About the Exam

Associate Google Workspace Administrator is a Google certification for IT administrators, systems administrators, help desk personnel, technical support engineers, and collaboration engineers who manage Google Workspace environments. The exam covers user accounts and objects, core Workspace services, data governance and compliance, security policies and access controls, endpoints, and troubleshooting common issues. Passing demonstrates practical ability to administer Google Workspace safely and effectively in real or test environments; Google recommends about six months of Google Workspace Super Admin experience.

Exam Topics

  • Managing user accounts, domains, and Directory20%
  • Managing core Workspace services23%
  • Managing data governance and compliance15%
  • Managing security policies and access controls20%
  • Managing browsers and endpoints10%
  • Monitoring and troubleshooting common issues13%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Last updated July 11, 2026 at 3:40 PM

Topic filter
Retired questions
Question sort

QuestionQ1

Monitoring and troubleshooting common issues

A new user in your organization cannot access Google Meet. You have confirmed that the user’s account is active and that the appropriate licenses are assigned. You need to resolve the access problem. What should you do?

  • A Check the user’s browser settings to ensure that Meet is not blocked.
  • B Instruct the user to clear their browser’s cache and cookies.
  • C Restart the user’s computer to refresh their network connection.
  • D Verify that Meet is enabled as a service for the user’s account in the Admin console.
Explanation

Google Meet access also depends on the Meet service being enabled for the user in the Google Admin console. Service-status settings can restrict Meet for particular users through their organizational unit or group even when the account is active and licensed.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Managing data governance and compliance

You have recently detected a suspicious pattern in your organization’s Google Drive usage. Several users have shared sensitive documents externally, potentially breaching your company’s data-security policy. You need to identify the users responsible and the scope of the unauthorized sharing. What should you do?

  • A Create an activity rule in the Security Center to alert you of future external sharing events.
  • B Use the security health page to identify misconfigured sharing settings in Drive.
  • C Review the organization's sharing policies in the Admin console, and update the policies to prevent external sharing.
  • D Use the security investigation tool to analyze Drive logs and identify the users.
Explanation

The security investigation tool can search and analyze Drive log events to review historical Google Drive activity, including sharing-related actions, so administrators can identify the responsible users and assess the extent of unauthorized sharing.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Managing data governance and compliance

An employee in your organization might be sharing confidential documents with unauthorized external parties. You need to quickly find out whether any sensitive information has leaked. What should you do?

  • A Review the employee's Drive log events in the security investigation tool.
  • B Create a custom report of the user's external sharing by using the security dashboard.
  • C Review the employee's user log events within the security investigation tool.
  • D Audit Drive access by using the Admin SDK Reports API.
Explanation

Drive log events record user activity in Google Drive. The security investigation tool can investigate files shared outside the organization by using the Drive log events data source and filtering for externally shared visibility, allowing the administrator to identify potentially leaked sensitive documents.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Managing browsers and endpoints

Your organization lets employees use their personal mobile devices to access their work email. You need to remove an employee’s work email data from their phone when they leave the organization. What should you do?

  • A Set up basic mobile management on the devices.
  • B Set up advanced mobile management on the devices.
  • C Set up data protection rules to prevent data sharing externally.
  • D Set up 2SV authentication on the devices.
Explanation

Basic mobile management supports wiping a user’s work account from a mobile device, removing the work email and other account-associated organization data without requiring a full-device wipe.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Managing user accounts, domains, and Directory

Your organization has acquired a small agency, and you must create user accounts for its new employees. The new users need to be able to use both their new organization’s email address and their email address using the sub-agency domain name. What should you do?

  • A Redirect the acquired domain to Google’s MX records and add the account as a “send as” address.
  • B Set up the acquired agency as a secondary domain from the Manage domains page.
  • C Set up the acquired agency as a user alias domain from the Manage domains page.
  • D Set up the acquired agency as a secondary domain and swap it to the primary domain.
Explanation

A Google Workspace user alias domain gives every user an email address at both the primary domain and the alias domain, allowing them to send and receive email using either address. A secondary domain is intended for a separate set of users with their own accounts and mailboxes.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home