Google ChromeOS Administrator Exam Questions Instant Access

Question 1

Which feature of the Google Admin console allows you to restrict devices from remembering user passwords?

APassword Manager

BSecurity Token Removal

CEnrollment Permissions

DWebAuthn

Answer : A

The Password Manager feature in the Google Admin console allows administrators to manage whether users can save and auto-fill passwords on ChromeOS devices. Disabling Password Manager prevents Chrome from remembering passwords, thus enhancing security by requiring users to enter credentials manually.

Verified Answer from Official Source:

The correct answer is verified from the Google Admin Console Password Policy Guide, which outlines how to manage password saving and auto-fill settings.

'Admins can disable the Chrome Password Manager through the Admin console to ensure that user passwords are not saved locally on the device.'

This setting is crucial in high-security environments where saving passwords locally might pose a risk. Disabling Password Manager helps maintain stricter security protocols.

Objectives:

Enforce secure password management on ChromeOS devices.

Disable auto-fill and password saving.

Google Admin Console Password Policy Guide

Question 2

A new startup company wants to order Chromebooks for their developers. They will use virtual machines on these Chromebooks for development tasks.

Which minimum configuration should an admin recommend?

AIntel i3, 4GB RAM and 128 GB SSD

BIntel i5, 8GB RAM and 128 GB SSD

CIntel i3, 16GB RAM and 256 GB SSD

DIntel i7, 8GB RAM and 256 GB SSD

Answer : B

Developers often require sufficient processing power and memory to run virtual machines efficiently. ChromeOS supports Linux (via Crostini) and VM environments that typically benefit from at least an Intel i5 processor and 8GB of RAM to handle development environments and containerized applications.

Verified Answer from Official Source:

The correct answer is verified from the ChromeOS System Requirements for Developers, which recommends a minimum of an Intel i5 processor and 8GB RAM for development tasks, particularly when running Linux applications or virtual machines.

'For developers using VMs or Linux on ChromeOS, it is recommended to use devices with at least an Intel i5 processor and 8GB RAM for optimal performance.'

The combination of an i5 processor and 8GB RAM provides enough processing power and memory to run VMs without significant lag, balancing performance and cost.

Objectives:

Select suitable hardware for development tasks.

Ensure compatibility with virtual machines on ChromeOS.

ChromeOS System Requirements for Developers

Question 3

You have found a possible security issue with an app that your users are using. The severity of this issue requires you to quickly see who is using this app. You have enabled the Chrome Reporting setting. What is the most efficient way to see what users are using the app?

AUnder 'Reports' -> 'Token', download the entire results and place those results into a Google Sheet. Search for the app and note who is using it.

BUnder 'Security' -> 'Access' and 'Data Control' -> 'API Controls', select 'Manage third-party apps access'. After the list of connected apps appears, you can now search for the app in question.

CUnder 'Devices' -> 'Chrome' -> 'Reports', use the 'Apps and Extension' report to show all used apps in your domain. Click the app in question to get the list of devices that are using the app.

DUnder 'Devices' -> 'Chrome' -> 'Devices' you can manually check each device. Select the device in question, click 'Remote Desktop' and audit the device.

Answer : C

The most efficient way to find users who are using a specific app is to navigate to Devices > Chrome > Reports and utilize the 'Apps and Extension' report. This report lists all apps being used within the domain and allows you to filter the results to find the specific app and see associated devices.

Verified Answer from Official Source:

The correct answer is verified from the Google Admin Console Reporting Guide, which highlights using the Apps and Extensions report for tracking app usage.

'To identify users of a specific app, go to Devices > Chrome > Reports and select 'Apps and Extensions' to generate a list of devices using the specified application.'

This method is the quickest and most organized way to gather usage data, especially when time-sensitive security issues arise.

Objectives:

Track app usage efficiently.

Identify devices using potentially compromised apps.

Google Admin Console Reporting Guide

Question 4

You have been tasked to deploy shared devices using Managed Guest Sessions. Your IT policy requires blocking access to "google.com" at the parent organization. How would you prevent users from accessing "google.com" for all Managed Guest Sessions at the parent organization?

AAdd 'google.com' to 'allow insecure content on these sites'

BAdd 'google.com' to 'disallowed URLs in content settings'

CAdd 'google.com' to 'the blocked URL exceptions'

DAdd 'google.com' to 'the list of blocked URLs'

Answer : D

To block access to a specific website across all managed guest sessions, you need to add the site to the 'list of blocked URLs'. This ensures that regardless of the session type, users cannot access the specified site.

Verified Answer from Official Source:

The correct answer is verified from the Google ChromeOS Managed Guest Session Guide, which explains that adding URLs to the blocked list restricts access across all sessions.

'To enforce web filtering policies during Managed Guest Sessions, add the URL to the blocked list in the Admin console under User & Browser Settings.'

By configuring the blocked URL list, you enforce consistent access policies even when devices are used in guest mode.

Objectives:

Implement web filtering for Managed Guest Sessions.

Enforce consistent security policies across sessions.

Google ChromeOS Managed Guest Session Guide

Question 5

How should you generate a custom admin role?

AAdd user to security admin group

BAdd user to admin role OU

CCreate admin role and assign privileges

DSet privileges on the user directly

Answer : C

To create a custom admin role in the Google Admin console, you need to create the role and then assign the required privileges. This method allows for precise control over what the delegated admin can manage, adhering to the principle of least privilege.

Verified Answer from Official Source:

The correct answer is verified from the Google Admin Console Roles and Permissions Guide, which explains the process of creating and assigning custom roles.

'To create a custom admin role, go to Admin Console > Admin roles, create a new role, and assign the necessary privileges.'

Creating a custom role is essential when you need specific permissions to be delegated without granting full admin access, ensuring both security and operational efficiency.

Objectives:

Implement role-based access control (RBAC).

Delegate admin tasks securely.

Google Admin Console Roles and Permissions Guide

Question 6

Due to security threats, your security team would like to immediately prevent any apps on a ChromeOS device from being able to use USB devices. How can you as the admin implement this security practice as quickly and efficiently as possible?

ACreate an allowlist and add apps that do not need USB permissions

BCreate a blocklist and add apps that use USB permissions

CCreate a blocklist, add apps that use USB permissions, and allow users to 'request' apps that are not approved

DBlock apps by using the 'Block apps by permissions settings' which will allow you to select 'USB' as permission type to block

Answer : D

To quickly block apps from accessing USB devices on ChromeOS, use the 'Block apps by permissions' settings in the Admin console. Selecting 'USB' as the permission type ensures that no application on the device can interact with USB peripherals, mitigating potential security threats.

Verified Answer from Official Source:

The correct answer is verified from the Google ChromeOS Application and Device Management Guide, which details using permission-based blocking for enhanced security.

'To block applications from using USB devices, configure the 'Block apps by permissions' setting in the Admin console and select 'USB' as the restricted permission.'

This method provides a comprehensive and quick way to mitigate USB-based threats without individually managing each application.

Objectives:

Strengthen ChromeOS device security.

Manage app permissions effectively.

Google ChromeOS Application and Device Management Guide

Question 7

You have been asked to explain the built-in security features of ChromeOS. What is the benefit of having verified boot enabled on a ChromeOS device?

AIt allows updates to happen in the background

BRunning both operating systems on one device at the same time makes it twice as powerful

CIt ensures that the OS is uncompromised

DIt installs the known safe backup OS every time the device is started up

Answer : C

Verified Boot is a core security feature of ChromeOS that ensures the operating system has not been tampered with. During startup, Verified Boot checks the integrity of the OS, and if it detects any unauthorized changes, it will attempt to repair the system by switching to a verified, stable version.

Verified Answer from Official Source:

The correct answer is verified from the Google ChromeOS Security Guide, which details the function of Verified Boot in maintaining OS integrity.

'Verified Boot ensures that the firmware and OS on ChromeOS devices are intact and have not been modified or compromised.'

This feature is crucial for protecting against malware or unauthorized modifications, thereby maintaining a secure and stable operating environment.

Objectives:

Maintain OS integrity through verified boot processes.

Protect ChromeOS devices from tampering and malware.

Google ChromeOS Security Guide

Google Professional ChromeOS Administrator Exam Questions