26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

finalizada: sep 26 - 10:47 AM

Luis Enrique Escobar Gijón

41 %

Prueba no superado/a
Gracias por completar el/la prueba. Desgraciadamente, no has contestado
correctamente el número mínimo de preguntas para recibir una calificación que
te permita pasar de nivel.

Puntos totales: 22/54 Respuestas correctas: 22/54

Ver detalles de la respuesta

CERRAR

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 1/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Detalles de la respuesta
Imprimir

Respuestas incorrectas

Pregunta 1 de 54

You are in the Early Adopters phase of a Google Workspace

deployment. Which set of users does Google recommend that you
deploy in this phase? 19495979

Executives and IT staff

IT staff and the project team

10% of users from across all business units

25% of users from technical teams

Pregunta 2 de 54

An organization wants to achieve optimal network performance when

accessing Google Workspace. Which of the following is a Google
recommended best practice for network routing? 19495979

Implement a cloud access security broker (CASB) to funnel all requests to Google

Proxy enterprise Google Workspace traffic separately from other traffic via Google's
netblocks

Use a reverse proxy within your network perimeter

Perform DNS lookups geographically close to users

Proxy all network connections to Google through a centralized location and closely
measure that location's bandwidth usage.

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 2/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Pregunta 3 de 54

Due to security requirements, an organization requires blocking access

to consumer Gmail (gmail.com) while allowing enterprise Google
Workspace account access (company.com). How is this
accomplished? 19495979

Create a CNAME record for gmail.com in your DNS settings to redirect consumer
traffic.

Turn off Gmail for consumer accounts in the organizational service settings in the
Google Workspace Admin console.

Add a "X-GoogApps-Allowed-Domains HTTP header" header to outbound Google

Workspace traffic at your network perimeter.

Disallowing access to consumer Gmail can only be accomplished via written policy
versus technical means

Pregunta 4 de 54

An organization has provisioned all of their employees in Google

Workspace and pointed their MX records to Google. They want to
configure email for some users to be delivered in Gmail, while email for
other users is delivered to a legacy mail system. What should they
do? 19495979

Set up split delivery in their legacy mail system and forward all Google Workspace
user mail to aspmx.l.google.com

Add legacy mail system users to an organizational unit and configure a Routing
setting to direct mail to the legacy system.

Create a Google Group for all legacy mail system users and place the group in an
organizational unit that has a “Default Routing” setting to the legacy mail system.

Place all legacy users in an organizational unit and configure the outbound gateway
to the IP address of the legacy mail system.

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 3/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Pregunta 5 de 54

What is the Google-recommended SPF setting for a domain that uses

Google Workspace as the primary mail system? 19495979

v=spf1 a:google.com mx ptr ~all

v=spf1 a:aspmx.l.google.com -all

v=spf1 include:_spf.google.com -all

v=spf1 include:_spf.google.com ~all

v=spf1 include:_ghs.google.com ~all

Pregunta 6 de 54

Which Gmail policy type can alter the inbound route of email for specific
users? 19495979

Default routing

Inbound gateway

Internal-receiving

Content compliance

Pregunta 7 de 54

A 300-person company is running Microsoft Exchange 2010. Google

Workspace Migration for Microsoft Exchange (GWMME) will be used to
migrate data from Exchange to Google Workspace. Which action must
be taken to run GWMME? 19495979

Enable IMAP in Exchange.

Decrypt personal contacts.

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 4/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Create a Service account and authorize its Client ID in the Google Workspace Admin
console domain.

Install GWMME on the Exchange server.

Pregunta 8 de 54

You are installing Google Workspace Migration for HCL Notes

(GWMHN) and want to ensure that it will run in the organization's
environment. What should you do? 19495979

Install a GWMHN instance on each of the organization's mail servers.

Place GWMHN in a separate Domino organization and cross-certify it with the

customer organization.

Sign the GWMHN templates with the migration server ID or the ID of a user who has
the rights to run agents on the server.

Sign the GWMHN templates with a special Google ID and grant the ID full access to
all of the organization's mail servers.

Pregunta 9 de 54

What is Google’s maximum suggested latency for Google

Meet? 19495979

20ms

100ms

400ms

1,000ms

3,000ms

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 5/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Pregunta 10 de 54

An organization has created a Google Workspace Vault default

retention rule which retains all Gmail messages for all users in the
domain for 30 days. There are no active custom rules. A user receives a
message on January 1. The user deletes the message and empties it
from Trash on January 15. What is the earliest date on which the
message will no longer be searchable in Vault? 19495979

January 15

January 31

February 15

March 1

Pregunta 11 de 54

An organization has the following Vault rules configured:

-A default rule that retains messages for 5 years.

-A custom rule that retains messages with label “misc” for 3 years.

"An organization has the following Vault rules configured:

-A default rule that retains messages for 5 years.

-A custom rule that retains messages with label “misc” for 3 years.

For a conversation started on 1/1/2013, if a user put the “misc” label on

a single message in the conversation sent on February 1, 2013, what
will the status of all messages in the conversation be on February 1,
2016? 19495979

All of the messages are deleted.

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 6/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

None of the messages are deleted.

All messages up to the labelled message are kept. All messages sent after are
removed.

All messages up to the labelled message are deleted. All messages sent after are
retained until 2018.

Pregunta 12 de 54

An organization has successfully installed Password Sync in their

environment. They report that not all Active Directory user passwords
are syncing to Google Workspace. What should they do to resolve this
problem? 19495979

Ensure that Password Sync is installed on every writable domain controller.

Ensure that Password Sync is installed on their Microsoft Exchange Server.

Ensure that Password Sync is installed on their Windows Server Core with the Active
Directory role.

Ensure that Google Cloud Directory Sync (GCDS) has completed the initial password
sync.

Pregunta 13 de 54

Which access method does NOT allow enforcement of policy controls

on iOS devices by Google Workspace? 19495979

iOS Sync

Google-provided Gmail app

Google Sync (Microsoft ActiveSync)

Adding an account type of “Google” through the Mail, Calendar, and Contacts menu

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 7/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Pregunta 14 de 54

What is Google’s recommended network protocol for Google Meet

traffic? 19495979

Unsecured TCP

Secured TCP

Unsecured UDP

Secured UDP

QUIC

Pregunta 15 de 54

An organization has configured their domain to automatically cancel

calendar events for deleted users in the Google Workspace Admin
console. Which best describes what happens when a user account is
deleted? 19495979

All events are cancelled on the users primary calendar immediately. No cancellation
emails are sent.

Future events are cancelled on the user's primary calendar immediately. Cancellation
emails are sent.

Future events on the user's primary calendar are cancelled 21 days later. No
cancellation emails are sent.

Future events on the user's primary and secondary calendars are cancelled 21 days
later. No cancellation emails are sent.

Pregunta 16 de 54

You are using Google Workspace Calendar Interop for Microsoft

Exchange to share availability information between legacy and Google

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 8/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Workspace calendars. Which of the following must you do to allow

Exchange users to see Google Calendar availability
information? 19495979

Ensure that Google Workspace users do not appear in the Exchange Global Address
List.

Create a role account in Google Workspace to be used by Exchange to get each

Google user's availability information.

Move the Google Workspace users to a specific organizational unit (OU) and enable
calendar sharing.

Create a "Google Calendar" group in Exchange and add all Google Workspace users to
this group.

Pregunta 17 de 54

As the administrator for your Google Workspace domain you need to

investigate why one of your users didn’t receive an important message.
The message was sent to them 45 days ago. What should you
do? 19495979

Use the Email Log Search feature in the Admin console to confirm whether the
message was delivered using sender and recipient SMTP addresses.

Obtain the message ID from the sender and use the Email Log Search feature to
confirm the post delivery message status.

Obtain the message ID from the sender and use the Gmail API to locate the message.

Use the subject of the message and the Email Log Search feature to confirm the post
delivery message status.

Pregunta 18 de 54

A customer reports that a large percentage of their users received a

phishing email. The customer wants to immediately remove the

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 9/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

message from their environment. What action should they

take? 19495979

Send an email to all users notifying them of the incident and instructing them to
remove the message in question.

Use Google Workspace Vault to remove the message from all mailboxes

Search for and remove the message from all mailboxes via the Admin Console
Investigation Tool

Use the phishing classification via the Gmail API to remove the message

Use IMAP to connect to mailboxes and remove the message

Pregunta 19 de 54

A customer wants to disable all the Google Workspace marketplace

applications that access Drive and Gmail. What is the recommended
approach to disabling users from adding applications that access Drive
and Gmail? 19495979

Use the Google Workspace Admin console to disable all OAuth access to the selected
services

Use the Admin SDK API to run a script that removes access to all applications on a
scheduled basis

Disable users from installing applications in the Marketplace in the Google

Workspace Admin console

Set an alert for all installations of Marketplace applications to trigger an action to

suspend a user until the application is removed

Pregunta 20 de 54

How can a Google Workspace administrator programmatically access a

user's data without any manual authorization on the user’s
part? 19495979

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 10/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Grant a service account domain-wide delegation of authority

Super administrators get access to all user data by default in Google Workspace

User accounts can be granted the ‘Data Authority’ administrative role to access other
user’s data

Individual user accounts must always consent to having their data accessed

A support ticket can be filed with Google support to allow time based access to user
data by the super administrator

Pregunta 21 de 54

Which of the following is true when handling conflict accounts with

Google Workspace customers? 19495979

Administrators can opt-in all existing conflict accounts to be added to the corporate
Google Workspace tenant

User’s can decide whether to allow their existing address to be added to the corporate
Google Workspace tenant

User’s can decide whether to allow their existing address and data to be added to the
corporate Google Workspace tenant

User’s can decide whether to allow their existing data to be added to the corporate
Google Workspace tenant

Pregunta 22 de 54

Which of the following is not a supported source for identifying users

during a login challenge to Google Workspace? 19495979

SMS text of pin code

Google Authenticator code

Employee ID

Voice call pin code

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 11/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Recovery email account

Pregunta 23 de 54

Which of the following is not available as a means of interoperability

between Google Workspace and legacy platforms? 19495979

Full access to calendar events across recent Exchange platforms

Shared video conferencing between SIP/H.323 systems

Presence in Microsoft Office files to detect when it’s safe to edit document

Federation for XMPP standard based chat systems

Sophisticated mail routing rules for moving email between platforms

Pregunta 24 de 54

A customer with over 25,000 Windows machines wants to enforce strict

control over Chrome extensions installed in their environment. What
should they do? 19495979

Use Google provided group policy templates (.adm and .admx) to create a centrally
controlled level of restriction

Use the Google Admin console to deploy only approved extensions to all users

Chrome extensions are controlled only at the user level and must be restricted only
through written policies

Chrome browser natively inspects and verifies all extensions by default so no further
action is needed

The customer should create Chrome manifest files to whitelist extensions during
deployment of Chrome browser

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 12/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Pregunta 25 de 54

An organization with 10,000 employees has multiple Active Directory

forests within their environment. When provisioning users for Google
Workspace, which two actions does Google recommend when
possible? 19495979

Consolidate all forests into a single Active Directory.

Use the Admin console to manually provision users.

Configure a dedicated (aggregated) LDAP system for GCDS provisioning.

Configure a single instance of GCDS using a reverse proxy to connect to all forests.

Divide the employees into separate Google Workspace instances based on Active
Directory membership.

Pregunta 26 de 54

Which of the following is required In order to achieve free/busy

interoperability between Google and Microsoft Exchange? 19495979

Exchange web services must be opened on port 443 for https://calendar.google.com

Exchange web services must be opened on port 443 for all of Google’s IP blocks

Exchange web services must be opened on port 443 for a small subset of Google’s IP
blocks

Exchange web services must be opened on port 443 for all of Google’s IPv6 net
blocks

Pregunta 27 de 54

Which two of the following are supported by Google Workspace

Migration for Microsoft Exchange (GWMME)? 19495979

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 13/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

ICS

PST

MBOX

Microsoft Exchange profile

CSV

Pregunta 28 de 54

An organization's MX record points to an inbound mail gateway

(gateway1) that must relay all messages through a second gateway
(gateway2) before sending messages to Gmail. What are the two
Google recommended settings in this architecture? 19495979

Ensure that all inbound messages receive a custom header to bypass Google spam
checks

Add the IP address for gateway1 to the Inbound gateway setting.

Add IP addresses for both gateway1 and gateway2 to the email whitelist.

Check "Automatically detect external IP" in the Inbound gateway configuration.

Add IPs for both gateway1 and gateway2 to the Inbound gateway setting.

Pregunta 29 de 54

Which two types of data CANNOT be retained using Google Workspace

Vault? 19495979

Email

Google Slides

Google Sheets

Calendar Entries

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 14/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

On-the-record Chat conversations

Off-the-record Chat conversations

Pregunta 30 de 54

An organization is using Google Calendar Interop for Microsoft

Exchange. Users are provisioned in both Google and the legacy
environment. When doing lookups from a Google Workspace account,
you want to ensure that free/busy status for a user comes from
Exchange. Which two methods should you choose? 19495979

Suspend the user in Google.

Delete the user’s primary Google calendar.

Add the user to the "Exchange Calendar" Google Group.

Disable sharing of the user's primary Google calendar within their organization.

Move the user in Google to an organization unit (OU) with the Calendar service
disabled.

Pregunta 31 de 54

You have developed a script that uses the Drive API to add files to
Google Drive. The script exits early with a 403: Rate Limit exceeded
response from the Google servers. What two steps can you
take? 19495979

Add the Override_Rate_Limit header to each API request.

Implement exponential back-off in your code

Request additional quota in the Developer Console project.

Batch your requests.

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 15/16
26/9/23, 10:48 Google Workspace: Deployment Services Specialist Assessment

Insert a delay between each API call in your code.

Pregunta 32 de 54

A customer has set the Google session control expiration for 8 hours,
but reports that users are not being prompted to re-authenticate as
expected. What are the two possible causes of this issue? 19495979

Users reporting the issue are on mobile devices which are not subject to the
authentication timeout

An IP whitelist has been configured which takes priority over the session control

Only Gmail and Drive are subject to session control and user’s are probably using
other services

The session timeout setting on a third party SSO provider is set longer than the
Google session configuration

Users are members of an administrative role that is not subject to session timeout
length

https://skillshop.exceedlms.com/assessment_responses/report/43667574#assessment-response-details 16/16