Associate Google Workspace Administrator Practice Test

Associate Google Workspace Administrator practice test: what's covered

• Users & Directory
• Gmail Drive Calendar Meet Chat
• Vault DLP
• Security & 2SV
• Chrome & Mobile
• Troubleshooting

Free Associate Google Workspace Administrator sample questions

1. A 400-user company is moving from Microsoft 365 to Google Workspace over a weekend. The Super Admin must pick the Google-supported path that creates users and migrates mailboxes with the least custom scripting. Which approach matches Google’s recommended first-party tools?

   • A. Use Google Workspace Migrate or the data migration service for mail, and Directory Sync or GCDS to provision users from the existing directory
   • B. Export every PST to USB drives and ask each user to drag mail into Gmail
   • C. Create one shared mailbox and forward all legacy addresses to it
   • D. Stand up a custom Python IMAP crawler against each mailbox overnight
   Show answer

   Correct: A. Google first-party migration and directory tools are correct because they map users and mail into Workspace with supported connectors. USB PST copies, a single shared mailbox, and a custom IMAP crawler are incorrect because they skip identity mapping, licensing, and Google-supported cutover controls.

2. Help desk must create three contractor accounts today. HR has no CSV and the company does not yet have directory sync. Where should the administrator create the users so licenses and OU placement can be set immediately?

   • A. Admin console > Directory > Users > Add new user, placing each account in the Contractors organizational unit
   • B. Google Vault > Matters > Create user
   • C. Google Chat space settings > Invite guest as a licensed user
   • D. Drive sharing dialog > Grant Editor, which auto-creates a Workspace license
   Show answer

   Correct: A. Manual user creation in Directory is correct because that is how a Super Admin or User Management Admin provisions accounts, OU, and licenses without sync. Vault matters, Chat guest invites, and Drive sharing do not create licensed Workspace users.

3. An organization already runs Active Directory on-premises and wants nightly create/update/suspend of Workspace users without writing SCIM. Which TWO first-party Google tools can perform directory sync? (Choose TWO)

   • A. Google Cloud Directory Sync (GCDS) running against LDAP/Active Directory on a schedule
   • B. Directory Sync in the Admin console, Google’s cloud-hosted first-party sync service
   • C. Google Takeout scheduled exports of user archives
   • D. Apps Script that screenshots the AD Users MMC
   • E. Chrome Browser Cloud Management enrollment tokens
   Show answer

   Correct: A and B. GCDS and Directory Sync are the exam’s first-party sync tools. Takeout exports data, screenshot scripts are not provisioning, and Chrome enrollment does not create Directory users.

4. The identity team wants a cloud-hosted Google tool in the Admin console that syncs users from Active Directory or Entra ID without installing GCDS on a Windows server. Which product should they evaluate first?

   • A. Directory Sync in the Admin console, Google’s cloud-hosted first-party sync service
   • B. Google Meet quality tool
   • C. Gmail content compliance footers
   • D. Drive for desktop mirroring
   Show answer

   Correct: A. Directory Sync is correct because the exam guide lists it alongside GCDS as a first-party provisioning tool, and it runs in the cloud. Meet quality, compliance footers, and Drive for desktop do not provision Directory objects.

5. Employees already authenticate to Okta. The Super Admin must let them sign in to Workspace with those same credentials and auto-create accounts from Okta. Which pairing is the standard design?

   • A. Configure SAML SSO with Okta as the IdP, then use Okta’s Workspace provisioning (SCIM or Google connector) for joiner-mover-leaver
   • B. Turn off all Workspace passwords and publish the Super Admin recovery codes in Chat
   • C. Replace Okta with Gmail IMAP as the identity provider
   • D. Enable POP access so Okta can download mailboxes
   Show answer

   Correct: A. SAML plus IdP provisioning is correct because Workspace can consume a third-party IdP for SSO and automated lifecycle. Sharing recovery codes, IMAP-as-IdP, and POP downloads are incorrect because they do not federate identity or provision Directory users.

Last updated: 2026-10-07

Associate Google Workspace Administrator practice test FAQ

Related practice tests

• Google Cloud ACE practice test
• Google Cloud Professional Cloud Architect practice test
• Google Professional Cloud DevOps Engineer practice test
• Google Professional Cloud Network Engineer practice test
• Google Cloud PCSE practice test
• Google Cloud Professional Data Engineer practice test