Google Workspace Administrator
Demonstrate expertise configuring and managing Google Workspace organizations. Practice 52 comprehensive scenario questions covering user provisioning, organizational units, Gmail routing, Calendar, Drive sharing policies, Vault retention, and enterprise security controls.
Official Exam Specification & Quick Facts
Question Difficulty Breakdown
Recommended Study Guides & Exam Preparation Blueprints
Reinforce your knowledge with domain breakdowns, trap question analyses, and architectural cheat sheets:
Exam Guidelines & Simulation Rules
Frequently Asked Questions (FAQ)
The exam features 50-60 multiple-choice questions within a 120-minute window. Registration is $125 USD, with a passing threshold around 70%. It assesses technical skills to configure enterprise collaboration, user identities, mail flow, and compliance across Google Workspace.
The exam syllabus covers: (1) Object management (~20%), (2) Access and security service configuration (~26%), (3) Mail and calendar management (~24%), (4) Compliance and governance management (~16%), and (5) Core Workspace services configuration (~14%).
Organizational Units structure users and Chrome devices hierarchically. Policies, app access permissions, and session timeouts applied to a parent OU automatically cascade to child OUs unless explicitly overridden, simplifying enterprise governance.
Workspace administrators must enforce SPF (Sender Policy Framework) to authenticate sending servers, DKIM (DomainKeys Identified Mail) to cryptographic sign outbound headers, and DMARC (Domain-based Message Authentication) to dictate reject/quarantine actions on fraudulent emails.
Enforcing 2-Step Verification (2SV) using FIDO2 hardware security keys or Google Authenticator eliminates credential theft risks. Context-Aware Access policies further restrict logins based on user location, IP subnet, device encryption state, and operating system version.
GCDS performs one-way synchronization of users, security groups, and organizational structures from on-premises LDAP/Active Directory into Google Workspace. It ensures user lifecycles, deprovisioning, and membership changes propagate without syncing user passwords.
Google Vault is an information governance and eDiscovery tool for Google Workspace. It enables administrators to retain, hold, search, and export user data across Gmail, Google Drive, Google Chat, and Meet recordings to fulfill regulatory and litigation discovery mandates.
Workspace DLP scans outgoing emails and shared Drive documents in real-time for sensitive information (e.g., credit card numbers, SSNs, HIPAA data). Rules can automatically quarantine messages, redact text, or block external link sharing when policy violations occur.
Shared Drives store files owned by the team rather than individual accounts. Administrators configure policies restricting external domain sharing, preventing managers from adding external members, and restricting downloading, copying, or printing of sensitive files.
Context-Aware Access leverages Google BeyondCorp principles to evaluate contextual attributes (such as device security posture, IP address, and geographic region) before granting access to Workspace apps, eliminating blind trust in corporate network perimeters.
The certification is valid for three years. To maintain active certified status, credential holders must pass the updated exam within their recertification window.
The certification empowers IT Systems Administrators, Collaboration Engineers, Enterprise Mobility Specialists, and Cloud Operations Leads managing enterprise-scale Google Workspace, ChromeOS, and Google Meet hardware deployments.