Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
You work at a large organization that prohibits employees from using Google Sites. However, a task force comprised of three people from five different departments has recently been formed to work on a project assigned by the Office of the CIO. You need to allow the users in this task force to temporarily use Google Sites. You want to use the least disruptive and most efficient approach. What should you do?
Creating a new organizational unit (OU) for the task force members and turning on Google Sites access for that OU is the least disruptive and most efficient approach. It allows you to target only the users in the task force, granting them temporary access to Google Sites without impacting the rest of the organization. This solution also provides clear control over the access, which can be easily modified when the task force's work is completed.
Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization's email address and their email address with the sub-agency domain name. What should you do?
Your organization acquired a small agency. You need to create user accounts for these new employees. The new users must be able to use their new organization's email address and their email address with the sub-agency domain name. What should you do?
Setting up the acquired agency as a user alias domain allows users to have their new organization's email address while still being able to send and receive emails using their previous email address with the sub-agency domain. This approach efficiently ensures they can use both email addresses without requiring additional configuration for separate accounts.
You notice an increase in support tickets related to Gmail. Multiple users are reporting that their emails are not loading, and they are receiving error messages. You need to troubleshoot the issue and identify potential causes. What should you do?
When users report issues like 'emails not loading' and 'receiving error messages' in Gmail, especially if it's a new or widespread problem, it often points to network-related issues, client-side problems, or interactions between the browser and Google's servers. A HAR (HTTP Archive) file captures all the network requests and responses that occur in a web browser. This detailed log is invaluable for diagnosing web application issues, including:
Identifying specific error codes from the server.
Analyzing request and response headers.
Checking the timing of requests to see if there are performance bottlenecks.
Pinpointing blocked requests or failed resources.
Here's why the other options are less effective as the first troubleshooting step for this type of widespread issue:
A . Analyze the users' Gmail labels and filters to determine whether incoming emails are being inadvertently blocked. While labels and filters can affect email visibility, they typically wouldn't cause 'emails not loading' or generic 'error messages' for the Gmail interface itself. This would be more relevant if emails were simply missing, but the interface was functional.
B . Collect the users' browser versions and extensions to identify potential compatibility issues. This is a good secondary troubleshooting step. Browser versions, extensions, or even cached data can certainly cause issues. However, a HAR file can often reveal if the problem is at the browser level (e.g., an extension blocking a script) or deeper within the network interaction. If the HAR shows clean network traffic, then looking at browser specifics becomes more critical.
C . Review the users' email forwarding settings to ensure that emails are not being redirected to incorrect addresses. Email forwarding affects where emails go after they arrive in Gmail, not whether the Gmail interface itself loads or displays errors. This is irrelevant to the reported symptoms.
Reference from Google Workspace Administrator:
While there isn't a direct 'Gmail troubleshooting with HAR files' page in the Google Workspace Admin Help, the concept of using HAR files for web application troubleshooting is a fundamental best practice, widely used by Google support themselves when diagnosing complex browser-related issues with Google Workspace services.
General Troubleshooting Steps for Google Workspace (Implicit HAR File Use): Google's support often requests HAR files when diagnosing browser or network-related issues with any of their web-based services. This is a common diagnostic tool.
How to Generate a HAR file: Instructions on how to generate a HAR file are commonly available from browser developers (Chrome, Firefox, Edge, etc.) and are often shared by support teams when troubleshooting web application problems.
Example (General Web Development/Troubleshooting Resource): Various online tutorials and browser developer documentation provide instructions on how to generate HAR files (e.g., Chrome DevTools, Firefox Network Monitor). These are standard tools for web troubleshooting.
By capturing a HAR file, you get a comprehensive picture of the communication between the user's browser and Google's servers, which is critical for identifying the root cause of loading errors and general functionality issues in a web application like Gmail.
Several employees at your company received messages with links to malicious websites. The messages appear to have been sent by your company's human resources department. You need to identify which users received the emails and prevent a recurrence of similar incidents in the future. What should you do?
The security investigation tool in Google Workspace allows you to identify the impacted users and messages. By marking the messages as phishing, you acknowledge their malicious nature, helping to protect the users. Adding the sender's email address to the Blocked senders list ensures that future messages from this sender will be automatically blocked, preventing recurrence of similar incidents.
Your company recently installed a free email marketing platform from the Google Workspace Marketplace. The marketing team is unable to access customer contact information or send emails through the platform. You need to identify the cause of the problem. What should you do first?
When a third-party application from the Google Workspace Marketplace is installed, it requests specific permissions (OAuth scopes) to access Google Workspace data and services. If the marketing team is unable to access customer contact information or send emails, the most likely cause is that the installed email marketing platform was not granted the necessary OAuth scopes for Contacts and Gmail during the installation or approval process.
Here's why other options are less likely to be the first step:
A . Verify that the email marketing platform's subscription is active and up-to-date. While important for continued use, a 'free' platform from the Marketplace generally doesn't have a subscription that would prevent initial access to basic functions like contacts and sending emails unless it's a trial that expired, which isn't indicated as the primary problem. This would be a later troubleshooting step if scope issues are ruled out.
C . Confirm that the 'Manage Third-Party App Access' setting in the Admin console is enabled. This setting controls whether users can install any third-party apps from the Marketplace. If it were disabled, the app likely wouldn't have been installed in the first place. If it was enabled and then disabled, the app would stop working, but the specific problem points to data access, not app disablement.
D . Use the security investigation tool to review Gmail logs. The security investigation tool is excellent for reviewing security events, but it's more for post-incident analysis or suspicious activity. In this scenario, the problem is a lack of functionality for a newly installed app, not a security breach or misconfiguration that would necessarily show up in Gmail logs immediately as an access issue for the app itself. The OAuth scopes are the more direct and initial point of failure.
Reference from Google Workspace Administrator:
Manage third-party app access to data: Google Workspace administrators can control which third-party apps can access their organization's data. This includes reviewing and managing OAuth API access for configured apps.
Understanding OAuth scopes: When an application requests access to Google data, it does so by requesting specific 'scopes.' These scopes define the particular resources and operations that the application is allowed to perform. For an email marketing platform, scopes for https://www.googleapis.com/auth/contacts (or a more specific contact scope) and https://www.googleapis.com/auth/gmail.send (or a broader Gmail scope) would be crucial.
Controlling which third-party & internal apps can access Google Workspace data: This section in the Admin console specifically allows administrators to review 'Configured apps' and check their 'OAuth API access.' This is where you would see the scopes granted to the email marketing platform.
Your organization's security team has published a list of vetted third-party apps and extensions that can be used by employees. All other apps are prohibited unless a business case is presented and approved. The Chrome Web Store policy applied at the top-level organization allows all apps and extensions with an admin blocklist. You need to disable any unapproved apps that have already been installed and prevent employees from installing unapproved apps. What should you do?
Changing the Chrome Web Store policy to block all apps and managing an allowlist ensures that only vetted, approved apps are allowed for installation. This approach enforces the security team's policy by restricting access to unapproved apps while enabling the installation of only those apps that have been explicitly approved. This method provides control over what can be installed, aligning with the organization's security requirements.
During a recent Google Meet video conference, several employees reported that they could not hear the presenters. The presenters confirmed that their laptops' microphones were working. The affected employees were all using company-issued laptops. You need to quickly diagnose the source of the issue. What should you do first?
Since the presenters' microphones are working, the issue likely lies with the affected employees' laptops. The first step in diagnosing the problem is to verify that the audio drivers on the affected laptops are up-to-date and functioning correctly. Outdated or malfunctioning audio drivers can cause issues with hearing sound during video conferences. Once the drivers are confirmed to be functional, further troubleshooting steps can be taken if necessary.
Exam domains verified against: Official Google Associate-Google-Workspace-Administrator exam guide, last checked October 2026.
Create and manage user lifecycles including provisioning, de-provisioning, and account restoration. Design organizational unit hierarchies and manage groups, domains, and resource bookings.
Configure Gmail, Drive, Docs, Calendar, Meet, Chat, and Gemini with appropriate sharing rules and security settings. Enable and manage these services at the organization or OU level.
Enforce strong passwords, two-step verification, and context-aware access policies. Create security groups and assign administrative roles. Monitor security events and manage marketplace applications.
Apply mobile device management policies and control registered devices including BYOD. Manage Chrome browser policies, extensions, and app deployments.
Sample question from this domain above: Q6
Use audit logs and the Admin console to diagnose Workspace problems. Troubleshoot user accounts, email delivery, Calendar sync, Drive sharing, and Meet connectivity issues.
Sample question from this domain above: Q7
Set up data loss prevention rules, Drive trust rules, and use Google Vault for retention and eDiscovery. Classify data with labels and manage Google Takeout and data export settings.
Sample question from this domain above: Q3
Common questions about the exam itself
