EnglishDeutschFrançaisEspañolPortuguês

Google Cloud · GCP-AGWA · Intermediate

Associate Google Workspace Administrator — Practice Questions and Mock Exam

The Associate Google Workspace Administrator certification validates proficiency in managing Google Workspace environments for organizations.

Practice for freeTry a practice question first
Try a practice question firstPractice for free
Start practicing GCP-AGWA freeBuy GCP-AGWA access for $29.99
55Questions per Pass-IT mock exam
120minPass-IT mock exam time limit

Checked against Google Cloud · September 2026 · Current exam version

Try Pass-IT

See what learning with Pass-IT is like.

Answer a GCP-AGWA sample question and read the explanation with its source. Right here, with no sign-up.

Managing browsers and endpoints1 / 5

You need to manage Chrome OS devices enrolled in your organization. A policy must be configured to prevent users from installing extensions outside of an approved list. Where do you configure this?

AlexFull explanation from Alex

Chrome OS device management in Google Workspace is handled through the Admin Console under Devices > Chrome > Apps & extensions. Administrators can configure extension policies at the organizational unit level, including allowlists (only approved extensions can be installed), blocklists (specific extensions blocked), and force-installed extensions (automatically deployed without user action). When an allowlist policy is set, users can only install extensions that appear on the approved list — all others are blocked by default. This is different from a blocklist approach, where everything is allowed except explicitly blocked items. User-level Chrome settings cannot override admin-enforced policies, and IAM roles are for Google Cloud resource permissions, not Chrome device management. Exam tip: Chrome policies are always managed under Devices > Chrome in the Admin Console, not under security or user settings.

Sourcecloud.google.com

Managing security policies and access controls3 / 5

An administrator is investigating a suspected data breach. They need to determine which files a specific user shared externally in the last 30 days and who accessed those files. Which tool should they use?

AlexFull explanation from Alex

The Investigation tool in the Google Workspace security center is the primary tool for analyzing security events across all Workspace services. For Drive-related investigations, it provides access to Drive audit logs that record: file creation, modification, and deletion; sharing events including who shared what with whom; external access events showing when external users viewed or downloaded files; file downloads, prints, and copies; and permission changes. Administrators can filter by specific users, date ranges, file types, and event types. This makes it ideal for investigating data breach scenarios where the administrator needs a complete picture of what a user shared externally. The Investigation tool is more powerful than standard reports because it supports complex queries, cross-referencing with other audit logs, and the ability to take remediation actions (like revoking file access) directly from the results. Exam tip: Investigation tool = detailed security event analysis with remediation; Reports = usage analytics; Vault = eDiscovery data preservation.

Sourcecloud.google.com

How to prepare for GCP-AGWA with Pass-IT.

Currently 302 practice questions for GCP-AGWA, with new ones added regularly. Focus on what you still need to learn.

Get past difficult questions.

Understand why an answer is correct. Alex explains the concepts and answers your follow-up questions so you can apply what you learn to the next task.

Meet Alex →

Conversation preview · GCP-AGWA

Approved Chrome extensions

  1. You

    Where do I restrict extensions to an approved list?

  2. Alex · AI tutor

    Configure the Chrome Apps & extensions policies in the Admin console.

    Read the documentation ↗
  3. You

    How do I apply the rule to the right users?

  4. Alex · AI tutor

    Select the intended organizational unit and configure the installation policy there.

    Read the documentation ↗

Make your study time count.

Practice at your level.
For new practice sessions, Pass-IT adjusts the difficulty based on your previous answers.

Learn from mistakes.
Incorrect answers automatically become flashcards. When you review them, you rate how confidently you remember; Pass-IT schedules the next review.

See how focused practice works →

Animated feature preview

Turn your mistakes into knowledge you can rely on.

How Pass-IT works

Your review

Answered a question incorrectly?

Pass-IT saves it for your review.

GCP-AGWA · Question excerpt

Approved Chrome extensions

View the full question

You need to manage Chrome OS devices enrolled in your organization. A policy must be configured to prevent users from installing extensions outside of an approved list. Where do you configure this?

Understand the correct answer.

In the Admin Console under Devices > Chrome > Apps & extensions with an allowlist policy

Chrome extension installation policies can allow approved extensions and block others.

Read the documentation ↗

How confidently do you remember?

During review, you assess how well you still know the answer.

Correct after hesitating

Pass-IT schedules your next review.

The date depends on your self-assessment and previous reviews.

Simplified demonstration. No learning progress is saved.

Practice for the moment that counts.

Take a full mock exam with a time limit and find out whether you can finish in time.

Your GCP-AGWA mock exam

Questions
55
Minutes
120

Illustration of an exam session

  1. Start
  2. Answer questions
  3. Finish

Length and time limit of the Pass-IT mock exam.

Go into your exam with more confidence.

Your Readiness Score helps you assess whether you are ready for the exam. Results by exam domain show you where you should keep practicing.

Your money back if you fail despite 80% Readiness.
If your Readiness Score is at least 80% when you take the exam and you still fail, we refund the Pass-IT purchase price for this certification.

For active, paid access. Submit proof of failing within 14 days.

Further guarantee conditions

You need at least 80% Readiness and active, paid access to the certification when you take the exam. Take the exam within your access period and submit official proof of failing within 14 days after the exam.

For purchases through Apple or Google, refunds are handled by the respective store. See the full terms for further details.

Read the guarantee terms →

The Readiness Score describes your practice progress, not a probability of passing.

Guarantee requirement

80%

At least 80% Readiness
when you take the exam

Money back if you fail

Question counts and mock exam settings from the current Pass-IT catalog.

Exam domains

What you practice for GCP-AGWA.

Exam topics, relevant practice and sources you can check.

Users, groups and directory resourcesSee the guide for weighting54 QuestionsPass-IT questions

Organize Workspace identities and shared resources.

  • Create, migrate, synchronize and retire accounts; manage passwords, licenses, SAML SSO and transfers of Drive ownership.
  • Design organizational units to apply settings to the right users and resources.
  • Create distribution lists, Collaborative Inboxes, dynamic groups and security groups.
  • Verify primary and secondary domains and manage domain aliases.
  • Create buildings, rooms and bookable resources with useful attributes and appropriate booking permissions.
Official certification objectives
Configuring Workspace servicesSee the guide for weighting75 QuestionsPass-IT questions

Manage communication, collaboration and automation settings.

  • Configure Gmail routing, migration and delegation; control forwarding, attachments and quarantine, and protect mail with SPF, DKIM and DMARC.
  • Manage Drive sharing, Shared Drives, ownership, labels, templates, storage quotas and desktop or offline access.
  • Configure Calendar booking, delegation, sharing and event ownership, including protections against unwanted invitations.
  • Set Meet access, safety, recording and transcription options, and manage Chat history, spaces, external access and apps.
  • Control Gemini access, data privacy and usage reporting, and choose AppSheet or Apps Script for automation.
Official certification objectives
Data governance and retentionSee the guide for weighting46 QuestionsPass-IT questions

Control how Workspace data is retained, shared and exported.

  • Use Vault retention rules, holds, searches, exports and audit reports for discovery and retention needs.
  • Create data loss prevention rules with detectors or regular expressions and apply suitable actions and notifications to Gmail, Drive or Chat.
  • Configure Drive trust rules to allow or block sharing with particular users, groups or domains.
  • Set Takeout and Data Export options and choose data locations and compliance settings.
  • Classify files and messages with labels, including labels used by default, by users or by automated classification.
Official certification objectives
Security and application accessSee the guide for weighting55 QuestionsPass-IT questions

Protect accounts and control administrative and application permissions.

  • Apply password, recovery and two-step verification policies; use context-aware access, delegated admin roles and session controls.
  • Investigate events and configuration weaknesses with audit tools and the security center, and create activity alerts.
  • Allow or restrict Marketplace, Google Play and additional Google apps, configure third-party SSO and remove connected applications.
Official certification objectives
Browsers and mobile devicesSee the guide for weighting27 QuestionsPass-IT questions

Apply management policies to mobile devices and Chrome browsers.

  • Choose basic, advanced or third-party mobile management and enforce device security policies.
  • Track company-owned and personal devices and remove former employees’ devices from management as appropriate.
  • Enroll Chrome browsers and apply update, offline-access, extension and app policies by organizational unit or group.
Official certification objectives
Monitoring and troubleshootingSee the guide for weighting45 QuestionsPass-IT questions

Use reports and diagnostic tools to resolve common Workspace problems.

  • Read audit logs and the Workspace Status Dashboard to identify errors, unusual activity and service disruptions.
  • Resolve account, mail, Calendar, Drive and Meet issues using message headers, Email Log Search, Admin Toolbox and Meet quality tools; recover deleted mail or files.
  • Create and review reports on application use, storage, audit events and device activity.
  • Collect reproduction steps, logs and HAR files for support cases and consult status, release and known-issue information.
Official certification objectives
Question formats you can practice
Multiple Choice
Select one answer.
Multiple Response
Select multiple applicable answers.

These are practice formats in Pass-IT. See the Official certification objectives for the official exam requirements.

Frequently asked questions

Your preparation

How much study time should I plan for GCP-AGWA?

For planning, Pass-IT estimates roughly 35–90 hours. Relevant experience may put you toward the lower end; starting from scratch may put you toward the higher end. Your needs may fall outside this range. This is not a time requirement from Google Cloud or a promise that you will be exam-ready within that time.

Do you need super admin access to prepare for this exam?

It is not required to book, but it is the recommendation, and it matters more here than on most exams. Several objectives cover console settings that only exist on Business Plus or Enterprise editions, so a free tenant will not show you them. If you have no admin console of your own, a trial tenant is the practical substitute.

Using Pass-IT

What language are Pass-IT questions in?

Questions in the app are currently in English. Translations of the sample questions on this page apply only to this preview. Check with Google Cloud for the languages available for the official exam.

How long does my GCP-AGWA access last?

Access covers this certification for 12 months. You pay once, with no automatic renewal.

When does the money-back guarantee apply?

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days. Guarantee terms

About the GCP-AGWA exam

Where can I take the GCP-AGWA exam?

Online-proctored (Pearson VUE) or onsite-proctored at testing centers.

How do you get the Google Workspace administrator certification?

You sit the Associate Google Workspace Administrator exam, which runs 120 minutes and covers the admin console rather than end-user features. Google Cloud recommends six months as a Workspace super admin on a Business Plus or Enterprise edition, since several exam areas only exist in those tiers. The catalog budget is around 60 hours.

How long does the Workspace administrator certification last?

Three years from the pass date. Renewal is handled inside an eligibility window that opens before expiry, so it has to be planned rather than left to the deadline.

How soon can you retake the Workspace administrator exam?

After 14 days for the second attempt, 60 days for the third and 365 days after that. Google Cloud allows a maximum of four attempts in any two-year period.

Your preparation for GCP-AGWA

$29.99one-time

12 months of access for GCP-AGWA · No automatic renewal

Buy GCP-AGWA access

Questions in the app are currently in English.

Try 20 questions for freeFree account required. No credit card.

Already have an account? Log in

Prefer a subscription? View subscriptions →

Money back if you fail with at least 80% Readiness, for eligible purchases under the guarantee terms.

Guarantee terms

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days.

Full guarantee terms →

Related certifications

Associate Cloud EngineerAssociate Data PractitionerCloud Digital LeaderGenerative AI LeaderAll Google Cloud certifications →