Which of the following is a valid two-step verification method that can be configured for Google Workspace users?

Fingerprint scanner on the user's laptop

Which of the following is a step in creating a custom administrative role in the Google Admin console?

Selecting the privileges to include in the role

Assigning a two-step verification method

Setting a password expiration policy

Creating a new organizational unit

A company wants to delegate the ability to manage groups and reset passwords for users in a specific OU to a team lead. They do not want the team lead to be able to create or delete users. What should the administrator do?

Create a custom role with 'Manage groups' and 'Reset user passwords' privileges, scoped to the specific OU.

Assign the 'Groups Admin' role to the team lead.

Assign the 'Super Admin' role to the team lead.

Assign the 'User Management Admin' role to the team lead.

A company enforces two-step verification for all employees. The security team wants to reduce reliance on SMS-based codes because of phishing risks, but some employees in remote areas have limited data connectivity and rely on SMS. They also want to allow hardware security keys for employees who travel internationally. What should the administrator configure in the Admin console?

Set the allowed 2SV methods to 'Security keys and Google Authenticator' and remove SMS for all users.

Enable 'Security keys' and 'Google Authenticator' as allowed methods, keep SMS enabled, and set a policy that prioritizes security keys and authenticator over SMS.

Create a separate organizational unit for remote employees and enforce SMS-only 2SV for them.

Allow all 2SV methods and let each user choose their preferred method during enrollment.

Google CloudAssociate Google Workspace Administrator

Domain 4Objective 1

4.1 Securing User Access ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 4)

Part of the Managing security policies and access controls domain, which accounts for ~20% of the ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR exam.

23questions here

5free pages

9concepts

~20%of the exam

Questions 16–20

16foundation · easy
Which of the following is a valid two-step verification method that can be configured for Google Workspace users?
Select an answer first
17foundation · easy
Which of the following is a step in creating a custom administrative role in the Google Admin console?
Select an answer first
18foundation · easy
An administrator wants to enforce a minimum password length for all users in the organization. In the Google Admin console, which setting controls this requirement?
Select an answer first
19application · medium
A company wants to delegate the ability to manage groups and reset passwords for users in a specific OU to a team lead. They do not want the team lead to be able to create or delete users. What should the administrator do?
Select an answer first
20application · medium
A company enforces two-step verification for all employees. The security team wants to reduce reliance on SMS-based codes because of phishing risks, but some employees in remote areas have limited data connectivity and rely on SMS. They also want to allow hardware security keys for employees who travel internationally. What should the administrator configure in the Admin console?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR” is a trademark of its owner, used for identification only.

4.1 Securing User Access ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

Which of the following is a valid two-step verification method that can be configured for Google Workspace users?

Which of the following is a step in creating a custom administrative role in the Google Admin console?

An administrator wants to enforce a minimum password length for all users in the organization. In the Google Admin console, which setting controls this requirement?

A company wants to delegate the ability to manage groups and reset passwords for users in a specific OU to a team lead. They do not want the team lead to be able to create or delete users. What should the administrator do?

Keep studying — Managing security policies and access controls