Google Cloud · GCP-AGWA · Intermediate

Associate Google Workspace Administrator — Practice Questions and Mock Exam

Name: Pass-IT
Author: Pass-IT

Prepare for GCP-AGWA with original practice questions and clear answer explanations. Ask Alex, your AI tutor, when you need more detail, use your results to identify topics to review, and practice your pacing with timed mock exams.

Start practicing GCP-AGWA free Buy GCP-AGWA access for $29.99

Buy GCP-AGWA access for $29.99 Start practicing GCP-AGWA free

55Mock exam questions

120minTime limit

Checked against Google Cloud · August 2026 · Current exam version

Overview

About the exam

The Associate Google Workspace Administrator certification validates proficiency in managing Google Workspace environments for organizations. It covers user and group management, core service configuration (Gmail, Drive, Calendar, Meet), security policies, endpoint management, and troubleshooting.

This certification was introduced as the associate-level replacement for the retired Professional Google Workspace Administrator exam, making it the current standard for Workspace admin credentialing.

Try the practice preview

Try five GCP-AGWA questions

Try five practice questions from the app’s current Associate Google Workspace Administrator question bank, with answers and explanations.

Managing browsers and endpoints1 / 5

You need to manage Chrome OS devices enrolled in your organization. A policy must be configured to prevent users from installing extensions outside of an approved list. Where do you configure this?

AlexFull explanation from Alex

Chrome OS device management in Google Workspace is handled through the Admin Console under Devices > Chrome > Apps & extensions. Administrators can configure extension policies at the organizational unit level, including allowlists (only approved extensions can be installed), blocklists (specific extensions blocked), and force-installed extensions (automatically deployed without user action). When an allowlist policy is set, users can only install extensions that appear on the approved list — all others are blocked by default. This is different from a blocklist approach, where everything is allowed except explicitly blocked items. User-level Chrome settings cannot override admin-enforced policies, and IAM roles are for Google Cloud resource permissions, not Chrome device management. Exam tip: Chrome policies are always managed under Devices > Chrome in the Admin Console, not under security or user settings.

Sourcecloud.google.com

Managing security policies and access controls3 / 5

An administrator is investigating a suspected data breach. They need to determine which files a specific user shared externally in the last 30 days and who accessed those files. Which tool should they use?

AlexFull explanation from Alex

The Investigation tool in the Google Workspace security center is the primary tool for analyzing security events across all Workspace services. For Drive-related investigations, it provides access to Drive audit logs that record: file creation, modification, and deletion; sharing events including who shared what with whom; external access events showing when external users viewed or downloaded files; file downloads, prints, and copies; and permission changes. Administrators can filter by specific users, date ranges, file types, and event types. This makes it ideal for investigating data breach scenarios where the administrator needs a complete picture of what a user shared externally. The Investigation tool is more powerful than standard reports because it supports complex queries, cross-referencing with other audit logs, and the ability to take remediation actions (like revoking file access) directly from the results. Exam tip: Investigation tool = detailed security event analysis with remediation; Reports = usage analytics; Vault = eDiscovery data preservation.

Sourcecloud.google.com

Create a free account

Question pool

302 practice questions

The Pass-IT question pool gives you material to practice for GCP-AGWA. A Pass-IT mock exam uses 55 questions and a 120-minute time limit; these are practice settings.

Pool details: GCP-AGWA

Objectives in the guide26 objectives listed in the official guide

across 6 domains in the official exam guide

Pool size302 questions

= The pool size is equivalent to 5 sets of 55 questions; this does not mean that each mock exam uses a separate set.

Blueprint domains6 domains in the exam blueprint

Managing user accounts, domains, and Directory 54 · Managing core Workspace services 75 · Managing data governance and compliance 46 · Managing security policies and access controls 55 · Managing browsers and endpoints 27 · Monitoring and troubleshooting common issues 45

Recorded as checked against sources302 of 302

questions recorded as having their answer, options, and explanation checked against official Google Cloud documentation

How questions are made →

Exam domains

What's on the exam

Core Workspace service configuration is the single largest domain at 23%: routing and filtering mail, setting sharing defaults across Drive and Docs, configuring Calendar and Meet, and increasingly controlling how Gemini and generative AI features behave for the organization. User lifecycle and directory management ties with security policy at 20% each: the first covers onboarding, offboarding, SSO, and organizational-unit design; the second tests two-step verification rollout, password recovery configuration, context-aware access rules, and delegated admin roles. Data governance and compliance takes 15% of the exam (Vault retention, DLP, and Drive trust rules), monitoring and troubleshooting takes 13%, and endpoint management for mobile devices and Chrome browsers closes the blueprint at 10%.

The weighting mirrors daily admin work: most of the exam sits in service configuration and access control, while device management, the domain candidates from an MDM background expect to dominate, gets the smallest share.

Exam blueprint: GCP-AGWA

Managing user accounts, domains, and Directory~20%

Manage the user lifecycle including provisioning, deprovisioning, and SSO, and design organizational units and group structures for a Workspace domain. Also covers managing domains and configuring bookable buildings and resources.

≈ 12 h

Managing core Workspace services~23%

Configure core Workspace services including Gmail routing and security, Drive and Docs sharing settings, and Calendar and Meet configurations. Also covers configuring Chat, managing generative AI features like Gemini, and supporting Workspace development with AppSheet and Apps Script.

≈ 14 h

Managing data governance and compliance~15%

Hold and search organizational records through Google Vault, catch sensitive content before it leaves the domain with DLP and Drive sharing rules, and decide how data gets exported, stored, and labeled for classification.

≈ 9 h

Managing security policies and access controls~20%

Enforce password and two-step verification policies alongside context-aware access rules, dig into audit logs when something looks off, and control which Google and third-party applications users are allowed to connect.

≈ 12 h

Managing browsers and endpoints~10%

Choose the right tier of mobile management - basic, advanced, or third-party - for company and personal devices, and control Chrome through enrollment policies plus extension allow/block rules.

≈ 6 h

Monitoring and troubleshooting common issues~13%

Read audit logs and the Status Dashboard to spot what's actually broken, work through common failures in accounts, mail delivery, Calendar, Drive, and Meet, and escalate to Google support with the right log files when self-service runs out.

≈ 8 h

Format

Exam format and question types

The exam draws 50–60 multiple-choice and multiple-select questions inside a 120-minute window, weighted roughly 80% single-answer to 20% multiple-select. Questions are scenario-based, walking through an admin-console task (provisioning a user, tightening a sharing policy, enrolling a Chrome device, or tracing a mail-delivery failure) and asking which setting or tool resolves it.

Question types: GCP-AGWA

Multiple Choice80%

Select the single answer that best meets the question’s requirements.

Multiple Response20%

Select multiple answers. Follow the question’s instructions on how many to choose.

See Google Cloud for official question-format information. The shares shown describe the Pass-IT practice pool; they do not establish the proportions on the official exam.

Planning

Preparing for GCP-AGWA

The exam runs through Pearson VUE, either online-proctored or at a testing center, and is offered in English and Japanese. The certification holds for 3 years, with renewal options available during the renewal eligibility period.

Preparation and logistics: GCP-AGWA

Preparation

Illustrative study time35–90 h

illustrative planning range: 35 h with relevant experience to 90 h when starting out; your needs may fall outside this range

LevelIntermediate

Recommended backgroundNo formal prerequisites. Recommended 6 months Google Workspace Super Admin experience with Business Plus or Enterprise edition.

Taking and maintaining the certification

DeliveryOnline-proctored (Pearson VUE) or onsite-proctored at testing centers

Retake policy14-day wait after the first failed attempt, 60 days after the second, 365 days after the third. Maximum 4 attempts in a 2-year period.

Certification validity3 years

Certification valid for 3 years. Renewal options available within the renewal eligibility period.

Official guideView on provider site

Study notes

Common pitfalls

Topics to review: GCP-AGWA

01OU Structure
Misunderstanding organizational unit inheritance and how policies cascade
02Security Settings
Confusing 2-Step Verification enforcement, context-aware access, and SSO configuration
03Drive Sharing
Not understanding the interplay between sharing settings at org, OU, and individual levels
04Endpoint Management
Overlooking mobile device management policies and Chrome device enrollment
05Data Regions
Not knowing how data region policies affect where Workspace data is stored

Practice with questions and explanations in Pass-IT →

Questions

Frequently asked questions

Which pitfalls should I review when preparing for Associate Google Workspace Administrator?

Topics to review include OU Structure, Security Settings, Drive Sharing, Endpoint Management, Data Regions. Work through examples to check that you understand the distinctions and can explain your answer.

How do you get the Google Workspace administrator certification?

You sit the Associate Google Workspace Administrator exam, which runs 120 minutes and covers the admin console rather than end-user features. Google Cloud recommends six months as a Workspace super admin on a Business Plus or Enterprise edition, since several exam areas only exist in those tiers. The catalog budget is around 60 hours.

Which areas of the Workspace administrator exam carry the most marks?

Managing core Workspace services is the largest section at 23%, with user accounts, domains and Directory at 20% and security policies and access controls also at 20%. Data governance and compliance takes 15%, troubleshooting 13% and browser and endpoint management 10%. Identity and service configuration together are more than four tenths of the exam.

Do you need super admin access to prepare for this exam?

It is not required to book, but it is the recommendation, and it matters more here than on most exams. Several objectives cover console settings that only exist on Business Plus or Enterprise editions, so a free tenant will not show you them. If you have no admin console of your own, a trial tenant is the practical substitute.

How long does the Workspace administrator certification last?

Three years from the pass date. Renewal is handled inside an eligibility window that opens before expiry, so it has to be planned rather than left to the deadline.

How soon can you retake the Workspace administrator exam?

After 14 days for the second attempt, 60 days for the third and 365 days after that. Google Cloud allows a maximum of four attempts in any two-year period.

One certification, 12 months

Practice for GCP-AGWA

Focus your practice on one certification, or choose Pro to practice across all certifications.

Buy GCP-AGWA access for $29.99

Start a free practice sessionTry the first 20 questions without a card to see whether the practice suits you.

For eligible purchases: money-back guarantee if you fail your exam.

View guarantee terms →