AGWA Sample Questions & Answers
Free Associate Google Workspace Administrator practice questions with worked answers and explanations. See how the ExamJungle simulator prepares you — then jump into the full test.
Launch the full AGWA simulator →Showing 10 of 20 free samples.
- Question 1Beginner
Managing user accounts, domains, and Directory · Managing the user life cycle
Your company wants to automate the creation of user accounts. New employee data is exported daily from the HR system as a CSV file containing columns for first name, last name, primary email, password, and organizational unit path. Which tool should be used to bulk-create and manage these users in Google Workspace based on the CSV file?
Show answer & explanation
Correct answer: B
The 'Bulk update users' feature in the Google Admin console is specifically designed for this purpose. It allows an administrator to download a CSV template, populate it with new user information (including their OU path), and then upload it to create or update multiple user accounts at once. GCDS is for syncing with a directory server like Active Directory, not for one-off CSV uploads. The Admin SDK requires scripting knowledge.
- Question 2Intermediate
Managing core Workspace services · Configuring Google Drive and Docs
A project team is using a Shared Drive to store sensitive research data. The team lead wants to prevent any team member from accidentally or intentionally moving critical files out of the Shared Drive into their personal 'My Drive'. Which Shared Drive setting should be configured to enforce this?
Show answer & explanation
Correct answer: D
Shared Drives have a specific setting to control data exfiltration. The option 'Disallow users who are not managers from moving files and folders out of this shared drive' directly addresses the requirement. This ensures that only users with the 'Manager' role, who have the highest level of control, can perform this action, preventing Content Managers, Contributors, and others from moving data out. The other options control different permissions (sharing, downloading) but do not specifically prevent the 'Move' action.
- Question 3IntermediateSelect 2
Troubleshooting common issues · Troubleshooting and resolving common issues
A user reports their Gmail account is sending spam emails to their contacts without their knowledge. You need to immediately secure the account and investigate the breach. Which TWO actions should you take first? (Select TWO).
Show answer & explanation
Correct answers: A, D
- Question 4Beginner
Managing user accounts, domains, and Directory · Designing and creating organizational units (OUs)
True or False: When you apply a security policy, such as enforcing 2-Step Verification, to a parent organizational unit (OU), all child OUs automatically inherit that policy unless it is explicitly overridden on a child OU.
Show answer & explanation
Correct answer: A
This statement is true. The Google Workspace OU structure is hierarchical, and policies applied to a parent OU are inherited by all child OUs by default. This allows for efficient policy management. An administrator can then go to a specific child OU and set a different policy (override) if needed for that specific group of users.
- Question 5Beginner
Managing core Workspace services · Configuring Google Meet
Your company is hosting a large, public-facing webinar using Google Meet. You need to ensure that only designated hosts can present their screen and that attendees' microphones are muted upon entry to minimize disruptions. Which settings should you configure in the Google Meet event?
Show answer & explanation
Correct answer: B
Google Meet's 'Host management' features are designed for this purpose. By enabling Host management, the organizer gains access to safety controls. They can then toggle off the ability for participants to 'Share their screen', ensuring only hosts can present. While there isn't a 'mute on entry' setting pre-call, the host can use the 'Mute all' function once the meeting starts to control audio. Disabling screen sharing for participants is the key preventative step.
- Question 6Intermediate
Managing core Workspace services · Configuring Gmail
A new company policy requires that all emails sent to external recipients from the 'Legal' department must have a specific legal disclaimer appended to the message body. Emails sent internally within the domain should not have this disclaimer. Where in the Admin Console would you configure this?
Show answer & explanation
Correct answer: A
The 'Append footer' setting, found under Apps > Google Workspace > Gmail > Compliance, is the correct tool. You can create a setting that applies to a specific organizational unit ('Legal'). The configuration allows you to specify that the footer should only be appended to messages being sent to external recipients, meeting all the requirements of the policy.
- Question 7Advanced
Managing core Workspace services · Configuring Gmail
Your organization is concerned about phishing attacks. You want to implement a security measure that verifies the sender's identity and provides a visual indicator to users when an email comes from a trusted internal source. Which combination of email security standards should be implemented and configured correctly to achieve this?
Show answer & explanation
Correct answer: B
While SPF, DKIM, and DMARC are the foundational pillars of email authentication, Brand Indicators for Message Identification (BIMI) provides the visual indicator (the company logo) in the recipient's inbox. BIMI requires that DMARC is implemented with a quarantine or reject policy. This full stack not only authenticates the sender but also gives users a clear visual cue of authenticity, directly addressing the requirement.
- Question 8Intermediate
Troubleshooting common issues · Troubleshooting and resolving common issues
A user accidentally deleted a critical folder from a Shared Drive one week ago. The folder is no longer in the Shared Drive's trash. As the administrator, how can you recover this folder?
Show answer & explanation
Correct answer: C
Administrators have the ability to restore data from a Shared Drive for up to 25 days after it has been emptied from the user-visible trash. This is done through the Admin Console by navigating to Apps > Google Workspace > Drive and Docs > Manage shared drives. From there, you can filter for hidden or trashed drives/folders and find the option to restore the deleted data.
- Question 9IntermediateSelect 2
Managing user accounts, domains, and Directory · Managing buildings and resources
You are configuring a new conference room resource for your organization. You need to ensure that the room automatically declines meeting invitations that conflict with already scheduled events. Additionally, you want to allow a specific administrative assistant to manage the booking calendar directly. What are the two primary areas in the resource's calendar settings you need to configure? (Select TWO).
Show answer & explanation
Correct answers: A, C
- Question 10Intermediate
Managing core Workspace services · Configuring Google Chat
Your company wants to start using Google Chat for project communication. To maintain a record of all business communications, the compliance officer has mandated that all chat messages in project-related Spaces must be retained indefinitely. However, 1-on-1 direct messages between users can be deleted by users as they wish. How should you configure the Chat history settings?
Show answer & explanation
Correct answer: D
This configuration provides the necessary flexibility. By setting the default to 'History is off', 1-on-1 chats are not saved by default. By checking 'Allow users to change their history setting', users can decide to turn history on for specific conversations if they choose, and more importantly, Space managers can turn history on for their project Spaces to meet the compliance requirement. Forcing history on for everyone would violate the policy for 1-on-1 messages.
Ready for the real thing?
The full AGWA simulator has every exam-style question, timed mode, and instant scoring.