Free Associate Google Workspace Administrator Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Associate Google Workspace Administrator practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1An administrator temporarily suspends a user. What happens to the user's existing email, documents, and calendars?

   1. A. They remain stored in the suspended account.
   2. B. They move automatically to the administrator.
   3. C. They are deleted when the suspension begins.
   4. D. They are exported automatically to Google Vault.

   Answer: A

   Explanation: Google states, "Email, documents, calendars, and other data aren't deleted." Suspension blocks access while retaining the existing data; it does not transfer, delete, or export that data.

   Reference: Suspend a user temporarily — Introduction: effects of suspending an account

2. 2Which Google Workspace email authentication mechanism identifies the sending server as authorized, rather than signing the message contents?

   1. A. SPF.
   2. B. DKIM.
   3. C. DMARC.
   4. D. BIMI.

   Answer: A

   Explanation: Google explains, "SPF says your server sent the email." DKIM signs messages, DMARC specifies handling policy, and BIMI provides verified branding.

   Reference: About authentication methods — What type of authentication should I set up? — Google's recommendations

3. 3A legal team needs to preserve selected users' relevant Vault data for a matter until the preservation is explicitly released. Which mechanism provides this preservation?

   1. A. A saved search in the matter.
   2. B. A hold applied to the relevant data.
   3. C. A time-limited custom retention rule.
   4. D. An export of the current search results.

   Answer: B

   Explanation: Google states, "Holds preserve data indefinitely, until the hold is deleted." Searches find data, exports copy current results, and time-limited retention ends by its period rather than explicit release of a matter hold.

   Reference: How retention works — What's the difference between a hold and a retention rule? — Preservation period

4. 4After manually resetting a user's password, which action ensures the user chooses a password checked against Google's configured strength and length requirements?

   1. A. Keep the administrator-set password as the user's permanent password.
   2. B. Require the user to change the password at their next sign-in.
   3. C. Rely on the manual reset itself to apply the strength requirements.
   4. D. Clear the next-sign-in password-change requirement after the reset.

   Answer: B

   Explanation: Google instructs, "If you manually reset a password, make sure to check the Ask user to change their password when they sign in box for that user." Manually reset passwords are not themselves subject to strength and length enforcement; requiring the user's next change applies those requirements.

   Reference: Enforce and monitor password requirements for users — Before you begin — When password policies don't apply

5. 5Which mobile management level does Google Workspace turn on for an organization by default?

   1. A. Advanced management.
   2. B. Third-party management.
   3. C. No mobile management.
   4. D. Basic mobile management.

   Answer: D

   Explanation: Google states, "By default, your organization has basic mobile management turned on." Advanced controls or third-party management require further configuration.

   Reference: Set up basic mobile device management — Introduction

6. 6What can an administrator establish from the Google Workspace Status Dashboard when investigating a reported service problem?

   1. A. The affected user's complete message-delivery trace.
   2. B. The exact local device causing every reported failure.
   3. C. The service's current and past outages or disruptions.
   4. D. The individual access permissions of every affected user.

   Answer: C

   Explanation: Google states, "The Status Dashboard also shows any recent outages or disruptions." It supplies service-status evidence, rather than individual mail traces, local-device diagnosis, or per-user permissions.

   Reference: Check the status of a Google Workspace service — Introduction — current and past service status

7. 7A user has shared a document with colleagues who can edit it. An administrator suspends the owner's account. How does suspension affect those colleagues' existing access?

   1. A. Their access changes automatically to view-only.
   2. B. Their existing access to the document continues.
   3. C. Their access is revoked until the owner returns.
   4. D. Their access requires a new ownership transfer.

   Answer: B

   Explanation: The suspension guidance says, "Collaborators who have been granted access to shared documents will retain their ability to view, edit, and collaborate on those documents." Suspending the owner does not itself revoke or downgrade existing collaborator access.

   Reference: Suspend a user temporarily — Introduction: shared documents after suspension

8. 8What is DKIM's message-authentication role in Google Workspace email?

   1. A. Authorizing the mail server that sends a domain's messages.
   2. B. Authenticating message integrity during email transit.
   3. C. Publishing a receiver policy for failed authentication checks.
   4. D. Displaying a verified brand logo beside authenticated mail.

   Answer: B

   Explanation: Google states, "DKIM—DomainKeys Identified Mail (DKIM) prevents your message contents from being changed during transit." DKIM supplies message integrity authentication; SPF addresses sending servers, DMARC policy, and BIMI branding.

   Reference: About authentication methods — What type of authentication should I set up? — DKIM

9. 9Gmail messages are covered by a seven-year default Vault retention rule and an applicable three-year custom rule, with no hold. Which rule takes precedence?

   1. A. The default rule, because it is longer.
   2. B. Both rules, with their durations added.
   3. C. The custom rule, even though it is shorter.
   4. D. Neither rule, because the durations conflict.

   Answer: C

   Explanation: Google states, "Custom rules take precedence over default rules, even when the default rule expires later." This Gmail scenario excludes holds and does not involve Drive collaborator exceptions.

   Reference: How retention works — What's the difference between a hold and a retention rule? — Precedence

10. 10Which sign-in context is subject to Google's configured password-expiration policy?

    1. A. A native mobile app authenticated only with OAuth.
    2. B. A phone-only user's existing OAuth session.
    3. C. A browser-based application sign-in.
    4. D. Every OAuth token refresh regardless of client.

    Answer: C

    Explanation: Google states, "Password expiration is enforced only for browser-based application sign-ins." OAuth-authenticated apps and phone-only usage are excluded from this expiration enforcement.

    Reference: Enforce and monitor password requirements for users — How password expiration works