1.1 Managing the User Life Cycle ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   How can an administrator force a user to change their password at the next sign-in?

   • ADelete the user's account and recreate it
   • BChange the user's email address
   • CDisable the user's 2-Step Verification
   • DReset the password and enable 'Force password change'
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An employee is leaving the company. The administrator needs to ensure the employee's Drive files are transferred to their manager, and then the account should be suspended. The employee's license should be revoked to save costs. What is the correct order of operations?

   • ADelete the user, then transfer Drive ownership from the deleted account.
   • BTransfer Drive ownership to the manager, then suspend the user, then revoke the license.
   • CSuspend the user, then transfer Drive ownership, then revoke the license.
   • DRevoke the license, then transfer Drive ownership, then suspend the user.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has a limited number of Google Workspace licenses. An employee is going on a 6-month leave of absence. The administrator wants to keep the user's account and data but stop paying for the license during the leave. What should the administrator do?

   • ADelete the user and restore them after 6 months.
   • BTransfer the user's data to another user and then delete the account.
   • CSuspend the user and revoke their license.
   • DKeep the user active and just remove the license.
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   An organization uses a third-party identity provider (IdP) and wants to enforce SSO for Google Workspace. They have configured SAML SSO, but they also want to ensure that when a user is deprovisioned in the IdP, their Google Workspace account is automatically suspended. The IdP supports SCIM. What should the administrator configure in Google Workspace?

   • AManually suspend users in the Admin console when they are deprovisioned in the IdP.
   • BUse the Admin SDK Directory API to poll the IdP for user changes.
   • CSet up GCDS to synchronize users from the IdP.
   • DEnable the SCIM provisioning feature in the Admin console and configure the IdP to use the SCIM endpoint.
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   A company uses a custom HR system that does not support SCIM or LDAP. They want to automate user provisioning and deprovisioning in Google Workspace. The HR system can export a CSV file of all employees daily. The administrator needs to create a solution that is reliable and requires minimal manual intervention. What is the best approach?

   • AUse the 'Bulk upload' feature in the Admin console to import the CSV daily.
   • BWrite a script that runs daily, reads the CSV, and uses the Admin SDK Directory API to create, suspend, and update users and licenses.
   • CUse GCDS to synchronize users from the CSV file.
   • DManually create and suspend users in the Admin console based on the CSV.
   Reveal Solution Discussion Select an answer first