試験準備には欠かさない！Associate-Google-Workspace-Administrator問題解答でAssociate-Google-Workspace-Administrator試験問題集
リアルGoogle Associate-Google-Workspace-Administrator試験問題 [更新されたのは2025年]
質問 # 20
Your company distributes an internal newsletter that contains sensitive information to all employees by email. You've noticed unauthorized forwarding of this newsletter to external addresses, potentially leading to data leaks. To prevent this, you need to implement a solution that automatically detects and blocks such forwarding while allowing legitimate internal sharing. What should you do?
- A. Add a banner to the newsletter that warns users that external sharing is prohibited.
- B. Create a Gmail content compliance rule that targets the internal newsletter, identifying instances of external forwarding. Configure the rule to reject the message when such forwarding is detected
- C. Create a content compliance rule to modify the newsletter subject line, adding a warning against external forwarding.
- D. Develop an Apps Script project by using the Gmail API to scan sent emails for the newsletter content and external recipients. Automatically revoke access for violating users.
正解：B
解説：
A Gmail content compliance rule allows you to specifically target the internal newsletter and automatically detect when it is forwarded to external addresses. By rejecting such messages, you can prevent unauthorized sharing of sensitive information while still permitting internal sharing. This solution is effective for enforcing data security policies without manual intervention.
質問 # 21
You work at a large organization that prohibits employees from using Google Sites. However, a task force comprised of three people from five different departments has recently been formed to work on a project assigned by the Office of the CIO. You need to allow the users in this task force to temporarily use Google Sites. You want to use the least disruptive and most efficient approach. What should you do?
- A. Place the 15 task force users into a new organizational unit (OU). Turn on Google Sites access for the OU.
- B. Create a configuration group for the task force's 15 users. Grant Google Sites access to the group.
- C. Turn Google Sites access on for each of the 15 users in the task force.
- D. Create an access group for the task force's 15 users. Grant Google Sites access to the group.
正解：A
解説：
Creating a new organizational unit (OU) for the task force members and turning on Google Sites access for that OU is the least disruptive and most efficient approach. It allows you to target only the users in the task force, granting them temporary access to Google Sites without impacting the rest of the organization. This solution also provides clear control over the access, which can be easily modified when the task force's work is completed.
質問 # 22
Your organization requires enhanced privacy and security when sending messages to banks and other financial institutions. Your organization uses Gmail, but the banks use various other email providers. You need to maximize privacy and limit access to messages sent and received between your organization and the banks. What should you do?
- A. Enable confidential mode for Gmail. Instruct employees to use confidential mode when sending messages to the banks.
- B. Enable Protect against unauthenticated emails in Gmail Safety.
- C. Configure Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) authentication for your email domains.
- D. Set up Transport Layer Security (TLS) compliance for inbound and outbound messages with a list of the banks' email domains. Validate the TLS connections.
正解：D
解説：
Transport Layer Security (TLS) ensures that emails are encrypted in transit between your organization and the banks, thereby enhancing privacy and security. By setting up TLS compliance and validating TLS connections for the banks' email domains, you ensure that the communication is secure and protected from interception, even if the banks use various email providers. This approach provides the highest level of privacy for sensitive financial communications.
質問 # 23
You are configuring Google Chat for your organization. Using the Adin console, you want to enable employees to view their chat history by default and allow employees to turn off chat history. What should you do?
- A. Set the space history setting to OFF and chat history to ON.
- B. Set the top-level default conversation history setting to ON and allow users to change their history setting.
- C. Configure Google Vault to retain all Chat messages, and exclude organizational units (OUs) with users who want to turn Chat history off.
- D. Set the top-level default conversation history settings to OFF and allow users in each organizational unit (OU) to change their history setting.
正解：B
解説：
By setting the default conversation history to "ON" at the top level, all employees will have chat history enabled by default. Allowing users to change their own history setting gives them the flexibility to turn off chat history if they choose to do so. This approach aligns with your goal of enabling chat history by default while still giving employees the option to turn it off.
質問 # 24
Your company's legal department has issued a litigation hold that requires you to preserve all data related to a specific project. You need to ensure that all data for this project, including emails, documents, and chats, are preserved indefinitely and cannot be deleted by users. What should you do?
- A. Create a hold in Google Vault that includes all users and data sources associated with the project.
- B. Assign an Archived User license to all users involved in the project.
- C. Set up a retention rule in Google Vault that retains all data from Gmail and Drive indefinitely.
- D. Export all project related data from Google Workspace and store the data in a separate, secure location.
正解：A
解説：
To preserve all data related to the project, including emails, documents, and chats, and to prevent it from being deleted by users, you should create a hold in Google Vault. A hold ensures that data is preserved indefinitely, regardless of user actions, and applies to the users and data sources (such as Gmail, Drive, and Chats) associated with the project. This is the most efficient and compliant way to meet the litigation hold requirements.
質問 # 25
Your organization collects credit card information in customer files. You need to implement a policy for your organization's Google Drive data that prevents the accidental sharing of files that contain credit card numbers with external users. You also need to record any sharing incidents for reporting. What should you do?
- A. Enable Gmail content compliance, and create a rule to block email attachments containing credit card numbers from being sent to external recipients.
- B. Implement a third-party data loss prevention solution to integrate with Drive and provide advanced content detection capabilities.
- C. Create a data loss prevention (DLP) rule that uses the predefined credit card number detector, sets the action to "block external sharing", and enables the "Log event" option.
- D. Configure a data retention policy to automatically delete files containing credit card numbers after a specified period.
正解：C
解説：
A data loss prevention (DLP) rule with the predefined credit card number detector will help you identify and prevent the accidental sharing of files that contain sensitive credit card information. Setting the action to "block external sharing" ensures that such files cannot be shared externally. Enabling the "Log event" option will record any incidents of external sharing for auditing and reporting purposes, fulfilling both the security and reporting requirements.
質問 # 26
A new user at your organization is unable to access Google Meet. You have verified that the user's account is active and the correct licenses are assigned. You need to resolve the access issue. What should you do?
- A. Check the user's browser settings to ensure that Meet is not blocked.
- B. Instruct the user to clear their browser's cache and cookies.
- C. Restart the user's computer to refresh their network connection.
- D. Verify that Meet is enabled as a service for the user's account in the Admin console.
正解：D
解説：
To resolve access issues with Google Meet, it's important to verify that Google Meet is enabled as a service for the user's account in the Admin console. Sometimes, individual services may be disabled for specific users or organizational units, even if the user has the correct license assigned. Ensuring that Google Meet is enabled for the user's account will grant them the necessary access to the service.
質問 # 27
A user in your organization received a spam email that they reported for further investigation. You need to find out more details and the scope of this incident as quickly as possible. What should you do?
- A. Conduct an Email reports search to find this email and all of the email's recipients.
- B. Conduct a search to find all emails sent by the sender by using the Gmail API.
- C. Conduct a Vault search to find this email and identify if additional users were affected.
- D. Conduct a search in the security investigation tool to find this email, and identify whether additional users were affected.
正解：D
解説：
The security investigation tool is specifically designed for investigating security incidents like spam and phishing emails. It allows you to search for emails, review their details, and determine the scope of the incident, including identifying whether other users were affected. This tool is the most appropriate and efficient way to respond to the incident.
質問 # 28
You are managing the buildings and resources for your organization. You need to create several conference rooms with a capacity of 10 people each, equipped with a whiteboard and projector, and wheelchair accessible. You want to ensure the process is efficient. What should you do?
- A. Create a CSV file and add all resources. Write a script using the Workspace API to reference the CSV file and create all the resources.
- B. Automate room creation by using a third-party app from the Google Workspace Marketplace.
- C. Create each conference room individually in the Google Admin console. Add the features for each room.
- D. Use the Google Admin console to bulk upload the rooms. Create a resource with the specified features and apply the features to that resource.
正解：A
解説：
Using a CSV file to list all the conference rooms and a script to automate their creation via the Workspace API is the most efficient solution. This approach allows you to batch-create the rooms with the specified attributes (capacity, whiteboard, projector, wheelchair accessible) without manually inputting each room individually. It minimizes manual effort and ensures consistency across all room configurations.
質問 # 29
Your organization's security team has published a list of vetted third-party apps and extensions that can be used by employees. All other apps are prohibited unless a business case is presented and approved. The Chrome Web Store policy applied at the top-level organization allows all apps and extensions with an admin blocklist. You need to disable any unapproved apps that have already been installed and prevent employees from installing unapproved apps. What should you do?
- A. Change the Chrome Web Store allow/block mode setting to block all apps, admin manages allowlist. Add the apps on the security team's vetted list to the allowlist.
- B. Disable Extensions and Chrome packaged apps as Allowed types of apps and extensions for the top-level organizational unit. Selectively enable the appropriate extension types for each suborganization
- C. Change the Chrome Web Store allow/block mode setting to allow all apps, admin manages blocklist, In the App access control card, block any existing web app that is not on the security team's vetted list.
- D. Disable the Chrome Web Store service for the top-level organizational unit. Enable the Chrome Web Store service for organizations that require Chrome apps and extensions.
正解：A
解説：
Changing the Chrome Web Store policy to block all apps and managing an allowlist ensures that only vetted, approved apps are allowed for installation. This approach enforces the security team's policy by restricting access to unapproved apps while enabling the installation of only those apps that have been explicitly approved. This method provides control over what can be installed, aligning with the organization's security requirements.
質問 # 30
The legal department at your organization is working on a time-critical merger and acquisition (M&A) deal. They urgently require access to specific email communications from an employee who is currently on leave. The organization's current retention policy is set to indefinite. You need to retrieve the required emails for the legal department in a manner that ensures data privacy. What should you do?
- A. Instruct the IT department to directly access and forward the relevant emails to the legal department.
- B. Use Google Vault to create a matter specific to the M&A deal. Search for relevant emails within the employee's mailbox. Export and share relevant emails with your legal department.
- C. Temporarily grant the legal department access to the employee's email account with a restricted scope that is limited to the M&A-related emails.
- D. Ask a colleague with delegate access to the employee's mailbox to identify and forward the relevant emails to the legal department.
正解：B
解説：
Using Google Vault to create a matter specific to the M&A deal allows for legal, secure, and privacy-compliant retrieval of emails. You can search for the specific emails related to the merger and acquisition, export them, and share them with the legal department without granting direct access to the employee's mailbox. This approach ensures both data privacy and compliance with organizational policies.
質問 # 31
You manage Chrome Enterprise browsers for your large organization. You want to ensure that specific extensions are automatically installed on all managed Chrome Enterprise browsers. What should you do?
- A. Allowlist the specific Chrome browser extensions.
- B. Publish the extensions in the Chrome Web Store.
- C. Configure a script to deploy the extensions upon user login.
- D. Force-install the extensions through Chrome browser policies.
正解：D
解説：
Using Chrome browser policies, you can force-install specific extensions on all managed Chrome Enterprise browsers. This ensures that the desired extensions are automatically installed on users' browsers without requiring manual installation. This approach is the most efficient and scalable solution for managing extensions across a large organization.
質問 # 32
Your company's help desk is receiving technical support tickets from employees who report that messages from known external contacts are being sent to the spam label in Gmail. You need to correct the issue and ensure delivery of legitimate emails without introducing additional risk as soon as possible. What should you do?
- A. Create an address list of approved senders so messages from these users bypass Gmail's spam filters and recipients can decide whether they are spam or not.
- B. Turn off more aggressive spam filtering in spam policies that are applied to the users' organizational unit and add the senders' mail system IP addresses to the email allowlist.
- C. Ask employees to select the messages in Gmail that are being delivered to spam and mark them as Not spam.
- D. Contact the external senders, and tell them to authenticate their sent mail by using domain-based message authentication, reporting, and conformance (DMARC).
正解：C
解説：
Asking employees to mark legitimate emails as "Not spam" helps train Gmail's spam filter to correctly identify these senders as trusted. This is a quick and effective way to correct the issue without introducing any additional risk or changes to the email filtering settings. Over time, Gmail will learn to recognize these senders as legitimate, reducing the likelihood of their messages being misclassified as spam in the future.
質問 # 33
Your compliance team has observed that employees at your organization are frequently resetting their passwords and is concerned about account hijacking. You need to create a solution to notify the compliance team whenever a user updates or resets their password. What should you do?
- A. Create an activity rule that is triggered by the User's password changed event. Add compliance team members as email recipients.
- B. Create a new alert by using user log events. Check that the challenge type is "Password", and add the compliance team as email recipients.
- C. Create and enforce a new password policy for all users in your organization.
- D. Move all compliance team members into a separate organizational unit (OU). Create and enforce a new password policy for the members of this OU.
正解：A
解説：
Creating an activity rule that triggers on the "User's password changed" event allows you to automatically notify the compliance team whenever a user updates or resets their password. This approach is efficient because it directly ties the event to the rule and sends alerts without requiring manual monitoring or additional steps. By adding the compliance team as email recipients, you ensure they are promptly notified of any changes.
質問 # 34
Your organization recently deployed Google Workspace. Over 3,000 external contacts were shared in public folders in Microsoft Exchange before the implementation. You need to ensure that these external contacts appear to domain users in Gmail. What should you do?
- A. Use the Domain Shared Contacts API to add the external contacts to the Directory.
- B. Export the external contacts to a CSV file, upload the file to Google Drive, and instruct users to import to their My Contacts.
- C. Use Google Cloud Directory Sync to sync the external contacts from the public folders in Microsoft Exchange to the Directory.
- D. Create a user account, add the external contacts, and delegate them to all users in the domain.
正解：A
解説：
The Domain Shared Contacts API allows you to add external contacts to the Google Workspace directory, making them available to all users in the domain. This is the most effective and scalable solution for adding a large number of external contacts (like the 3,000 from Microsoft Exchange) to your Google Workspace environment. Once the contacts are added to the directory, they will be accessible to all users in Gmail and other Google Workspace apps.
質問 # 35
You are configuring email for your company's Google Workspace account. The company wants to prevent certain types of files from being sent or received as email attachments in the simplest and most cost-effective way. What should you do?
- A. Adjust the maximum message size limit to prevent large files from being sent or received.
- B. Scan all incoming and outgoing emails for malicious attachments by using an industry standard third-party email security solution.
- C. Enable the Security Sandbox in Gmail to automatically quarantine emails with suspicious attachments.
- D. Configure an attachment compliance rule in Gmail settings to block specific file types.
正解：C
解説：
Configuring an attachment compliance rule in Gmail allows you to specifically block certain types of files from being sent or received as email attachments. This approach is simple and cost-effective because it leverages Google Workspace's built-in functionality without requiring third-party solutions or advanced configurations. You can easily specify which file types to block, ensuring that your organization is protected from undesirable attachments.
質問 # 36
......
Associate-Google-Workspace-Administrator合格させる試験問題集には更新されたのは2025年：https://www.jpntest.com/shiken/Associate-Google-Workspace-Administrator-mondaishu
無料Associate-Google-Workspace-Administrator試験問題集でお手軽に試験合格させる：https://drive.google.com/open?id=1yYwDHsn_HcRJTJp-TS-s2ldSgDctYdj5