GCP-AGWA sample questions

Question 1

A multinational corporation is preparing to synchronize their on-premises Active Directory with Google Workspace using Google Cloud Directory Sync (GCDS). The infrastructure team requires that no user accounts in Google Workspace are ever deleted during the synchronization process, even if they appear to be missing from the LDAP source, to prevent accidental data loss during the initial configuration phase. You need to configure the GCDS XML config file to ensure this safety mechanism is enforced. Which specific configuration setting should you verify?

Accepted Answer

Adjust the 'Delete Limits' threshold to 0% or a specific number in the General Settings.

Answer

Set the parameter to 'false' in the user accounts rule.

Answer

Configure the exclusion rule type to 'orgUnitPath' for the root organizational unit.

Answer

Enable the 'Simulate Sync' option in the Sync section.

Question 2

You are the Google Workspace Administrator for a university. The university has a strict policy that the 'Faculty' Organizational Unit (OU) must have Google Drive enabled, but the 'Students' OU must not have access to Drive. However, there is a sub-OU under 'Students' called 'Research_Assistants' that requires Drive access. The 'Students' OU is currently set to 'OFF' for Google Drive. How should you configure the 'Research_Assistants' OU to meet this requirement?

Accepted Answer

Select the Research_Assistants OU and change the service status to 'ON'. This will override the inherited 'OFF' setting from the parent.

Answer

Create a configuration group for Research_Assistants and turn Drive ON for the group.

Answer

Move the Research_Assistants OU to be a child of the Faculty OU.

Answer

Drive cannot be enabled for a child OU if the parent OU has it disabled.

Question 3

True or False: When you delete a user account in Google Workspace, you can restore the account and its associated data (including Gmail and Drive content) up to 20 days after deletion.

Accepted Answer

True

Answer

False

Question 4

A large retail company uses dynamic groups to manage email distribution lists based on department attributes. The HR department recently updated the 'Department' attribute for 50 employees from 'Sales' to 'Marketing'. However, these employees are reporting that they are not receiving emails sent to the Marketing dynamic group. You have verified the attribute update in the user profiles. What is the most likely cause for this delay? (Select TWO)

Accepted Answer

Dynamic group membership updates can take up to 24 hours to propagate after an attribute change.

Accepted Answer

The users were manually removed from the dynamic group previously, creating an exclusion exception.

Answer

The dynamic group query syntax is case-sensitive, and the HR update used 'marketing' instead of 'Marketing'.

Answer

The dynamic group query was set to match 'Department=Sales' exclusion rather than 'Department=Marketing' inclusion.

Answer

The dynamic group has reached the maximum member limit for dynamic groups.

Question 5

You are configuring a new domain alias 'example-alias.com' for your primary domain 'example.com'. You need to verify domain ownership by adding a specific DNS record. The most common record type used for instant domain verification in the Google Admin Console is a _____ record.

Accepted Answer

TXT

Answer

MX

Answer

CNAME

Answer

A

Question 6

TechCorp is implementing a hybrid email environment during a migration phase. They want incoming mail to be delivered to Gmail first. If the recipient exists in Gmail, the mail should stay there. If the recipient does not exist in Gmail, the mail should be routed to the legacy on-premises Exchange server.

Which mail routing configuration should you implement?

Accepted Answer

Set up Split Delivery using the 'Email routing' setting, creating a route that catches 'Unrecognized / Catch-all' addresses and forwards them to the legacy server host.

Answer

Configure Dual Delivery in the Admin Console with the Exchange server as the secondary destination.

Answer

Change the MX records to point to the Exchange server first, then configure a connector to forward to Gmail.

Answer

Use the Google Workspace Migration for Microsoft Exchange (GWMME) tool to sync mail continuously.

Top vendors

Top exams

Free GCP-AGWA sample questions

True or False: When you delete a user account in Google Workspace, you can restore the account and its associated data (including Gmail and Drive content) up to 20 days after deletion.

You are configuring a new domain alias 'example-alias.com' for your primary domain 'example.com'. You need to verify domain ownership by adding a specific DNS record. The most common record type used for instant domain verification in the Google Admin Console is a _____ record.

6 more free samples are waiting