Google Workspace Administrator

1. 1.A company is moving 40 mailboxes from an on-premises Microsoft Exchange server to Gmail. The administrator wants a first-party tool that is driven entirely from the Admin console, migrates email, calendar, and contacts, and requires no software installed on user workstations. Which tool should be used?

   • AData migration serviceCorrect answer
   • BGoogle Workspace Migrate
   • CGoogle Cloud Directory Sync
   • DGoogle Takeout

   Why

   The data migration service runs from the Admin console and migrates email, calendar, and contacts from Exchange, IMAP servers, and other Workspace accounts, with no client-side software. Google Workspace Migrate is intended for very large migrations and requires deploying migration servers. Google Cloud Directory Sync provisions accounts from LDAP but moves no mail data. Google Takeout is an end-user data download tool.

2. 2.An organization keeps its authoritative identities in an on-premises Active Directory behind a corporate firewall. The administrator needs Workspace accounts, groups, and organizational units to be created, updated, and suspended automatically to match the directory, using a connector that runs on a server inside the network and supports custom LDAP search rules and exclusion rules. Which tool meets this requirement?

   • AGoogle Cloud Directory SyncCorrect answer
   • BDirectory Sync
   • CData migration service
   • DGoogle Workspace Migrate

   Why

   Google Cloud Directory Sync (GCDS) is installed on a server inside the customer network, reads LDAP or Active Directory with configurable search and exclusion rules, and performs a one-way sync into Workspace. Directory Sync is the cloud-hosted alternative that requires no on-premises connector and offers a simpler mapping model. The data migration service moves mail, not identities. Google Workspace Migrate moves file and mail content.

3. 3.An employee has left the company. Legal requires that the employee's Gmail and Drive data remain retained and searchable in Google Vault for three years, but the organization does not want to keep paying for a full user license. What should the administrator do?

   • AAssign an Archived User license to the accountCorrect answer
   • BSuspend the account and keep its current license
   • CDelete the account and rely on the recovery window
   • DExport the account with Google Takeout and delete it

   Why

   An Archived User (AU) license keeps the account's data retained and discoverable in Vault at a lower cost, while the user cannot sign in or consume services. Suspending the account keeps the full license charge. Deleting the account removes the data once the recovery window closes. Google Takeout produces a one-off download and provides no ongoing retention or eDiscovery.

4. 4.Before deleting a departing employee's account, an administrator must move all files the employee owns in My Drive to that employee's manager. What is the Google-recommended way to do this?

   • AUse the data transfer tool in the Admin consoleCorrect answer
   • BAsk the employee to share the folder with the manager before leaving
   • CDownload the files with Google Takeout and re-upload them
   • DExport the account's Drive data from Google Vault

   Why

   The data transfer tool in the Admin console reassigns ownership of a user's Drive files in bulk to another account, and the same transfer is offered as part of the account deletion flow. Google Takeout downloads a copy but does not change ownership. Asking the user to share the folder leaves ownership unchanged, so the files are deleted with the account. A Vault export produces evidence files, not working documents in Drive.

5. 5.An employee is starting a six-month unpaid leave of absence and will return to the same role. The administrator must block all access to Workspace during the leave while preserving the account, its data, and its settings exactly as they are. Which action should the administrator take?

   • ASuspend the user accountCorrect answer
   • BDelete the user account and restore it on return
   • CReset the user's password to a random value
   • DMove the user to an organizational unit with all services off

   Why

   Suspending the account blocks sign-in and access to services while preserving the mailbox, Drive files, and settings, and it can be reversed at any time. Deleting the account starts a limited recovery window and then destroys the data. Resetting the password does not prevent an already signed-in session from continuing and the user could simply request a new reset. Moving the user to a different organizational unit changes policies but does not block access.

Practice all 65 questions

Frequently asked questions