Professional Google Workspace Administrator Exam Practice Test
Are you preparing to become a certified Professional Google Workspace Administrator? Our comprehensive practice test is designed to help you master all the essential skills and knowledge needed to pass the official Google Workspace Administrator certification exam with confidence.
What is the Professional Google Workspace Administrator Exam?
This exam evaluates your ability to manage and secure Google Workspace environments, including user and device management, data protection, application access control, and organizational policies. Passing this exam validates your expertise in administering Google Workspace for businesses of all sizes, ensuring seamless collaboration, security, and productivity.
What Will You Learn?
Our practice test covers every critical aspect of the Google Workspace Administrator role, including:
User account and group management
Security and compliance settings, including 2-Step Verification and Data Loss Prevention (DLP)
Google Workspace core services such as Gmail, Drive, Calendar, and Meet
Device management and endpoint security
Data migration and retention policies with Google Vault
App access controls and OAuth app management
Troubleshooting common user and service issues
Reporting, auditing, and monitoring using the Admin Console and APIs
Exam Topics Covered:
Google Workspace core concepts and service features
User lifecycle management and organizational units
Security controls and identity management
Email routing and spam protection
Mobile device management (MDM) and endpoint verification
Data protection, compliance, and archiving with Vault
Single sign-on (SSO) and authentication protocols
Monitoring, reporting, and audit log analysis
Why Choose Exam Sage for Your Google Workspace Exam Preparation?
Exam Sage offers expertly crafted practice tests that simulate the real exam environment, helping you identify knowledge gaps and improve your test-taking skills. Each question comes with detailed explanations to deepen your understanding. Our platform is trusted by thousands of professionals preparing for IT certifications, ensuring you get up-to-date, accurate, and relevant content.
With Exam Sage, you get:
Realistic practice questions aligned with the latest exam objectives
Clear, step-by-step explanations for every answer
Flexible online access anytime, anywhere
A risk-free way to boost your confidence before the actual exam
Prepare smarter and increase your chances of success with the Professional Google Workspace Administrator Practice Test from Exam Sage. Start practicing today and take a confident step toward your certification!
Sample Questions and Answers
1. Which Google Workspace Admin Console role allows a user to reset passwords but not manage billing?
A) Super Admin
B) Groups Admin
C) User Management Admin
D) Help Desk Admin
Answer: D) Help Desk Admin
Explanation: Help Desk Admins can reset user passwords and manage basic account settings but don’t have access to billing or higher-level admin functions.
2. What is the default maximum email size allowed for sending messages in Google Workspace?
A) 10 MB
B) 25 MB
C) 50 MB
D) 75 MB
Answer: B) 25 MB
Explanation: Google Workspace allows emails up to 25 MB in size, including attachments.
3. Which service in Google Workspace is primarily used for managing and securing mobile devices?
A) Google Vault
B) Endpoint Management
C) Cloud Identity
D) Google Drive
Answer: B) Endpoint Management
Explanation: Endpoint Management lets admins enforce security policies, manage devices, and remotely wipe corporate data on mobile devices.
4. To restrict external sharing of Google Drive files, which setting should be modified?
A) Drive Sharing Permissions
B) Security Settings
C) Organization Unit Sharing Settings
D) Data Loss Prevention (DLP) Rules
Answer: C) Organization Unit Sharing Settings
Explanation: Sharing settings can be configured by organizational unit to restrict or allow external sharing of Drive files.
5. What is the maximum retention period for data in Google Vault by default?
A) 30 days
B) 1 year
C) Indefinitely
D) 7 years
Answer: C) Indefinitely
Explanation: By default, Google Vault retains data indefinitely unless retention rules are configured.
6. Which Google Workspace API allows programmatic management of user accounts?
A) Gmail API
B) Admin SDK Directory API
C) Google Drive API
D) Calendar API
Answer: B) Admin SDK Directory API
Explanation: The Directory API allows management of users, groups, and organizational units programmatically.
7. When enabling 2-step verification for users, which of the following methods can users use as a second factor?
A) Email verification only
B) Security key, Google Prompt, or Authenticator app
C) Only SMS code
D) Only a phone call
Answer: B) Security key, Google Prompt, or Authenticator app
Explanation: Google supports multiple 2SV methods including physical security keys, Google Prompt on devices, and authenticator apps.
8. How can an admin enforce email encryption between Google Workspace users?
A) Enable TLS enforcement in Gmail settings
B) Use S/MIME certificates only
C) There is no way to enforce encryption
D) Disable Gmail for the organization
Answer: A) Enable TLS enforcement in Gmail settings
Explanation: Admins can enforce Transport Layer Security (TLS) for emails sent within and outside the organization to encrypt emails in transit.
9. Which tool should be used to migrate email data from Microsoft Exchange to Google Workspace?
A) Google Data Studio
B) Google Workspace Migration for Microsoft Exchange (GWMME)
C) Google Vault
D) Google Drive
Answer: B) Google Workspace Migration for Microsoft Exchange (GWMME)
Explanation: GWMME is designed specifically to migrate email, calendar, and contact data from Exchange to Google Workspace.
10. What is the purpose of an organizational unit (OU) in Google Workspace?
A) To define billing accounts
B) To organize users and apply policy settings by group
C) To create Google Groups
D) To enable APIs
Answer: B) To organize users and apply policy settings by group
Explanation: OUs help structure users and devices to apply specific policies and settings for different departments or teams.
11. What is the maximum number of users a Google Workspace account can have?
A) 10,000
B) 50,000
C) There is no hard limit
D) 100,000
Answer: C) There is no hard limit
Explanation: Google Workspace does not impose a fixed maximum on users; it depends on the subscription plan and business needs.
12. How can a Google Workspace admin disable access to third-party apps that use Google APIs?
A) Block app access in the API Controls section under Security
B) Remove users from the domain
C) Disable Gmail
D) Change user passwords
Answer: A) Block app access in the API Controls section under Security
Explanation: Admins can whitelist or block apps by managing OAuth app access controls.
13. Which Google Workspace feature allows retention and legal hold of emails and files for compliance?
A) Google Vault
B) Endpoint Management
C) Admin Console Reports
D) Google Groups
Answer: A) Google Vault
Explanation: Vault provides archiving, retention, search, and export capabilities to meet compliance needs.
14. How often are Google Workspace admin audit logs retained?
A) 1 week
B) 30 days
C) 6 months
D) 1 year
Answer: B) 30 days
Explanation: Admin audit logs are retained for 30 days by default.
15. Which two-factor authentication option cannot be bypassed by the user?
A) Security Key (U2F)
B) SMS codes
C) Backup codes
D) Google Prompt
Answer: A) Security Key (U2F)
Explanation: Physical security keys provide the highest security and cannot be bypassed without the key.
16. How can admins prevent users from sharing Google Calendar events externally?
A) Change Calendar sharing permissions in Admin Console
B) Delete the user’s calendar
C) Turn off Gmail
D) Use Google Drive sharing settings
Answer: A) Change Calendar sharing permissions in Admin Console
Explanation: Admins can configure Calendar sharing restrictions per organizational unit.
17. What feature helps recover deleted user data within a specified retention period?
A) Google Vault
B) Admin Console restore function
C) Data Loss Prevention (DLP)
D) Google Drive backup
Answer: B) Admin Console restore function
Explanation: Admins can restore deleted users and their data within 20 days after deletion.
18. How can an admin assign different password policies to different users?
A) Using organizational units (OUs) to apply password policies
B) By setting password policies per user manually
C) Password policies cannot be customized
D) By creating different domains
Answer: A) Using organizational units (OUs) to apply password policies
Explanation: Password and security policies can be set at the OU level for different groups.
19. What is the minimum password length enforced by Google Workspace by default?
A) 6 characters
B) 8 characters
C) 10 characters
D) 12 characters
Answer: A) 6 characters
Explanation: Google Workspace enforces a minimum password length of 6 characters by default, though admins can set stricter requirements.
20. Which report provides details about user activity such as login time and IP addresses?
A) User Activity Report
B) Security Report
C) Audit Log Report
D) Admin Console Dashboard
Answer: B) Security Report
Explanation: Security Reports give information about user login activities, suspicious logins, and IP addresses.
21. What is Google Workspace’s limit on shared drive storage space per organization?
A) 1 TB
B) 100 TB
C) Unlimited, based on plan and licenses
D) 10 TB
Answer: C) Unlimited, based on plan and licenses
Explanation: Storage in Google Workspace depends on the subscription plan; many enterprise plans offer effectively unlimited pooled storage.
22. Which Google Workspace service is best suited for internal company communications?
A) Google Sites
B) Google Chat
C) Google Drive
D) Google Groups
Answer: B) Google Chat
Explanation: Google Chat provides direct messaging and group conversations for internal communications.
23. Which tool helps automate bulk user creation in Google Workspace?
A) Admin SDK
B) Google Sheets with Apps Script
C) Admin Console CSV upload
D) Google Vault
Answer: C) Admin Console CSV upload
Explanation: Admins can bulk import users by uploading CSV files in the Admin Console.
24. What type of alert can Google Workspace send to admins for suspicious login activity?
A) Security alert email
B) SMS notification only
C) Push notification to users
D) No alerts are available
Answer: A) Security alert email
Explanation: Google Workspace can send email alerts to admins when suspicious activity is detected.
25. What does Data Loss Prevention (DLP) in Google Workspace primarily protect against?
A) Loss of user passwords
B) Sharing sensitive information outside the organization
C) Physical device theft
D) Network intrusions
Answer: B) Sharing sensitive information outside the organization
Explanation: DLP policies help prevent accidental or malicious sharing of sensitive data via Gmail and Drive.
26. How can an admin revoke OAuth token access from third-party apps?
A) Revoke token access from Security > API Controls
B) Delete user accounts
C) Disable Gmail for users
D) Reset user passwords
Answer: A) Revoke token access from Security > API Controls
Explanation: Admins manage app access and can revoke tokens from this section to block third-party apps.
27. Which Google Workspace feature allows admins to create shared team email accounts?
A) User accounts
B) Google Groups
C) Service accounts
D) Google Vault
Answer: B) Google Groups
Explanation: Google Groups can act as collaborative inboxes or shared mailboxes.
28. What is the primary purpose of Google Cloud Identity in Workspace?
A) To provide identity and access management
B) To host Google Sites
C) To store files
D) To monitor email usage
Answer: A) To provide identity and access management
Explanation: Cloud Identity helps manage users and devices for identity and access management.
29. What is the best way to secure sensitive documents in Google Drive?
A) Set sharing to “Anyone with the link”
B) Use information rights management (IRM) to restrict downloading, printing, and copying
C) Disable Google Drive
D) Remove all sharing
Answer: B) Use information rights management (IRM) to restrict downloading, printing, and copying
Explanation: IRM allows admins or owners to restrict actions on shared files for better security.
30. Which Google Workspace setting can prevent users from installing unauthorized Marketplace apps?
A) Disable Marketplace access in Admin Console
B) Change Gmail settings
C) Remove user accounts
D) Enable Vault retention rules
Answer: A) Disable Marketplace access in Admin Console
Explanation: Admins can control app installations and block unauthorized apps from Marketplace access.
31. What is the purpose of Google Workspace’s security key enforcement?
A) To allow users to login without passwords
B) To require hardware-based two-factor authentication for enhanced security
C) To replace Google Prompt entirely
D) To disable multi-factor authentication
Answer: B) To require hardware-based two-factor authentication for enhanced security
Explanation: Security key enforcement mandates the use of physical hardware security keys for 2FA, increasing account protection.
32. How does Google Workspace handle data residency compliance?
A) By storing all data in a single U.S. data center
B) Through data region policies allowing admins to specify geographic storage locations
C) Data residency compliance is not supported
D) By encrypting data only
Answer: B) Through data region policies allowing admins to specify geographic storage locations
Explanation: Google Workspace offers data region settings so organizations can control where data is stored for compliance with local laws.
33. What is a limitation of using Gmail delegation?
A) Delegates cannot read or send email on behalf of the user
B) Delegates can access the user’s password
C) Delegates cannot change account settings or passwords
D) Delegates receive all email notifications
Answer: C) Delegates cannot change account settings or passwords
Explanation: Delegation lets others read/send email but does not allow changing account settings or passwords.
34. Which setting can be used to limit the visibility of Google Calendar event details?
A) Change Calendar sharing permissions to “See only free/busy”
B) Delete all events
C) Disable Calendar for users
D) Share event details with everyone in the organization
Answer: A) Change Calendar sharing permissions to “See only free/busy”
Explanation: This restricts calendar viewers to see only availability without event details.
35. What is the primary use of Google Workspace’s Context-Aware Access?
A) To enable app access based on user location, device security status, and IP address
B) To allow access to Google Drive only from corporate devices
C) To restrict access to Gmail only during business hours
D) To replace password authentication
Answer: A) To enable app access based on user location, device security status, and IP address
Explanation: Context-Aware Access improves security by applying conditional access policies.
36. What is the effect of enabling ‘less secure apps access’ in Google Workspace?
A) It allows older apps to connect without OAuth 2.0
B) It strengthens account security
C) It blocks third-party apps
D) It automatically enables 2-step verification
Answer: A) It allows older apps to connect without OAuth 2.0
Explanation: This setting permits legacy apps that don’t support modern authentication to access Google accounts, which is less secure.
37. Which of the following is NOT a valid type of Google Workspace group?
A) Email list
B) Collaborative Inbox
C) Distribution list
D) Billing group
Answer: D) Billing group
Explanation: Google Workspace groups include email lists, collaborative inboxes, and distribution lists, but “billing group” is not a group type.
38. What does the ‘Access Transparency’ feature provide to Google Workspace customers?
A) Visibility into actions taken by Google employees on customer data
B) Full public access to user files
C) Real-time alerts on malware attacks
D) Automated password resets
Answer: A) Visibility into actions taken by Google employees on customer data
Explanation: Access Transparency logs admin and Google staff access to customer data for audit and compliance.
39. How can an admin enforce signing out users remotely?
A) Use the Admin Console to revoke user sessions and tokens
B) Delete the user account immediately
C) Disable Gmail
D) Reset the domain password
Answer: A) Use the Admin Console to revoke user sessions and tokens
Explanation: Admins can force sign-outs by revoking active sessions in the Security settings.
40. What type of account is used for non-human users to access Google Workspace APIs?
A) Service account
B) User account
C) Delegated account
D) Admin account
Answer: A) Service account
Explanation: Service accounts are used for server-to-server or automated API access without human interaction.
41. What is the purpose of Google Workspace’s Password Alert extension?
A) To notify users if their Google passwords are entered on phishing sites
B) To reset passwords automatically
C) To block users from changing passwords
D) To enforce password complexity
Answer: A) To notify users if their Google passwords are entered on phishing sites
Explanation: The extension alerts users when passwords are typed on non-Google sites, helping prevent phishing attacks.
42. How can an admin enable Single Sign-On (SSO) for Google Workspace?
A) Configure SAML settings with an identity provider in Admin Console
B) Install SSO software on all user devices
C) Disable all Google passwords
D) Enforce 2FA only
Answer: A) Configure SAML settings with an identity provider in Admin Console
Explanation: Google Workspace supports SAML-based SSO integration through Admin Console configurations.
43. Which setting controls whether users can add external users to Google Groups?
A) Group sharing permissions
B) User password policies
C) Billing settings
D) Email forwarding settings
Answer: A) Group sharing permissions
Explanation: Admins can set sharing permissions to control external member invitations to groups.
44. Which Google Workspace service stores email messages?
A) Gmail
B) Google Drive
C) Google Chat
D) Google Vault
Answer: A) Gmail
Explanation: Gmail is the email service storing users’ emails, while Vault is for archiving and compliance.
45. What is the recommended method to handle employees who leave the company?
A) Suspend user accounts immediately and transfer ownership of Drive files
B) Delete accounts right away
C) Leave accounts active indefinitely
D) Change passwords only
Answer: A) Suspend user accounts immediately and transfer ownership of Drive files
Explanation: Suspending preserves data while preventing access; transferring file ownership ensures continuity.
46. What is the maximum number of Google Groups a user can be a member of?
A) 100
B) 500
C) 2000
D) 10,000
Answer: C) 2000
Explanation: Users can be members of up to 2000 groups in Google Workspace.
47. How can admins enforce email forwarding restrictions?
A) Set forwarding rules and block external forwarding in Gmail settings
B) Disable Gmail entirely
C) Delete user accounts
D) Use Google Drive sharing settings
Answer: A) Set forwarding rules and block external forwarding in Gmail settings
Explanation: Admins can restrict or disable automatic email forwarding to external addresses.
48. Which Google Workspace feature provides analytics on how users collaborate?
A) Workspace Insights
B) Google Vault
C) Admin Audit Logs
D) Gmail filters
Answer: A) Workspace Insights
Explanation: Workspace Insights provides data on user activity and collaboration patterns.
49. Which is true about Google Workspace Groups email addresses?
A) They can be customized with aliases
B) They cannot be deleted
C) They automatically delete after 30 days
D) They are only accessible to admins
Answer: A) They can be customized with aliases
Explanation: Group email addresses can have multiple aliases for flexibility.
50. How can an admin ensure compliance with data residency laws?
A) Use Google Workspace data regions to store data in specific geographic locations
B) Enable 2-step verification
C) Disable Gmail
D) Delete all user data monthly
Answer: A) Use Google Workspace data regions to store data in specific geographic locations
Explanation: Data regions help comply with local laws requiring data to be stored within certain countries or regions.
51. Which report would an admin use to monitor phishing or spam attacks?
A) Security Investigation Tool
B) User Activity Report
C) Admin Audit Log
D) Google Vault
Answer: A) Security Investigation Tool
Explanation: This tool helps admins investigate and remediate security threats such as phishing and spam.
52. How often can Google Workspace admins export Google Vault data?
A) Unlimited, anytime as needed
B) Once per month
C) Once per year
D) Only after user account deletion
Answer: A) Unlimited, anytime as needed
Explanation: Admins can export Vault data anytime to meet legal or compliance needs.
53. Which feature allows admins to prevent users from downloading, printing, or copying Drive files?
A) Information Rights Management (IRM)
B) Password Policy
C) API Controls
D) Device Management
Answer: A) Information Rights Management (IRM)
Explanation: IRM settings restrict file actions to protect sensitive content.
54. How can an admin identify if a user is sharing files publicly?
A) Use the Drive audit log in Admin Console
B) Ask the user directly
C) Disable Google Drive
D) Review user passwords
Answer: A) Use the Drive audit log in Admin Console
Explanation: The audit log provides detailed sharing activity for monitoring.
55. Which Google Workspace tool can be used to automate routine admin tasks?
A) Google Apps Script
B) Google Vault
C) Google Drive
D) Google Chat
Answer: A) Google Apps Script
Explanation: Apps Script allows automation and customization of Google Workspace functions.
56. What is the default setting for external sharing in Google Drive for new users?
A) Disabled completely
B) Allowed with anyone with the link
C) Allowed within the organization only
D) Allowed to all external users
Answer: C) Allowed within the organization only
Explanation: By default, sharing is limited to within the organization unless changed by admin.
57. How can an admin recover a deleted user’s data after 20 days?
A) It is not possible; data is permanently deleted after 20 days
B) Use Google Vault to retrieve data
C) Reset the user’s password
D) Use Endpoint Management
Answer: B) Use Google Vault to retrieve data
Explanation: Vault retains data beyond user deletion and can be used for recovery.
58. Which Google Workspace tool allows centralized management of Chrome browsers and devices?
A) Chrome Enterprise
B) Google Vault
C) Admin SDK
D) Google Groups
Answer: A) Chrome Enterprise
Explanation: Chrome Enterprise lets admins manage Chrome settings, extensions, and policies on devices.
59. How can an admin restrict Gmail access based on IP address?
A) Use Context-Aware Access policies
B) Disable Gmail entirely
C) Change user passwords
D) Block email forwarding
Answer: A) Use Context-Aware Access policies
Explanation: Admins can restrict app access by IP, device security status, and location.
60. What is the recommended best practice for admin account security?
A) Enable 2-step verification and use security keys
B) Share admin passwords via email
C) Use simple passwords
D) Disable security alerts
Answer: A) Enable 2-step verification and use security keys
Explanation: Multi-factor authentication with hardware keys significantly improves admin account security.
