken to run GWMME?

Android

A Google Workspace account is set up with a third-party Single Sign-On (SSO) solution. Which access method will require the user to enter their password stored in Google Workspace versus their SSO login credential?

Users reporting the issue are on mobile devices which are not subject to the authentication timeout The session timeout setting on a third party SSO provider is set longer than the Google session configuration

A customer has set the Google session control expiration for 8 hours, but reports that users are not being prompted to re-authenticate as expected. What are the two possible causes of this issue?

2,000 sent messages per day

A customer moving to Google Workspace wants to replace the current ticketing system with a Google Workspace account [email protected]. Which of the following limits is likely to cause issues with this goal?

Search for and remove the message from all mailboxes via the Admin Console Investigation Tool

A customer reports that a large percentage of their users received a phishing email. The customer wants to immediately remove the message from their environment. What action should they take?

Google advanced mode MDM must be disabled

What must an administrator ensure before using a third party mobile device management (MDM) system for Google Workspace devices?

Chrome OS

What of the following is NOT required to use Endpoint Verification?

Salted SHA-512 over HTTPS

When using G Suite Password Sync (GSPS) to synchronize passwords, how is the password sent to Google from Active Directory?

Admin SDK Directory API

Which API can you use to list, create, and modify Google Workspace users?

Default routing

Which Gmail policy type can alter the inbound route of email for specific users?

Adding an account type of "Google" through the Mail, Calendar, and Contacts menu

Which access method does NOT allow enforcement of policy controls on iOS devices by Google Workspace?

Google Authenticator code

Which of the following is not a supported source for identifying users during a login challenge to Google Workspace?

Federation for XMPP standard based chat systems

Which of the following is not available as a means of interoperability between Google Workspace and legacy platforms?

Exchange web services must be opened on port 443 for https://calendar.google.com

Which of the following is required In order to achieve free/busy interoperability between Google and Microsoft Exchange?

Basic mode MDM is enabled by default for all Google Workspace accounts

Which of the following is true regarding Google's native mobile device management (MDM) platform?

User's can decide whether to allow their existing data to be added to the corporate Google workspace tenant

Which of the following is true when handling conflict accounts with Google Workspace customers?

Admins can enroll and enforce users in 2SV automatically

Which option do Google Workspace administrators NOT have for enforcing second factor authentication (2SV) for their users?

Deliver with modification Reject Quarantine

Which three of the following actions can be configured for messages matching a content compliance rule?

Microsoft Exchange profile PST

Which two of the following are supported by Google Workspace Migration for Microsoft Exchange (GWMME)?

Off-the-record Chat conversations Calendar Entries

Which two types of data CANNOT be retained using Google Workspace Vault?

10% of users from across all business units

You are in the Early Adopters phase of a Google Workspace deployment. Which set of users does Google recommend that you deploy in this phase?

Sign the GWMHN templates with the migration server ID or the ID of a user who has the rights to run agents on the server.

You are installing Google Workspace Migration for HCL Notes (GWMHN) and want to ensure that it will run in the organization's environment. What should you do?

When you need to migrate Calendars and the legacy email addresses are different from the Google Workspace addresses.

You are migrating Exchange accounts to Google Workspace with Google Workspace Migration for Microsoft Exchange (GWMME). When must a mapping file be used?

Create a role account in Google Workspace to be used by Exchange to get each Google user's availability information.

You are using Google Workspace Calendar Interop for Microsoft Exchange to share availability information between legacy and Google Workspace calendars. Which of the following must you do to allow Exchange users to see Google Calendar availability information?

Applications that rely on username/password authentication to access an account programmatically

You are working in the Google Workspace Admin console. You need to block sign-in attempts from applications that do not use modern security standards, and thus are considered less secure. What type of applications should you block?

Request additional quota in the Developer Console project. Batch your requests.

You have developed a script that uses the Drive API to add files to Google Drive. The script exits early with a 403: Rate Limit exceeded response from the Google servers. What two steps can you take?

400ms

What is Google's maximum suggested latency for Google Meet?

Use the Google Workspace Admin console to disable all OAuth access to the selected services

A customer wants to disable all the Google Workspace marketplace applications that access Drive and Gmail. What is the recommended approach to disabling users from adding applications that access Drive and Gmail?

Use Google provided group policy templates (.adm and .admx) to create a centrally controlled level of restriction

A customer with over 25,000 Windows machines wants to enforce strict control over Chrome extensions installed in their environment. What should they do?

Configure a web address mapping in the Admin console.

A user created a Google Site in the domain altostrat.com. The user wants to make the site accessible using the URL http://myproject.altostrat.com. What should the administrator do?

Future events on the user's primary calendar are cancelled 21 days later. No cancellation emails are sent.

An organization has configured their domain to automatically cancel calendar events for deleted users in the Google Workspace Admin console. Which best describes what happens when a user account is deleted?

February 15

An organization has created a Google Workspace Vault default retention rule which retains all Gmail messages for all users in the domain for 30 days. There are no active custom rules. A user receives a message on January 1. The user deletes the message and empties it from Trash on January 15. What is the earliest date on which the message will no longer be searchable in Vault?

Delegate administrators to specific OUs using the "User Management Admin" system role.

An organization has many administrators across different regions and wants to segment the user management by region. How is this accomplished?

Add legacy mail system users to an organizational unit and configure a Routing setting to direct mail to the legacy system.

An organization has provisioned all of their employees in Google Workspace and pointed their MX records to Google. They want to configure email for some users to be delivered in Gmail, while email for other users is delivered to a legacy mail system. What should they do?

Ensure that GSPS is installed on every writable domain controller.

An organization has successfully installed G Suite Password Sync (GSPS) in their environment. They report that not all Active Directory user passwords are syncing to Google Workspace. What should they do to resolve this problem?

All messages up to the labelled message are deleted. All messages sent after are retained until 2018.

An organization has the following Vault rules configured: -A default rule that retains messages for 5 years. -A custom rule that retains messages with label "misc" for 3 years. "An organization has the following Vault rules configured: -A default rule that retains messages for 5 years. -A custom rule that retains messages with label "misc" for 3 years. For a conversation started on 1/1/2013, if a user put the "misc" label on a single message in the conversation sent on February 1, 2013, what will the status of all messages in the conversation be on February 1, 2016?

Add domain shared contact records for the Antarctic users.

An organization is migrating all the employees to Google Workspace except for a small, independent group of users in Antarctica. You want to include the users in Antarctica in the global address list for Google Workspace without additional licensing costs. What should you do?

Add the user to the "Exchange Calendar" Google Group. Move the user in Google to an organization unit (OU) with the Calendar service disabled.

An organization is using Google Calendar Interop for Microsoft Exchange. Users are provisioned in both Google and the legacy environment. When doing lookups from a Google Workspace account, you want to ensure that free/busy status for a user comes from Exchange. Which two methods should you choose?

Ensure that SPF, DKIM, and DMARC are set up correctly for their domain.

An organization reports that valid email messages sent by their users are being marked as spam by several recipient domains. They ask for your help addressing this issue. What should you do?

Perform DNS lookups geographically close to users

An organization wants to achieve optimal network performance when accessing Google Workspace. Which of the following is a Google recommended best practice for network routing?

Use registry (Windows) and defaults (macOS) controls on specific clients to reduce requirements

An organization wants to deploy Google Drive File Stream but is concerned about potential implications to their network due to limited bandwidth. What is the Google recommended way to mitigate these concerns?

Add newdomain.com as an additional domain in the Google Workspace Admin console of domain.com; then use the MAKE PRIMARY option to promote newdomain.com as the account's primary domain.

An organization, domain.com, wants to change their primary Google Workspace domain to newdomain.com. Which steps will achieve this goal?

Add a "X-GoogApps-Allowed-Domains HTTP header" header to outbound Google Workspace traffic at your network perimeter.

Due to security requirements, an organization requires blocking access to consumer Gmail (gmail.com) while allowing enterprise Google Workspace account access (company.com). How is this accomplished?

Source user,Target user.

Google Workspace Migration for Microsoft Exchange (GWMME) uses a control comma-separated values (CSV) file to map legacy accounts to Google Workspace accounts. An organization yourdomain.com is migrating from Exchange where user Google Workspace addresses will remain unchanged from the Exchange environment. How should each user entry be entered into the control file?

Grant a service account domain-wide delegation of authority

How can a Google Workspace administrator programmatically access a user's data without any manual authorization on the user's part?

Use Google Workspace's Big Query export functionality and use the SQL interface for analyzing patterns

What is Google's recommended approach for analyzing patterns in mail flow for large organizations?

Unsecured UDP

What is Google's recommended network protocol for Google Meet traffic?

v=spf1 include:_spf.google.com ~all

What is the Google-recommended SPF setting for a domain that uses Google Workspace as the primary mail system?